Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: 6Q2ef37OwfTfbSoDEZk2Vg/F/vufAAAEy/bJrfOhz8o=
Subject key identifier: BB:FA:E3:A1:A6:BB:2C:D7:AA:A4:BB:58:CD:D2:C0:07:CA:6B:02:2C
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 0198D65FF47D79211DFCF9EF4117F3954615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: n/GrBoKrF/8V0tonchklZE+f8KsT/RHSJO2xRcgplt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f4:7d:79:21:1d:fc:f9:ef:41:17:f3:95:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=bbfae3a1a6bb2cd7aaa4bb58cdd2c007ca6b022c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:61:c2:10:2e:d9:f2:5d:26:57:75:d6:95:
64:f3:73:13:99:4c:f9:19:48:c1:cb:59:62:38:02:
ca:1c:0e:ef:84:fa:0a:37:43:ee:8a:5e:e6:ef:59:
31:8b:96:ea:49:09:0c:3e:9e:93:eb:3a:f3:4d:ff:
8d:a8:32:90:f6:8b:db:c0:d8:87:53:dd:44:6c:97:
f1:9d:2d:4f:6e:15:e4:72:03:43:a8:ee:a5:1b:0f:
20:33:c9:53:27:60:55:9f:7d:a7:aa:08:42:16:11:
51:04:fa:6a:3d:b0:35:65:5b:cb:ca:28:4b:61:19:
eb:fb:83:a0:c9:2a:d1:4a:24:fe:27:88:49:72:cd:
57:4b:c5:ab:63:98:42:93:8e:e0:eb:24:ff:f0:26:
43:87:82:f1:f6:76:00:5b:23:2f:5d:75:7a:62:fc:
e3:4c:54:bd:d1:3f:10:45:35:cd:23:05:5c:92:a4:
9f:42:dd:09:97:d9:cd:f2:30:6d:39:42:42:3e:9a:
43:a6:e5:ed:36:02:b5:a2:8b:a4:76:07:89:81:c0:
61:78:8c:dd:ce:2e:fc:1e:a2:a5:33:7e:47:3b:27:
4f:47:98:97:fc:6c:a8:ef:ea:b2:ec:5d:4e:2a:3c:
6e:0b:24:be:0c:04:25:ec:7d:0f:7c:b4:8e:69:21:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:E3:A1:A6:BB:2C:D7:AA:A4:BB:58:CD:D2:C0:07:CA:6B:02:2C
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:74:2c:62:80:18:cf:3f:a0:4e:33:9d:7f:bc:07:4f:1c:8b:
f4:f4:b1:da:16:d2:6c:ba:87:77:bf:df:ed:d2:c2:e4:2e:46:
7c:96:a6:91:ae:a3:6e:67:57:17:31:2c:35:fd:41:cb:c8:25:
20:78:ac:7f:20:e2:13:a1:20:32:33:bf:5d:9f:aa:51:2c:a6:
89:56:cb:41:c7:9e:26:76:d7:17:57:b2:dc:d2:f1:9f:86:32:
fc:e1:42:2a:4d:7a:bd:92:2a:5c:0d:98:8f:6d:2a:cc:4b:e3:
ca:c6:7f:3c:59:de:13:f2:ce:7a:01:b0:14:46:d6:f8:8a:94:
8d:8f:4a:4f:64:68:ff:81:6e:30:47:a0:ff:b2:a5:69:87:4b:
71:4a:d2:50:72:6f:dd:57:d8:4a:c1:da:fd:d2:6f:0e:cc:95:
51:02:ee:95:a7:50:fb:9e:2e:b9:60:fc:7d:04:35:eb:b7:d2:
23:26:9b:ce:09:c5:c1:b8:6c:06:6a:fa:fe:72:b8:86:70:d7:
37:1d:60:84:de:e3:9b:7f:b2:d8:f6:a2:6b:76:e3:07:cd:ce:
9b:68:20:28:aa:df:31:9b:cd:c2:a8:45:16:23:6f:54:fb:36:
98:d0:de:02:e0:fc:4d:5f:3f:05:02:0c:6d:11:a3:55:34:fb:
8a:1a:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:19 2025 by rpki-client