
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: ZWLS3tfJPetSYBAh6yV0vCxL9dFqoJnckjiOxg/udkQ=
Subject key identifier: 31:77:9B:97:6F:75:B3:00:7B:72:22:FF:E8:FF:4F:E0:FE:29:3B:C6
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 019921B217C004856BC6F172F90FB0ABE553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0F44
Signing time: Sun 07 Sep 2025 01:02:23 +0000
Manifest this update: Sun 07 Sep 2025 01:02:23 +0000
Manifest next update: Mon 08 Sep 2025 01:02:23 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: Si+h6zCcBFewFYQCExUQFWndd/AbsMRAHvKdNN4/P00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:17:c0:04:85:6b:c6:f1:72:f9:0f:b0:ab:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Sep 7 01:02:23 2025 GMT
Not After : Sep 8 01:02:23 2025 GMT
Subject: CN=31779b976f75b3007b7222ffe8ff4fe0fe293bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:c2:84:e6:d8:91:9c:6d:d0:b8:bd:fc:35:
7f:18:b9:0c:b7:b8:78:dd:9a:d4:12:04:99:9b:89:
3e:52:ea:26:50:d1:ae:39:57:c4:81:87:a9:61:07:
e4:e3:77:ca:33:37:0d:5a:39:69:e1:61:ac:b6:c0:
77:f6:80:15:6b:9b:78:fc:7c:d9:ef:83:5e:8a:5a:
4a:f7:2c:a5:09:1a:d0:9f:34:9b:8f:bc:ba:fb:07:
c5:81:29:37:d7:b7:9a:d3:dc:ca:5c:98:4f:b3:d0:
a2:bf:b3:49:a9:88:c0:af:a9:37:d2:68:0a:a2:1e:
82:23:a6:3b:e8:d8:89:6c:59:f3:71:03:21:aa:4e:
c9:ee:df:f6:3a:3c:67:14:4f:97:ec:a0:0e:52:d1:
b8:3d:c8:73:c4:ee:0c:17:93:21:64:7d:4f:36:cc:
4d:1d:84:26:86:67:99:b1:a7:f6:b5:75:d5:35:4b:
0f:d6:99:b2:bf:bc:db:e6:f4:f4:2b:75:e8:3d:94:
51:7b:35:ff:a6:90:4b:3d:1e:b8:77:0f:bf:d1:4c:
3e:23:39:34:d5:9c:26:b5:31:5c:2a:b6:5c:b1:90:
3d:2f:1d:67:6d:56:6b:26:c6:98:3e:8a:ab:d1:fb:
b1:b2:fb:da:89:a0:41:9e:3d:fa:e8:c8:b2:ff:71:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:9B:97:6F:75:B3:00:7B:72:22:FF:E8:FF:4F:E0:FE:29:3B:C6
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cd:b4:92:82:66:30:b6:21:de:7a:a3:bf:39:c4:a2:68:99:
d5:cb:a4:52:d6:9d:44:de:70:0f:cd:1c:2d:dd:ed:1e:65:17:
b7:5f:41:e5:c3:ec:c2:d1:a5:3b:ef:8c:14:3c:3a:31:a0:8c:
87:9b:ab:9c:98:52:65:d0:a1:7c:92:92:41:55:8b:6a:3f:e8:
29:d6:7a:b1:f0:24:f0:e0:b6:f5:92:57:35:5c:6d:fd:bc:c0:
3d:3d:d6:99:25:12:31:25:6f:01:f0:49:e7:f0:a8:b3:c6:c9:
48:b0:35:46:97:ee:ab:3c:3b:39:aa:c1:a8:c4:9c:43:c5:f4:
4e:a6:95:2a:33:c5:08:63:ba:e9:69:c0:19:6c:a5:82:c7:e7:
c8:4e:a0:bf:96:34:9e:5c:58:49:cb:24:71:16:78:08:42:12:
e1:3c:9d:80:94:ae:e5:2c:c2:29:f7:a7:d4:1d:4f:78:83:5a:
38:c9:81:95:c0:96:27:9f:a6:28:89:5e:e6:4d:80:54:af:f1:
9c:88:ea:90:fd:0e:a7:6f:b6:ab:1e:2a:4c:9e:54:d1:26:3e:
5a:5c:a1:84:b6:8b:9d:8d:df:4e:48:33:d7:47:79:22:29:e7:
d8:98:d7:2f:3a:fc:d5:b4:4f:0e:c3:5e:1e:2f:44:f1:b2:21:
c5:10:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:41 2025 by rpki-client