Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: YVcjM5CZxA9Pe/O9celNHrVBKJnzb7iZE3JXSbKm+4U=
Subject key identifier: 3A:1A:07:82:61:04:E5:4F:07:EA:7D:64:D3:31:4D:9F:B1:2C:95:16
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 0198D5160C113CDA39202D9CB2D45D5F338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: 32
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: T1T1Mf1lgJMxZZ/q73/H/EBKguWMrRblHemZOvCtQ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0c:11:3c:da:39:20:2d:9c:b2:d4:5d:5f:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=3a1a07826104e54f07ea7d64d3314d9fb12c9516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:b9:f6:e8:a8:12:b7:cd:23:e3:1d:73:7d:
8b:d6:67:4b:05:15:0a:ab:e9:fa:03:af:31:96:c1:
55:e0:fd:54:6e:8c:48:f5:5a:60:ef:08:7c:0a:2e:
fc:a8:62:0c:2b:37:b2:f7:31:80:b0:26:70:12:cc:
a4:b1:17:fe:dd:de:d1:ab:b8:0f:84:fa:0e:36:e3:
78:99:f0:4d:bc:a1:78:67:18:74:cf:bd:a4:f3:4c:
d9:6f:6f:cd:55:f5:c8:25:37:21:f3:78:36:e4:40:
55:c7:c4:16:3a:64:1e:6f:98:a2:eb:a9:da:cc:04:
75:bd:80:86:a0:24:42:b8:de:b9:59:f4:be:0d:40:
11:5d:31:a9:a4:7e:58:55:c3:a5:1a:dc:f0:d2:b3:
bc:8a:67:dc:6b:0d:a5:6e:6d:df:27:07:03:f5:6f:
f3:1f:e9:35:83:e4:9b:42:f0:32:a2:84:6d:57:fa:
6c:27:e5:de:e7:45:a8:5d:26:f2:1b:62:29:96:02:
4f:bc:58:f4:5a:88:c0:21:c6:b6:ab:40:e0:b7:29:
76:c0:af:87:b8:6a:d6:39:31:f7:9a:5a:3e:f8:03:
93:1e:c8:8d:6a:4f:2b:17:df:b2:a0:e6:cb:90:df:
37:a2:ef:69:ee:54:ab:70:55:c6:49:e7:27:d9:a4:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:07:82:61:04:E5:4F:07:EA:7D:64:D3:31:4D:9F:B1:2C:95:16
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:6d:c6:65:20:fd:21:11:43:b4:16:72:36:79:ec:4d:69:
ff:8a:8c:50:d7:b9:78:1f:85:ce:9e:32:16:aa:68:db:43:0e:
cf:3d:93:d4:a6:7a:27:85:e7:ee:66:93:38:04:fe:34:64:74:
e5:ac:cb:2e:96:f8:8e:29:73:b4:8a:fa:d3:48:4e:df:d3:ed:
b8:65:63:2e:e4:d0:81:23:3f:a2:cf:1c:03:bd:fe:f6:d6:f8:
25:68:73:47:de:03:9e:18:89:46:09:17:9d:c4:1d:d0:1d:04:
e7:b3:b6:6b:79:77:02:ba:38:ea:18:80:36:d8:40:b9:b3:4a:
69:89:58:e7:f0:e9:3f:f6:f6:1d:a9:51:a9:61:9c:5f:ae:af:
ec:bc:01:30:f3:7c:2b:f2:99:e9:61:50:ad:2a:e9:93:fe:01:
04:93:0d:a3:5d:84:4b:22:e8:ce:8f:84:37:29:64:60:e0:aa:
a3:39:0f:61:88:b0:45:dd:0a:f6:43:a4:8b:01:f2:80:5a:49:
c3:eb:1c:33:52:d8:6e:ee:eb:ce:4d:8b:a4:e1:9c:65:a3:0b:
74:e0:23:45:73:1f:29:6c:a2:db:89:7a:f4:11:e1:85:54:2e:
cd:9e:ae:6c:95:7d:f8:14:d5:82:88:8c:78:86:cc:b0:2e:eb:
a5:bd:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:03 2025 by rpki-client