Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: +sRUpXbvevJevTlRa1KEV9JQj0KYi2C8Y0FZKlE1eyc=
Subject key identifier: 24:5A:9D:94:5C:07:B5:F0:3D:EE:06:CE:AA:C9:73:69:FC:69:3B:F7
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 0198D54E0370215F6F48E55152A61051146A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 046A
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: Dej9zwmP47MZMaOgnd9S3Qtjsm7X1rtYvOV1nEdG6r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:70:21:5f:6f:48:e5:51:52:a6:10:51:14:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=245a9d945c07b5f03dee06ceaac97369fc693bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:b6:be:8a:67:ec:33:14:76:0d:60:da:66:
ca:35:97:cf:69:2a:2d:eb:71:7a:92:bb:b3:f2:cd:
ff:4f:fe:86:6d:0b:d7:ad:8c:24:ef:b2:e4:73:b3:
1d:32:0b:5e:61:bf:dc:16:59:ae:80:0a:fd:a2:b4:
e7:52:82:94:95:86:be:f8:5f:75:98:d0:ab:e2:f2:
58:e1:d2:62:2b:77:cb:a6:63:ec:26:54:02:3d:e1:
0d:e2:ab:7d:89:d3:16:d3:c7:b0:85:ec:ed:84:be:
c7:de:5a:55:01:0f:3c:a0:bd:55:1d:96:29:ec:24:
53:9b:6f:9e:7e:ee:24:22:5e:db:e3:06:15:06:e8:
b7:86:b4:1c:6f:8d:20:ad:b9:67:c5:63:67:a1:bb:
b9:03:0f:67:18:f5:49:a2:08:28:51:3c:d5:13:d4:
0d:bd:4e:2e:e4:fc:51:c3:a8:87:c8:94:2c:a7:9f:
fe:47:8b:39:48:1e:e6:a3:fb:84:22:0f:38:c2:7f:
ab:ea:b3:3a:be:9c:46:de:b9:6d:a0:51:92:4a:50:
68:3e:2d:7e:1b:dc:de:b5:f3:7a:66:eb:28:20:44:
2f:a1:80:92:39:cb:36:31:9e:81:58:b5:16:74:ab:
01:ac:d9:09:44:38:8b:5f:d0:ed:4a:af:db:36:e2:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:9D:94:5C:07:B5:F0:3D:EE:06:CE:AA:C9:73:69:FC:69:3B:F7
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:ae:0a:c0:e8:1e:47:59:13:9b:78:02:06:93:7e:a1:98:
02:1b:41:b2:9f:93:d7:5c:84:64:be:48:05:05:8c:7b:93:ce:
24:aa:53:fd:06:39:f6:00:8f:8e:76:d1:cd:d7:6c:e5:db:91:
90:4d:06:37:cf:2f:35:90:57:11:53:a6:e6:41:ca:24:c8:65:
6d:82:e0:61:6e:4a:18:46:7f:ca:3e:48:49:b9:cb:7c:b3:da:
93:9d:da:3c:64:7f:ea:73:1e:43:db:da:e1:a6:da:4b:92:17:
06:33:cf:a8:2e:d4:75:c5:de:97:fb:37:39:f8:57:4e:c0:42:
f1:42:24:00:74:fc:2f:9f:34:ac:d9:80:ca:80:0b:5e:94:6e:
ee:d5:37:22:db:42:3d:86:99:6c:8f:5e:bd:46:65:51:49:d3:
cd:b8:d2:85:2f:7c:36:67:39:c1:c4:a4:b9:94:46:2c:77:2f:
b4:0a:23:35:f7:c1:02:51:d9:8b:19:da:6d:3d:fd:61:43:db:
ff:4d:61:51:67:81:df:fd:cb:11:08:26:69:9c:8f:3f:6a:8e:
b2:1f:45:80:6f:f2:9b:98:58:7e:13:7d:a3:a1:23:9a:e4:08:
e4:4b:65:58:f4:c6:89:af:2b:55:b6:4e:e1:13:90:03:a8:c9:
c1:fe:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:09 2025 by rpki-client