Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: YPkZ1DIqaWTorVrXqE37URORfKr2HlJeUh+3xnec8iI=
Subject key identifier: 0A:44:16:C8:08:A0:1E:AC:B0:58:B5:2F:E0:1A:44:9D:B1:AE:77:AE
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 0198D65F2CAB5D2BCE6DB240D96DE9DD249F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 09A6
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: Huo7G+TKQKmcUz4eBHqeE2ck6ruFH6SBJuHcMKbAcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2c:ab:5d:2b:ce:6d:b2:40:d9:6d:e9:dd:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=0a4416c808a01eacb058b52fe01a449db1ae77ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:ab:2e:ac:55:53:54:3c:dd:91:12:7e:85:
5c:55:19:ca:00:6b:4a:01:62:a2:ad:b7:fc:cf:7f:
01:1e:ed:f7:18:e2:87:60:09:24:4b:76:ff:5c:59:
41:41:94:60:30:60:6f:5c:c6:d3:01:e4:02:ab:e2:
b1:d7:db:ac:9d:4c:3a:5a:ba:25:e9:83:b2:13:f6:
4f:27:1c:e1:da:65:40:c6:7d:cb:ea:f6:57:43:b8:
8c:76:c2:d3:3c:ad:50:e7:14:90:7d:f5:2b:c4:05:
b1:bd:8b:5c:20:2a:47:43:a6:27:35:5b:f9:74:1e:
93:7d:b3:64:06:34:d3:e6:92:ea:9f:c3:82:fa:fb:
a9:83:da:86:51:b2:fc:4c:8e:fe:43:a8:ab:75:7c:
c6:ad:48:b5:2c:15:83:ee:33:0b:0b:78:70:57:bc:
73:56:85:d3:a7:98:4e:b8:5e:9a:2f:18:e7:84:9e:
bb:5c:58:8b:c0:64:bd:fa:82:9f:62:51:fa:ab:54:
73:63:d8:7b:48:00:9e:f2:47:9a:51:4c:80:37:44:
61:90:4b:2a:62:d5:31:e2:83:f5:01:3c:4c:ea:33:
d8:42:26:fa:1c:67:a7:64:e6:51:84:50:ce:f2:32:
6d:36:40:40:5e:f9:73:6b:06:7e:99:82:2d:ac:5f:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:16:C8:08:A0:1E:AC:B0:58:B5:2F:E0:1A:44:9D:B1:AE:77:AE
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:58:2b:8f:84:e2:f0:d7:fc:0b:dc:42:aa:52:13:7a:15:
0a:63:b8:96:d0:f7:ee:66:31:fa:eb:bb:5a:0e:ec:9d:0d:a0:
e8:7f:99:7d:50:c3:c3:df:30:f6:bb:c4:39:ea:46:c2:3c:f8:
d3:78:29:ff:33:ee:8d:36:7e:10:6a:e5:3e:5a:c8:c2:6e:7f:
c6:6a:d9:51:d7:03:84:0d:0a:2d:25:ca:9b:5d:fc:92:f6:ab:
a9:88:11:97:f5:ad:83:5a:ac:53:79:36:c8:e3:15:be:c7:cb:
c8:04:02:06:a6:56:a1:e6:c6:e9:d8:59:eb:3b:79:4b:94:b1:
07:d8:4f:c0:c0:47:1f:84:07:d3:3f:8e:77:6a:ba:1c:79:b7:
b7:03:e0:e8:e0:c4:0e:dc:bb:10:de:8d:93:6b:58:b7:c3:d1:
41:7d:65:85:94:56:77:ac:75:8e:dd:d6:2d:4f:12:f2:ba:46:
c9:5a:95:a7:4f:8e:d8:00:3f:64:d2:af:bf:97:c2:04:0b:10:
25:1b:ad:66:39:d4:2a:af:d4:6b:d1:c4:23:33:0a:6f:59:60:
c5:38:da:ad:28:92:df:bf:f4:95:68:2b:0e:be:29:18:39:5e:
7a:61:8e:18:d2:9e:80:ab:55:a4:37:39:18:6a:94:21:db:ab:
40:d4:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:25 2025 by rpki-client