Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier: gdxbLbjJQ4dsOjD2Svmvz98BeQuoQjkaOl5daW8nkd8=
Subject key identifier: 2F:7A:77:D5:AB:C8:5B:C8:21:57:54:9E:15:38:7F:9B:9B:C5:68:9F
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial: 0198D5837ED92790A26D2C824037268B6AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number: 01D5
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: qxKBl7jeV9cDIAkPf0emfdwazcIIwNcXbgYh4mgjp10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7e:d9:27:90:a2:6d:2c:82:40:37:26:8b:6a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=2f7a77d5abc85bc82157549e15387f9b9bc5689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:e0:54:bb:5f:12:f4:a6:3b:da:d0:f3:4b:
26:53:3d:3e:45:9a:93:8b:25:0c:20:e1:b6:aa:dd:
6a:9e:a7:fe:54:04:7f:d0:23:76:0d:bb:19:bc:43:
ee:df:4d:a8:68:4b:12:6d:c3:70:67:8d:17:bc:df:
88:f0:e9:6b:f6:2d:21:d5:62:62:87:c9:e2:b2:20:
4b:3c:d1:f6:8f:b1:7b:a5:c3:72:15:03:1b:df:44:
27:ac:d0:c9:2d:f3:a9:00:5f:c6:21:a3:f5:27:35:
9e:3d:e6:29:ab:4f:01:13:33:1b:19:e4:9a:92:6c:
93:25:bc:40:25:e8:ba:57:2f:c6:e4:7b:dc:6b:29:
28:d0:94:64:f0:45:cf:86:b1:62:ed:8d:a2:72:8f:
09:6d:cd:37:15:2e:66:d0:b8:ec:fb:b8:a1:2e:6d:
ec:15:24:8b:fe:d4:b6:10:ae:92:2e:43:d2:fd:83:
b1:a8:10:90:10:d1:09:87:dc:b3:c3:e4:a6:9d:34:
b0:05:02:28:3a:3c:e5:40:fb:6d:cc:c7:88:84:44:
86:88:bd:5a:16:df:72:88:2b:6c:71:5d:d5:a8:56:
cc:11:d6:e0:66:8b:b7:5b:e1:6e:92:52:cb:0b:b8:
d1:f5:99:5e:34:1c:8c:88:aa:9e:1b:a0:ea:aa:83:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:77:D5:AB:C8:5B:C8:21:57:54:9E:15:38:7F:9B:9B:C5:68:9F
X509v3 Authority Key Identifier:
keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:79:e8:7e:65:e0:94:51:b3:30:0f:85:07:ba:f3:59:34:ed:
34:bc:7d:23:cf:20:89:de:2b:f5:bf:09:a2:ad:44:77:39:ae:
3a:d9:37:69:66:a8:c8:c8:cc:5b:03:e3:c9:28:05:d2:36:64:
cb:4b:9d:32:6d:ed:59:78:c9:60:53:22:04:de:5d:3f:77:21:
91:d7:08:63:e0:1f:6b:b8:15:23:5e:38:9e:55:e2:9c:fd:41:
97:64:4c:f0:3f:f6:3a:e8:a9:d4:61:6f:4e:4a:9e:44:7a:b2:
d7:4d:49:ef:26:85:72:bc:79:8c:40:5a:91:5e:e2:d2:5b:42:
7e:4f:d5:5a:6f:27:0a:25:2d:7a:12:de:fe:7f:90:82:c0:f6:
45:c9:70:59:c1:49:73:e5:c0:29:ec:fa:ad:22:35:f2:d4:c1:
1d:6f:dd:1f:4a:7d:aa:10:e3:a5:f2:60:e2:67:ed:90:18:3d:
f6:12:79:06:1c:0d:97:79:70:ad:b9:d4:c9:e2:a7:c9:09:53:
83:f2:1c:ac:86:d4:dc:63:5a:fa:1c:68:d7:9f:2b:3f:f7:98:
72:02:5b:4d:0b:a6:8a:0b:41:2c:5a:83:fb:c0:a1:b8:35:97:
5b:7d:e3:a0:f2:c5:f1:2c:39:27:31:10:6a:44:ef:31:ef:59:
cc:07:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:56 2025 by rpki-client