Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: 7mmIWpjqzEY87FDo+vbUk3ZB/DVyvL/CDoqbG7+Ykng=
Subject key identifier: 3B:FB:F5:B9:CF:90:ED:BD:8C:E5:64:E2:8A:A9:AF:69:89:EC:2A:B6
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 0198D65F678B18B1BB54FD907E973A5E5E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: Qtzl9B5MxLrhgv1BSMfjclHc0KFP1VL+Tmit7443eWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:67:8b:18:b1:bb:54:fd:90:7e:97:3a:5e:5e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=3bfbf5b9cf90edbd8ce564e28aa9af6989ec2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:d0:48:53:72:15:4c:95:87:56:ff:0b:ba:
ea:33:0c:f9:98:75:bc:91:0c:59:0b:8b:32:2f:ae:
33:af:10:f7:74:47:48:9e:c9:21:d0:16:ea:8e:68:
ec:0f:02:f5:b8:a9:3b:be:ad:70:6d:3d:4b:36:0a:
9e:4a:e6:01:46:75:15:08:3d:70:d6:0b:2d:72:5f:
5f:97:26:27:dd:a0:0d:02:6a:1d:d6:bc:04:8f:71:
66:f2:ff:74:6f:e1:c5:39:c2:0d:d8:c1:01:c3:fb:
b6:25:4f:00:32:30:b3:dd:3c:27:11:a7:12:bd:f4:
35:ad:44:9f:ce:4f:2a:e8:7f:8a:c8:e1:b3:f9:2f:
8f:a8:0f:72:8d:81:86:05:6f:df:0f:5b:44:3e:43:
63:bc:0f:a6:6b:af:d2:5d:e6:0a:40:b3:c1:c9:63:
36:ff:d7:10:aa:06:bc:8e:43:ac:20:41:2e:81:40:
bc:58:1a:d2:47:6c:7d:28:eb:cf:ff:7a:f5:25:cd:
21:ac:64:3b:79:bb:99:a8:50:22:39:cc:0d:93:c5:
3f:1a:a6:3a:68:85:ea:64:fd:4b:85:24:01:a7:dd:
b6:39:51:cc:eb:31:1e:8d:47:bb:40:47:5d:7f:fc:
03:3a:dc:f1:e8:d1:da:1f:93:18:a7:dd:5c:15:ce:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FB:F5:B9:CF:90:ED:BD:8C:E5:64:E2:8A:A9:AF:69:89:EC:2A:B6
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:21:6b:33:11:69:af:9f:94:86:de:8a:1e:6e:f9:46:39:
0f:9f:91:91:0c:d2:42:24:c0:e9:b4:de:4b:1d:6f:18:5b:aa:
c6:4b:24:69:de:31:ff:a8:de:f4:15:8c:2f:d4:62:b3:dd:0b:
31:b5:ff:d9:6d:44:7f:c7:5f:3b:b8:d8:f7:f6:49:e4:7d:8e:
3f:85:47:c6:f6:1b:8d:5d:ba:c1:1d:d7:2d:b3:e2:df:14:98:
40:7b:38:81:46:34:8a:fd:f6:24:ef:1d:bf:ee:69:19:33:79:
14:45:20:3d:0f:88:c5:cd:fa:aa:a8:71:90:c5:33:10:99:c4:
09:b9:05:47:ba:0b:f8:ab:dd:fc:00:bc:71:aa:ab:59:cd:2a:
ab:9b:b7:d3:d0:88:cd:8e:da:45:14:71:d3:2b:9d:c3:a0:cf:
15:f2:89:e6:29:0e:20:f2:62:cd:65:9f:60:65:eb:06:c4:0d:
12:c7:f0:a3:14:8b:ae:53:12:6d:5f:ca:a2:fd:0e:75:a3:e9:
dd:ee:24:7a:5b:10:43:6f:8a:88:72:97:23:b5:ff:a9:77:86:
e5:a3:a9:0c:d0:4c:15:69:55:c0:68:1e:d5:7f:2e:03:25:24:
04:48:1c:87:40:15:bd:2a:be:b3:04:cd:18:6f:cd:52:e9:3d:
2b:1f:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:28 2025 by rpki-client