Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: RKpTvv+ZDGXe0gTBxH2m2VBTqpUM+8FofsRDqHpGnu0=
Subject key identifier: 18:0E:9F:8C:84:4F:9F:D1:91:82:4E:4E:D0:EE:F4:C6:47:2E:A0:30
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 0198D5F11C253DC09DF0E5D0F03738A0EBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 1074
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: 22dsMlJuqYzs5pRDJpEEWMs+nZbBE3y3OeLWT7IGSLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1c:25:3d:c0:9d:f0:e5:d0:f0:37:38:a0:eb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=180e9f8c844f9fd191824e4ed0eef4c6472ea030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e0:d6:0e:cf:59:a0:8f:72:83:66:33:a8:11:
6f:86:dc:5a:94:f8:79:1f:15:80:7d:b6:ff:b3:3d:
a5:e0:b0:82:b6:20:ea:79:8e:41:0c:14:3d:c9:e2:
26:70:12:83:df:ee:b0:d6:b8:ce:aa:f3:7f:93:68:
eb:dc:ac:3d:b6:45:c2:fa:0e:96:52:b1:a7:47:4c:
2e:f6:27:92:94:c3:81:99:1e:46:f5:24:97:14:f3:
5c:8d:15:ac:6c:80:ee:06:03:9b:85:49:57:96:81:
44:dd:ae:a6:af:6a:8f:76:05:27:5c:17:72:7b:2a:
df:26:5f:6b:d9:de:09:14:89:b8:09:64:9e:cd:f5:
2f:b8:c2:a3:69:28:a9:4f:63:c8:0a:c5:6c:01:34:
b3:7d:0c:41:2d:c6:18:a6:ae:ae:66:90:27:b4:ec:
16:ed:da:0f:f6:08:8b:32:24:d0:d5:1b:a0:c8:36:
75:57:fb:e2:76:91:3b:54:45:fb:90:73:56:2d:67:
a3:dc:02:f8:9f:cf:5a:ad:fb:d0:e4:75:44:f5:5f:
0f:7f:f4:e5:20:37:99:2f:0a:34:1b:2c:1a:61:b8:
e0:ac:73:ec:9d:a5:15:00:05:8c:83:98:af:65:49:
41:dd:5c:a0:c4:7d:40:99:0b:2f:ec:12:95:72:0a:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:9F:8C:84:4F:9F:D1:91:82:4E:4E:D0:EE:F4:C6:47:2E:A0:30
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:07:fd:47:03:7a:ed:10:2f:c1:ca:50:e0:e9:61:a1:3c:d9:
67:1d:35:92:a3:c9:df:eb:7a:6f:04:86:ab:df:b0:f1:c1:30:
58:14:65:43:fa:b9:1c:67:39:d6:c6:c6:41:ad:74:48:e0:1b:
d8:e7:d4:69:04:7e:9f:6f:b8:b4:9b:48:26:e4:cc:fe:2b:8c:
60:4f:dd:d6:58:4a:d8:2d:b0:39:e6:03:f7:2b:57:d0:c3:97:
99:30:5c:67:03:f4:a5:df:b1:2f:09:83:0d:aa:07:02:5e:8f:
bc:c1:40:b4:a2:08:c7:de:8b:4d:a6:87:d6:3e:c2:59:5e:3e:
af:1b:0a:9b:0c:bd:f7:bf:a1:7f:19:b1:3c:45:e1:20:54:f9:
04:3a:7b:3e:8b:af:f3:40:4e:8f:5c:44:a7:52:8b:12:a9:aa:
e8:ac:6f:d0:d6:b8:d0:87:6a:9a:81:d5:e7:79:bb:47:a5:24:
6e:a9:ca:36:f0:ce:b2:a4:32:93:bb:f9:53:33:a0:8e:83:22:
de:c8:59:0a:72:6c:8d:69:e9:b2:40:3e:78:b9:c1:b7:33:82:
e3:d4:ef:9b:bd:e9:21:5a:08:51:91:fd:df:ab:cc:f0:44:77:
db:06:f3:87:5c:0e:6c:c3:c7:fb:11:09:d5:4c:bc:a9:65:e4:
a9:ed:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:03 2025 by rpki-client