Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: gUtp2THYg9MzLo3VbMhakE7tJQ6hxQTlgHoAp72o0gU=
Subject key identifier: DE:00:D9:E3:94:26:77:F3:8E:0C:39:39:FF:B8:54:91:F2:5C:A7:64
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0198D472AA7C0FB536A8332341C8691AAEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: 6c36ww94Py9Yk91oDAXzo6Qe78VXbydWGZ2u6aoCkHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:aa:7c:0f:b5:36:a8:33:23:41:c8:69:1a:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=de00d9e3942677f38e0c3939ffb85491f25ca764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:e4:ff:44:09:40:8d:e2:27:24:49:ed:d9:
4a:3d:67:84:ca:a2:7d:6c:04:15:cd:05:9a:46:c8:
a9:ef:6c:c4:cd:76:6c:30:1b:a3:79:da:ff:a2:35:
59:7a:7a:8c:4c:d2:50:b5:62:2f:11:d7:08:c9:e7:
3e:59:52:19:b7:72:95:6c:6e:5e:2c:2c:86:73:96:
f7:a1:a2:e8:96:db:60:65:e0:db:51:f9:86:34:2e:
8f:bc:d5:75:48:07:38:36:03:46:69:5d:71:65:83:
da:76:81:2d:32:8b:48:a8:f7:cd:a7:2a:c9:06:23:
e3:9b:30:56:5f:37:05:a8:e7:3f:91:f3:ff:61:68:
bc:37:3d:80:73:42:3a:bc:20:25:d2:7d:6a:67:11:
5d:73:11:2e:4c:51:48:b1:67:ff:fd:a9:57:62:f3:
f7:a2:44:fc:e4:68:cd:6f:94:d0:24:ff:f2:bd:2a:
5d:e1:ba:d0:a8:fc:45:3d:66:cc:11:ac:03:03:58:
d6:d8:af:bc:e1:e7:2b:39:a5:31:52:09:08:99:c4:
db:ce:c8:36:55:96:5d:13:67:e6:d6:35:34:7d:6c:
d0:f9:93:8d:64:70:85:87:90:8a:0e:3c:10:0b:64:
a0:a1:79:17:30:d2:48:5b:c6:9b:57:7b:47:6c:98:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:D9:E3:94:26:77:F3:8E:0C:39:39:FF:B8:54:91:F2:5C:A7:64
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:ed:60:49:06:ea:35:ae:92:4f:1a:8a:46:66:62:56:cd:
ad:10:04:05:e4:6c:dd:59:9b:d4:71:92:38:b7:cc:c9:5f:63:
b5:ff:74:41:71:cc:a8:27:ef:25:13:32:74:15:a2:ad:b5:44:
e4:30:ea:82:dc:2a:d1:0f:93:99:74:ea:25:3e:d6:cb:e3:64:
35:b9:87:32:1a:50:ff:45:e7:fd:d8:3f:46:1f:39:b5:9b:2f:
ac:6d:af:de:fa:b7:3f:7c:a4:ef:eb:a9:df:40:64:c0:77:63:
9c:ee:30:a1:94:52:a5:ff:28:94:c3:1a:5b:8b:f1:45:5e:8b:
8b:7a:52:55:f5:46:84:ba:6e:f5:91:2c:8d:56:ae:5d:14:53:
19:8b:f5:3a:85:a3:19:40:49:41:c0:80:ef:b5:86:21:ce:a2:
fc:f8:0e:48:63:53:5b:58:4a:a7:52:e9:2e:42:8e:f7:55:3b:
8f:6f:58:2d:bd:92:04:01:74:d4:20:82:84:85:ee:c5:b6:98:
72:9e:b5:6a:ba:f9:35:e5:2a:83:30:65:b8:59:d0:21:b5:3f:
cd:82:72:98:a9:93:f9:de:9c:db:c2:e7:0d:0d:ae:13:d4:d8:
13:76:9b:34:95:5f:25:b8:31:7f:c3:64:64:10:9f:b3:20:87:
ab:e5:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:34 2025 by rpki-client