Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: cmD/+0Sql6rMr8z9B0TGgqEW88l1DpfVbFlOxVIw8ig=
Subject key identifier: 93:CE:2A:00:95:D6:B4:65:A5:A7:0D:92:69:6F:17:E8:9E:91:A8:36
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 019923A0451B09748FF5CF13B875370BCEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: DE
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: bv2deXHiXAi8iXebnngMVQOPqOpVkVxYyKDgHqDrEi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:45:1b:09:74:8f:f5:cf:13:b8:75:37:0b:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=93ce2a0095d6b465a5a70d92696f17e89e91a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:5a:03:9a:7d:7b:72:34:6e:9c:83:c3:b7:
ef:ea:dd:a9:69:09:78:27:fd:e0:ec:62:c1:b6:d3:
39:fa:a6:8f:6d:5a:ff:91:05:e9:3c:fc:25:c8:3c:
a4:d6:dd:08:8d:87:3b:12:b5:2d:ca:09:6e:b7:2d:
5d:d5:dc:cb:15:43:11:a9:eb:4d:0d:76:fb:5f:64:
6f:28:eb:d4:55:3f:d5:62:8d:b0:6c:d8:02:6a:2c:
03:a1:f9:cd:9b:6c:bd:29:4a:b3:f7:a6:5e:ca:d1:
7b:e4:b9:d1:57:c3:d8:53:73:08:7b:2b:4e:f7:0a:
c0:6e:2d:60:68:3f:63:32:88:c9:34:bb:22:ff:f2:
9e:54:1c:5f:b7:6d:30:60:dc:ef:fa:14:42:68:05:
0c:ba:29:14:ac:bc:19:22:d0:2c:3b:6b:7e:23:80:
ec:e4:d1:85:e4:e2:73:fa:59:77:1f:73:04:2f:33:
4f:a7:ea:f2:f4:c2:28:f9:5d:43:7e:1b:7a:cf:0a:
96:e1:8a:7b:89:92:b2:15:89:91:f2:30:e7:13:2b:
6f:d3:33:ac:3d:82:70:0c:4c:2b:fd:a0:ea:24:d2:
c6:71:2f:99:c7:05:11:8e:24:23:ac:f1:e9:24:89:
44:4b:1d:7a:ce:7e:7b:cc:06:ed:9b:53:ff:ff:9a:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:2A:00:95:D6:B4:65:A5:A7:0D:92:69:6F:17:E8:9E:91:A8:36
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:41:12:73:fc:a4:c8:a5:36:bf:fa:95:9d:a8:e4:e8:e1:
25:5d:91:a2:25:d8:d5:c7:18:05:68:57:8f:71:49:55:4d:cd:
c9:44:1c:89:60:36:f1:2d:e5:c5:e7:f5:65:9d:08:86:51:86:
9c:d9:69:ab:8d:bb:2f:75:c6:d1:1a:3f:e7:1f:5f:5f:0c:0b:
b7:f9:ee:a1:fa:4f:69:83:4d:9f:5b:a7:bd:09:2a:77:0d:74:
04:e4:c2:b0:76:fc:98:d2:53:49:87:da:e5:ae:fc:2e:5d:59:
d7:e3:e5:9a:f2:55:a8:93:f4:e7:b9:09:1a:71:e6:fe:c7:0b:
32:6f:b7:7c:ca:7c:f4:cd:52:a9:38:71:61:72:53:1a:5b:81:
1b:6b:e2:99:18:1d:ed:6f:17:65:25:d0:50:b2:4a:65:37:17:
91:48:28:f0:55:13:7b:fa:c0:57:53:48:99:88:68:33:b8:29:
5b:b3:8a:d1:7f:d4:4b:db:1a:df:5c:66:9c:31:96:86:14:19:
12:da:51:ba:e4:1b:b6:a3:82:b0:b0:bd:06:ef:01:28:6e:26:
d6:32:eb:9c:fc:b5:f0:e7:64:ce:fb:6d:f1:10:e9:15:20:59:
63:82:92:b5:7c:d3:9f:b2:36:50:5f:d8:de:d4:2d:6b:b3:a8:
05:18:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:46 2025 by rpki-client