Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: /Kf5B2vlqRyZ6HhwVgcF9srYtWWePoBmpBo4YsPgWcs=
Subject key identifier: 02:4D:DE:77:13:8A:95:DB:65:47:33:07:6A:4F:C1:27:A3:C4:8C:CC
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 0198D65F51413D8E97ED7D0DA45E9A31C7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0D1A
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: TO3vlgZPX+he9wVGH0lQahlsGBELnSfgxz75Y+hJCH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:51:41:3d:8e:97:ed:7d:0d:a4:5e:9a:31:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=024dde77138a95db654733076a4fc127a3c48ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:df:f4:f0:f7:62:65:b5:d6:ad:f7:0c:b8:
43:d1:3f:96:73:d0:f0:3c:73:97:39:8f:0c:85:26:
40:7f:ac:c0:2c:0a:f8:eb:4a:d2:65:00:8c:f7:b9:
ce:23:06:b4:33:13:ff:1a:3d:e2:47:ac:69:0a:cc:
48:9c:2e:fa:07:73:1a:62:0f:9c:c2:4e:8c:a8:f3:
a7:d1:b8:0e:20:a0:c2:fe:22:5c:df:67:9d:c7:e9:
1a:3c:76:a7:d8:7a:77:cf:ac:f8:db:3a:3c:27:6b:
18:bb:f0:b0:ed:0b:7f:7d:ea:df:20:29:70:26:b2:
2d:27:b4:86:13:81:a1:e4:70:5f:1d:08:18:b3:cc:
a2:37:71:21:72:5e:23:17:29:92:f0:57:ea:7f:17:
63:dc:1a:82:16:46:c1:48:f7:6f:b7:54:1f:b3:d6:
16:d3:61:02:d2:62:1f:cc:a8:1b:ac:21:f2:1c:51:
7e:48:ea:c0:f0:5f:5f:2f:35:c0:33:91:8a:cb:b5:
c7:c1:cd:92:db:60:41:01:01:6c:cb:27:89:e6:8a:
e5:94:09:50:e4:93:82:f3:1a:18:fb:cc:e7:c5:db:
62:a4:91:c7:5c:63:53:77:52:5a:54:6b:04:fc:da:
7d:a5:fd:9e:1f:8e:2a:0b:83:3f:12:45:b1:97:16:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:DE:77:13:8A:95:DB:65:47:33:07:6A:4F:C1:27:A3:C4:8C:CC
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:92:6f:1c:e4:34:1e:88:66:c9:9f:9e:dc:01:b1:77:ac:
04:fd:89:b6:e8:ad:d9:82:a5:25:2e:36:cd:54:f9:f5:67:3a:
55:04:11:80:fb:f7:9e:0d:f2:e6:e0:97:93:7d:0a:85:83:d5:
4e:8d:1b:c8:ac:da:19:63:17:7b:a9:75:49:9a:1e:e4:dc:07:
e6:5a:b4:64:f7:65:40:7e:2a:76:a8:aa:39:46:ec:68:ce:64:
95:2b:90:e3:19:3c:3a:4e:a4:b4:5b:7a:6b:58:2f:c0:99:aa:
cf:3c:64:2e:88:e7:3f:e2:df:5e:3d:18:91:40:b7:10:40:5f:
eb:1b:e4:71:0e:4c:ac:2c:d3:16:b2:de:27:97:5a:6b:7e:37:
93:d3:15:a7:ed:b9:30:ce:d1:b7:05:e0:dc:25:80:f5:56:cb:
cf:a6:b4:6b:f8:bf:16:d1:20:bd:be:1f:2b:c9:2f:28:7a:e7:
f3:d8:23:1b:66:f2:e4:8c:8c:4a:bf:8e:eb:81:3b:e1:ff:8a:
1b:6d:59:ed:e3:a9:0e:8b:70:c1:84:ad:47:ea:ef:a7:f6:ab:
cc:ab:4d:c4:1f:8a:f8:85:07:8d:54:ff:42:41:f5:be:17:74:
4d:c3:bd:49:0e:58:2b:05:2d:c7:35:6e:13:b6:81:ec:4f:fd:
63:4b:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:43 2025 by rpki-client