Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier: zO4V2zr2Z8iQ/Gi/o2j4GMuiLNLYHciuf7mp1tNS0eA=
Subject key identifier: C8:0F:E7:DF:7C:F4:DC:9A:E1:55:7C:2A:E0:BF:1F:82:FB:EF:95:06
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer: /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial: 0198D65F8E58A08CFCDF692FBEC5A46DC4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: I+GADO0gK0OVX8qCVhdWYy+1NmCEAHe4LPm7oBIkqD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8e:58:a0:8c:fc:df:69:2f:be:c5:a4:6d:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=c80fe7df7cf4dc9ae1557c2ae0bf1f82fbef9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:f2:91:10:44:e5:11:59:80:81:4a:5b:c8:
20:ed:14:62:94:47:25:3d:f0:e2:ac:2b:ac:8a:8c:
8e:a8:89:19:a2:b0:5a:71:db:32:38:19:24:79:61:
5b:5c:88:f0:72:0f:63:2f:a3:30:2d:1a:ee:35:f7:
1a:9f:5e:6b:24:9e:a0:e2:48:5f:f4:0d:3e:de:8f:
a2:e9:1d:0f:6a:d8:0a:a0:b3:80:c5:8c:4e:21:db:
19:5a:d7:a3:62:9d:6f:f4:d9:56:8e:8d:b3:6f:22:
bb:96:8e:d5:d3:07:d3:25:7b:49:be:45:55:e0:0f:
95:f7:4e:bb:a5:af:e4:15:c9:c9:63:4e:94:ce:c7:
dc:d1:b5:f7:1c:ed:6d:a7:74:0c:ab:aa:ee:47:97:
b1:36:8d:0d:c9:71:8e:c3:3c:cc:75:87:24:f4:8e:
ba:3a:ac:4b:c0:16:59:bd:61:b5:85:b0:2f:27:c8:
ac:cb:a0:c9:8c:5a:ec:95:7b:a6:6c:0e:ad:c7:e4:
71:72:09:c0:62:40:8f:72:38:06:f4:d5:df:9f:cf:
69:10:c4:4b:ba:c7:01:66:66:a5:00:58:d8:f0:4c:
32:4a:d0:5b:7d:b6:a3:41:96:cd:de:86:dc:0a:29:
58:cb:d6:17:95:83:de:b3:52:75:b4:53:ad:98:77:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:E7:DF:7C:F4:DC:9A:E1:55:7C:2A:E0:BF:1F:82:FB:EF:95:06
X509v3 Authority Key Identifier:
keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e1:bb:bb:32:07:d6:78:69:29:a2:11:b5:b1:38:3f:bc:71:
60:e7:a5:1d:36:95:b0:16:3b:c0:d8:e9:77:0b:dd:a3:d2:8e:
4d:07:79:05:e7:43:96:50:a3:28:12:f4:b1:15:be:29:34:71:
8c:4d:57:96:a6:16:a7:b5:0d:68:9b:5e:59:d9:13:6f:19:1e:
0c:f0:35:4b:73:95:ca:40:19:c7:9c:c8:c0:d3:c5:41:32:b4:
8e:2e:c9:11:f7:00:ba:ac:aa:80:d9:0e:fc:38:53:57:df:78:
c2:f8:6b:8e:5d:42:52:3f:b4:04:02:9d:51:7c:28:79:65:71:
e9:69:e2:8a:19:fc:e8:92:12:2e:4a:c5:63:fc:37:78:2e:13:
50:d8:87:42:53:8d:c5:a3:8b:2a:c3:10:c7:81:57:f7:19:56:
cc:6b:36:51:bc:73:a4:af:f8:85:20:ea:22:8b:c6:8e:f9:56:
17:63:15:e5:62:89:4d:08:7c:c7:c1:5b:de:a6:da:e2:cc:81:
c0:90:82:b8:93:98:68:0b:35:2d:f7:a4:04:64:af:39:49:8d:
ec:4e:95:6e:61:da:4d:13:5a:db:46:d8:36:7a:28:87:b2:3c:
46:e0:6a:bf:91:7e:3c:fc:12:af:08:19:47:91:c4:c0:00:ea:
12:71:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:28 2025 by rpki-client