Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: nmxvn35O8SYHW3jybmGz2ZI9PSxpPbHnlMQjMJZLIC4=
Subject key identifier: 1A:BE:FA:8D:0D:3A:7D:F4:05:56:69:7B:6E:F4:44:35:EC:2C:9F:2D
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019921B1F15E3C694FD39CEF3B677995C8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:13 +0000
Manifest this update: Sun 07 Sep 2025 01:02:13 +0000
Manifest next update: Mon 08 Sep 2025 01:02:13 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: t5xdoux1CZkRxz9mZwMOfzFHCX9jMdxK5qT5JGdanUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f1:5e:3c:69:4f:d3:9c:ef:3b:67:79:95:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Sep 7 01:02:13 2025 GMT
Not After : Sep 8 01:02:13 2025 GMT
Subject: CN=1abefa8d0d3a7df40556697b6ef44435ec2c9f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:cd:93:50:bd:80:72:31:0c:60:57:bc:af:
b1:e7:9d:cc:46:64:de:02:b0:d8:ad:54:6a:00:51:
83:10:a1:09:c4:64:11:5d:67:c5:60:12:7f:f7:00:
66:7b:4b:bc:6a:e5:e6:ab:b0:37:54:cb:27:12:e7:
65:10:38:8c:18:6c:61:a0:8c:8d:c3:7b:fc:1f:20:
f0:19:2c:f2:50:88:ba:d8:2a:32:7e:66:6a:5c:af:
45:9e:e5:21:4b:72:1c:fa:83:10:44:67:72:1a:12:
1f:13:e8:c2:39:0b:0d:5b:42:31:e3:52:9b:da:80:
be:0b:7a:c7:5b:1e:6f:9b:90:1b:db:c0:8e:04:64:
1f:8c:68:78:93:fa:6d:4a:27:3f:d1:5a:a8:fb:e1:
4e:60:36:e2:57:69:72:7c:51:9d:0a:e7:5a:55:8f:
1e:9d:07:a0:a3:5f:20:ef:d5:af:b8:da:52:27:7b:
82:a8:00:8a:94:af:93:30:92:da:13:1f:8b:bb:42:
ae:f7:28:8d:bb:9b:ae:e7:6c:2b:38:63:2b:00:1a:
a2:6f:f2:08:d6:06:de:a8:d0:d0:f4:34:d8:5e:6b:
32:0f:bc:89:09:63:06:b1:07:4c:88:ba:16:79:2c:
bd:67:d4:4a:ca:47:3a:fc:ad:c4:d1:93:8c:71:d6:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:FA:8D:0D:3A:7D:F4:05:56:69:7B:6E:F4:44:35:EC:2C:9F:2D
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:e1:95:97:6e:67:fc:2a:4d:e3:86:c6:40:0e:8d:79:e3:
73:be:e9:4a:3e:e0:ae:ca:be:c2:11:e6:16:e7:66:c8:d6:8b:
ad:b7:b2:af:f4:2b:4f:d1:3f:bc:fa:ed:43:ba:66:dd:19:78:
15:d5:23:e4:b0:cd:b6:04:c2:fe:f5:90:fa:9c:c1:da:b8:c3:
4c:bd:84:99:10:48:0a:31:c3:ff:63:25:1e:07:14:28:70:de:
9c:8d:e0:51:81:46:38:2e:f8:06:1c:dc:9b:40:76:81:7b:50:
a4:d9:cf:a6:e5:c7:db:98:d8:51:8e:3b:b1:af:97:03:1e:77:
c6:7b:d5:34:04:d4:7b:48:0b:d8:dd:81:e1:56:1a:6c:67:1c:
85:1e:63:9e:5e:aa:11:7b:dd:bc:ca:75:3f:dd:b7:8f:d0:8e:
b8:b6:e2:b4:9e:c8:96:5e:ea:ae:77:03:49:45:9d:c7:6d:50:
79:f2:f8:57:41:2b:9f:8a:1b:7e:75:2e:74:ba:8d:2c:ed:63:
ab:de:48:e2:8b:b4:c6:64:23:8c:b2:aa:a6:ad:c8:ef:54:78:
53:52:79:70:69:80:40:fb:18:ea:c0:b4:cc:82:b4:1d:3a:ff:
24:bd:db:67:68:e7:d1:cd:b6:7a:c1:9d:c7:c1:bd:d0:c3:71:
b3:f3:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:17 2025 by rpki-client