Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: Zu/0JMnUqjSy1ve3ZgO0TkT43u1XJiTPaUh1Q8ZbbQU=
Subject key identifier: 4A:B6:24:2D:87:73:1C:F5:76:15:94:19:2B:F9:17:96:BA:BD:12:9A
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 0198D5BB9CDC02FA01B52AD1F8BF5C0712B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0C08
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: kCCHsGD0k1R18XgqblPpsysvFGZrOLPNjBeQLpu7CJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9c:dc:02:fa:01:b5:2a:d1:f8:bf:5c:07:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=4ab6242d87731cf5761594192bf91796babd129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:5b:e1:ab:6e:f3:f0:c0:aa:8d:1a:07:08:
c1:6c:26:ef:23:8f:74:f9:48:f1:07:60:b0:6e:c4:
ab:ef:5b:e3:48:c8:ae:9f:de:44:9a:1a:8c:c6:8b:
f4:4d:2e:fa:f5:b4:8a:78:42:d2:0e:1d:74:d8:9f:
89:52:15:53:c9:12:bb:c7:db:d9:81:fb:86:6b:c1:
f5:67:5e:fc:f9:cd:9e:8c:ec:2c:22:11:72:3d:f6:
a2:bf:65:1d:74:1c:98:9e:76:4e:d6:27:9a:38:63:
33:83:5f:f0:5b:fe:d6:a0:ce:3c:75:4f:ab:54:cd:
58:32:c6:06:4e:ca:61:56:7e:ab:32:43:79:9a:94:
13:15:f5:1f:90:87:6e:2e:b8:93:1e:75:87:da:c6:
11:67:41:f5:50:4f:1d:86:84:f6:3c:9f:b7:6e:bf:
a2:cf:6d:14:43:7d:df:5d:aa:4a:01:5d:52:45:fd:
31:e9:c2:40:74:7f:ce:70:a9:0f:0d:fb:ef:b7:75:
cd:19:94:6e:32:c2:8d:9b:e2:32:c7:16:73:c8:cb:
5f:3a:4b:00:67:36:7e:ee:a7:d0:c2:fd:a2:e1:a8:
2d:13:63:53:5f:0a:fb:6d:8f:a4:50:27:85:5d:d3:
ee:47:75:bb:01:26:99:76:2f:6e:83:78:23:a5:d7:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:24:2D:87:73:1C:F5:76:15:94:19:2B:F9:17:96:BA:BD:12:9A
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:e2:ee:66:6f:80:47:dc:f2:2c:b4:96:bb:d4:54:dc:89:
80:04:54:64:71:22:25:26:bc:d3:57:aa:c0:6b:86:ac:13:5a:
e2:dd:8d:c3:ed:e9:bc:f5:b3:c7:aa:a8:55:b2:80:6f:15:fe:
3d:12:63:71:59:47:eb:c2:b8:7a:01:1b:4c:d4:90:c2:95:0d:
57:fa:44:2f:58:d4:4c:67:9d:f9:3d:62:7d:99:2f:a5:4d:7e:
e3:ba:d0:3b:e5:a1:1a:aa:9b:da:21:5d:01:2c:fa:a4:80:68:
36:c7:5c:1f:c0:c7:62:af:07:94:48:42:8e:ac:3c:20:b9:69:
5c:e4:93:83:b2:2b:37:0a:e7:ca:1d:f6:1d:98:e4:e3:d6:56:
48:54:a3:85:89:85:65:69:3b:12:35:85:5b:ec:61:25:c4:63:
2f:dd:e5:90:a0:28:57:3d:09:61:24:bc:7a:93:fa:12:33:62:
56:fe:fc:65:0a:f0:02:de:41:65:f6:b3:52:81:3b:f6:8d:44:
35:3a:1e:40:6c:56:7b:c2:58:16:ff:5a:7c:e6:0d:9e:77:73:
b7:43:49:b5:1a:de:b4:e9:66:84:27:de:54:39:fb:e3:16:89:
fa:da:6f:0d:2e:67:c3:31:90:6d:5f:11:04:34:21:ab:45:db:
74:d5:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:27 2025 by rpki-client