Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: yK471htQzPxsMgBDid+IdTJ3kfeMSiP3CsbDNgQ0tr0=
Subject key identifier: 84:52:D0:2D:41:69:A6:A3:B1:27:C1:71:43:94:18:81:7C:7E:8B:B2
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 0198D515D9CFBC09D0E96E58918ADCD06633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0CEC
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: 3HOAnGUsluFF7fG9US7p2GhkhpmjmWgS5Gk1PJHIRAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:cf:bc:09:d0:e9:6e:58:91:8a:dc:d0:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=8452d02d4169a6a3b127c171439418817c7e8bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:95:23:c8:30:34:71:f5:5f:40:ab:27:92:
0a:9c:33:ba:f4:e5:7a:95:3b:09:3c:d6:86:12:21:
53:1d:c2:7e:ab:18:94:83:f4:50:ad:9d:01:f7:4b:
75:35:e8:1b:6e:e5:1d:03:7b:6a:35:b7:47:ee:54:
37:12:90:18:69:b7:1d:97:75:19:99:71:d3:f6:13:
c2:8d:32:91:41:67:16:25:8b:f7:fe:d0:ef:d0:28:
d0:c0:bf:36:8c:85:1f:a9:0c:a1:ff:62:2f:f6:11:
ea:07:28:8e:80:4f:3a:a4:93:a2:3b:2a:d1:ad:1f:
e5:6b:79:e1:5a:29:f5:f1:60:ac:c8:70:0d:8c:0a:
35:a1:a8:6e:4f:b1:16:9a:54:38:44:b6:bd:ab:5c:
8b:83:2d:ac:58:b6:71:0a:7f:23:31:a0:41:06:5a:
c1:d7:ac:da:6c:2b:9d:fa:94:1a:a5:ab:e7:3c:16:
09:af:03:65:f6:32:44:ed:12:13:a2:91:cf:88:67:
8a:92:b5:05:67:1d:fa:f2:ee:d4:3e:3f:11:34:59:
25:77:ae:d7:e7:2b:29:65:d4:0c:80:79:56:8b:dc:
19:a4:75:1d:4a:ba:db:3f:65:e3:1f:69:59:9a:09:
c8:01:f8:3d:bb:bd:f6:8b:e3:21:17:04:91:38:20:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:D0:2D:41:69:A6:A3:B1:27:C1:71:43:94:18:81:7C:7E:8B:B2
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:91:4c:e6:6a:fa:fe:0a:5a:81:8f:69:97:12:b0:26:39:c5:
bf:c2:5b:46:ba:82:2e:a4:33:a9:68:96:db:3c:37:60:a2:e0:
a5:9c:da:ef:89:34:fc:53:bc:94:90:5f:1b:8c:52:cf:cb:75:
2e:e9:df:22:4f:5b:4b:ca:e5:35:b4:d7:c0:76:1d:dc:f4:cb:
7d:b0:9b:a5:18:ab:cd:1e:98:15:a8:ed:d9:68:f9:71:24:94:
d5:50:20:8f:10:0e:32:d4:09:d2:a9:a6:30:6c:10:ea:a9:35:
07:3a:b4:c9:8f:36:98:c7:85:7c:6a:f4:fd:b1:82:42:b1:f9:
d7:b6:d9:4d:75:f3:c0:da:b1:c0:00:1c:be:fc:b8:f8:a0:9d:
f9:41:c1:97:93:38:a2:26:87:f1:12:25:cc:b3:2b:ee:ca:7d:
6e:d5:77:93:e4:81:aa:20:f2:7a:fb:70:2e:08:a7:bd:62:ce:
78:cd:1f:59:1c:be:aa:b0:a6:d2:1b:f7:38:e3:69:93:66:c5:
9a:32:82:63:cf:ff:07:14:c1:e7:60:1b:db:a6:2a:2c:be:22:
b5:c6:26:6b:84:70:8a:de:c2:44:f2:07:ca:5e:63:99:c5:50:
41:5a:20:98:08:3d:9c:84:cb:a8:e0:ea:c0:90:26:bb:bd:ea:
61:60:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:07 2025 by rpki-client