Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: THvtDVulnQpv5P4xsUNiQqXQPI8W9sH7pbwxHgLzWcw=
Subject key identifier: CD:E9:25:FD:87:98:A3:59:E5:C5:F7:B5:7E:5D:39:02:D7:6C:8D:52
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 0198D4728E4E1E3C22DE6EBA59099118BC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: Vzl/BgpDZjeKXmGquDEaoArxm/q+HvCMKZlommeKYew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8e:4e:1e:3c:22:de:6e:ba:59:09:91:18:bc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=cde925fd8798a359e5c5f7b57e5d3902d76c8d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:8a:cf:9d:36:20:46:f0:77:f0:4a:b8:3e:
65:4e:97:49:03:52:4f:50:ad:da:f7:68:38:8c:c0:
74:59:5c:cf:78:78:a4:80:b0:83:d9:45:bc:49:9b:
82:05:0b:57:b4:38:4d:69:43:a3:23:d8:72:6e:32:
80:c5:19:e7:69:51:36:c4:6f:a4:54:19:20:10:4b:
7b:58:41:b0:8e:8c:0f:13:77:82:77:9a:1b:32:8b:
07:76:4e:b7:46:74:f8:16:46:0e:c8:a5:7c:dc:4a:
f1:51:1c:f3:9c:0b:4b:fa:e3:47:2f:97:de:0b:19:
e0:00:b4:42:b6:da:c0:16:53:36:8a:c6:4e:32:44:
7d:72:b3:99:1d:cd:10:a0:b2:90:67:b3:25:05:f3:
59:31:bb:7a:80:85:81:03:65:48:30:dd:6b:d6:70:
cb:91:03:3c:ca:b3:a3:0d:9c:05:57:4f:1c:21:69:
3b:5d:ab:cb:a0:4e:ad:27:24:fa:75:5b:31:82:85:
35:e4:fd:45:63:78:42:12:a5:99:08:fa:44:9b:4a:
d7:7f:b2:2d:b1:90:a2:90:3b:d7:c5:6b:c3:be:43:
1e:d6:de:f3:94:5f:4c:42:74:c4:2c:a2:55:81:16:
4e:f6:a6:e2:06:62:4e:1e:e3:51:0e:68:4a:85:af:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:25:FD:87:98:A3:59:E5:C5:F7:B5:7E:5D:39:02:D7:6C:8D:52
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:14:40:7a:b8:2b:ee:61:d0:13:7a:19:af:57:8a:8e:83:e1:
8c:e2:ac:84:8f:ca:7a:6c:3b:89:a6:b3:66:3d:4a:30:22:1d:
f1:4e:da:04:2f:c4:1c:e5:d4:87:09:59:cc:6a:86:e3:6f:4f:
e7:69:fd:e7:2d:1b:63:02:ab:4a:88:d3:0c:83:12:bb:cc:df:
95:95:62:d7:5e:4a:f1:e0:85:3c:e0:30:8b:60:d3:55:6e:ad:
c9:15:1b:98:53:23:bf:e1:58:27:d8:41:6a:1c:5f:0d:f3:40:
aa:13:f6:e3:ad:5d:36:fe:a0:81:95:22:35:64:26:2c:37:c6:
80:eb:ab:b8:0e:98:90:f6:68:56:42:66:81:93:bd:53:e0:88:
45:8b:c6:d2:c4:b0:d8:1b:74:98:47:52:65:17:56:fe:08:98:
eb:d7:2f:e0:7b:68:bb:b2:12:99:5b:3c:57:38:a0:09:6e:72:
99:43:ea:ef:ce:5d:c2:38:b4:99:33:f4:43:38:3c:5d:c5:1b:
43:eb:a8:39:f9:4c:56:9f:9a:d3:13:9a:34:a6:f9:e4:35:50:
c1:ae:d2:95:04:89:03:4a:dc:8e:44:c0:a3:69:23:48:e0:a5:
bd:b7:e4:fe:b0:89:32:85:a6:e3:7f:1a:ca:45:54:7c:27:e3:
e1:ef:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:17 2025 by rpki-client