Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: 9mGUJL/1UwjldzBx7esetgCN3lu9/j6HGpVIbHNh8AI=
Subject key identifier: 10:B8:A5:10:79:CA:22:19:E5:3C:7E:B4:3D:BB:F8:11:E7:BA:66:1C
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0199FBEB5853983B439A6525F719D7242E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: /pGsF8URWH3tBfu2yD3eZKvwq7sNKqf3BzOJ8ONjf0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:53:98:3b:43:9a:65:25:f7:19:d7:24:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=10b8a51079ca2219e53c7eb43dbbf811e7ba661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4f:91:b4:5f:62:42:6b:d4:1e:ff:55:d8:27:
d5:3e:a4:28:36:f2:cc:e9:5e:f3:07:4d:75:93:c7:
14:f9:82:db:45:c7:e5:9b:9b:68:2a:4e:cb:e7:9b:
85:f2:51:2e:6b:b5:d0:fd:9b:86:8b:30:0f:b5:77:
b3:89:a1:59:8d:20:49:16:db:11:75:9f:55:fa:18:
50:ea:38:e9:11:71:79:6a:8e:94:55:27:aa:2b:6f:
08:75:82:e3:09:d3:19:05:62:3a:3b:74:09:cf:78:
c5:f4:b3:1d:77:67:fd:4c:15:3a:4d:23:2e:a0:5e:
ed:12:de:40:20:5d:b4:f4:ae:ca:85:0c:a4:25:e3:
cc:ce:2f:4b:71:e6:fa:9e:38:76:27:d9:a4:61:54:
5c:b9:58:29:4d:68:9d:be:f3:47:85:f1:0c:66:09:
c7:ce:b8:fa:0d:0c:43:ca:e5:84:60:6c:2a:aa:b0:
b5:44:62:be:a1:d6:cd:8d:fb:7b:f5:64:10:aa:18:
54:24:40:86:82:2f:59:09:48:5b:64:3d:3e:72:63:
8e:77:7f:1f:95:9b:53:54:34:a5:45:e5:4d:76:8c:
d6:b5:fc:26:0a:37:89:95:29:2f:77:65:68:d1:2d:
13:63:90:9e:d1:19:05:9a:6d:ae:27:d2:8c:fd:41:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B8:A5:10:79:CA:22:19:E5:3C:7E:B4:3D:BB:F8:11:E7:BA:66:1C
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:86:ab:08:9c:a4:18:a0:3b:32:75:70:28:ec:da:d8:ec:b2:
2b:ba:11:01:58:a0:62:6c:e0:dc:7e:e6:ec:36:f4:9b:1b:a3:
a7:ad:9a:10:58:f2:9a:ac:c6:55:c1:8b:7f:c3:b6:7b:0c:07:
48:db:e1:28:80:da:44:59:c8:8d:bc:be:19:fe:4c:de:ee:47:
fc:ea:1e:0e:d7:fd:10:e0:9c:56:a6:46:9e:49:8e:93:c3:1f:
c1:f5:5c:87:62:8c:4d:f1:25:23:99:5b:e4:39:46:f5:44:e4:
45:84:35:90:64:a6:b7:71:e1:a8:ab:26:ee:41:e5:43:a1:af:
42:1e:c0:a9:a0:8a:0c:d0:a5:84:a7:16:89:f2:ef:af:ca:1b:
42:e1:06:a0:2f:87:e6:cd:51:1e:15:46:85:fe:92:a5:52:37:
1f:f7:b0:68:50:3a:3c:71:6a:ba:bd:03:af:81:19:d1:be:2a:
37:fb:73:49:26:fd:6d:44:28:36:51:20:82:2f:81:43:b8:d1:
9a:39:86:57:e3:4f:00:d0:02:5b:e2:2a:3f:62:82:6a:70:72:
62:2c:63:a4:5b:ba:99:f3:27:42:ce:00:65:17:86:ec:35:e7:
e7:a9:7f:b7:b1:4d:1d:f4:ad:1c:29:c2:7d:f1:c9:b8:10:a6:
7e:36:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:06 2025 by rpki-client