Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier: N1nVUioWk9Dl5jPtDAaQQvYlfxROCey/TfXWw638Dwc=
Subject key identifier: F2:B7:C7:52:2C:3D:D0:B2:8D:8D:33:85:00:05:50:F7:EB:63:BD:E4
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial: 0198D660053AB68C8F7B0DA3366D2D014726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number: 14B9
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: aXMI9U0nlwNUL2HTJUElnInDrbGU91WZoFdQlD9nGiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:05:3a:b6:8c:8f:7b:0d:a3:36:6d:2d:01:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=f2b7c7522c3dd0b28d8d3385000550f7eb63bde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:32:ec:87:5b:c8:a2:d1:96:48:f3:aa:ae:
6e:d3:ce:5a:95:9c:7a:ef:94:4f:04:e8:7e:dd:4f:
42:0f:25:13:c0:f8:8e:99:d7:bb:9e:33:0f:1b:05:
42:08:cd:20:e5:df:b0:8a:10:64:a0:7c:39:51:1c:
0a:b2:33:1e:67:0c:c7:5b:f7:9d:7b:6e:a8:58:d8:
37:eb:e1:7f:d1:d3:02:97:6b:eb:a1:b7:7a:a8:89:
8e:9e:00:23:18:16:ba:60:6c:a0:96:3a:f9:f4:d1:
93:eb:8c:0a:84:5b:e2:da:ef:24:08:fa:5d:8d:5f:
14:23:bd:90:70:38:99:00:6f:79:f8:55:a1:f8:53:
3b:b0:04:42:39:3a:5b:fa:01:06:79:55:7c:96:bc:
76:bc:e3:79:db:f1:e8:c1:57:7f:fd:a5:84:70:3b:
33:d0:37:5f:e1:b5:e1:77:63:ea:3c:6e:cf:5b:3b:
20:00:50:41:b9:bc:70:e2:da:d7:bd:9c:e0:51:95:
52:03:ce:46:27:cc:9d:08:26:06:21:2d:37:76:d9:
3f:87:df:64:cb:04:b0:b8:11:c6:e6:32:cd:b1:c9:
82:75:02:87:f2:6d:fd:69:23:9e:37:d4:73:31:38:
c5:41:21:92:b1:c6:d6:26:e8:34:06:19:0d:b7:3a:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:C7:52:2C:3D:D0:B2:8D:8D:33:85:00:05:50:F7:EB:63:BD:E4
X509v3 Authority Key Identifier:
keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:54:0b:7d:14:27:22:be:66:a9:04:f1:86:fc:57:2a:09:a3:
4d:31:70:c2:d9:1f:b1:9d:c9:f8:aa:36:12:fd:5d:db:db:7a:
db:32:b6:6d:f9:01:f7:e1:56:a9:c0:64:95:f5:d1:2e:1f:f8:
0b:30:e9:d9:d6:d4:bf:40:e6:89:5b:3b:61:f1:dd:38:24:c9:
b0:fd:11:63:7d:a2:86:a9:7f:84:fe:89:46:7c:e5:ff:5f:f5:
98:40:64:7c:66:99:36:4f:9c:38:93:50:7b:83:2e:14:a7:0a:
9a:85:b8:ca:99:96:6b:4d:e2:2b:50:8a:68:cb:12:ab:35:f8:
6e:36:92:10:83:d6:9e:92:22:72:56:b8:5f:67:81:fe:df:ea:
e7:4d:03:48:46:16:a0:af:b8:89:39:8e:9a:6d:23:a6:62:e1:
6d:68:04:e2:f3:5e:37:4d:6a:09:d1:9c:71:a8:a3:5a:d6:2b:
00:27:50:fb:c1:25:c4:9c:82:60:17:36:7a:a2:f0:5d:49:58:
0a:9b:f3:0d:ea:83:ce:58:d1:4d:3c:fd:f0:c4:27:fa:00:0c:
90:65:a8:45:c3:df:40:3e:e9:a0:e8:7e:0a:6a:a1:3d:cd:27:
2d:c5:78:24:e9:91:57:64:d7:35:c2:97:dc:86:5e:3e:5e:12:
c4:6f:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:33 2025 by rpki-client