Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: TIW+y31uOX1MZYIR7ke1ppKVJ8QGDalXTAG5KqVgS8Y=
Subject key identifier: 21:E0:89:B7:CB:6C:65:5D:3A:50:DB:76:E1:A2:8E:64:04:06:95:A9
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0198D65F75C753488D0DE77CA71EA5AAC011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: +bhl2Dd/2TZ5FzYoRgLOtLklWDPYRaghCov8rawYms8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:c7:53:48:8d:0d:e7:7c:a7:1e:a5:aa:c0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=21e089b7cb6c655d3a50db76e1a28e64040695a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:73:24:62:f0:2b:16:6c:d1:03:05:0c:f7:
6d:12:f1:b2:e9:3c:ad:8f:05:0a:d2:a8:45:8e:00:
4c:43:09:58:b4:bc:2e:68:40:53:fb:cb:d0:57:e8:
de:ac:b5:32:fb:c8:91:6c:16:1e:42:26:78:4a:7f:
e4:d5:b9:26:b7:a3:84:b6:f5:d0:68:68:18:1c:68:
ab:83:28:f7:06:bd:9f:03:e0:d4:f1:77:09:90:1a:
8b:fa:17:d8:20:09:80:5f:03:08:d5:b6:42:24:73:
12:7e:60:92:24:3c:b5:67:00:c2:bc:da:01:89:2d:
49:b3:61:20:c7:5d:69:d9:32:7a:bb:fe:4a:9c:df:
cb:fd:a1:5a:51:44:4f:03:60:92:ab:06:0f:fa:83:
1f:5d:6b:ee:cf:b3:c7:7d:db:fb:2e:b9:d4:8a:0b:
8c:e2:bd:0c:5a:cf:01:fd:f2:67:bd:70:5c:27:2e:
fe:40:f4:89:17:82:8d:a4:4d:21:af:89:90:d7:d3:
19:11:e9:b8:f5:b6:06:69:71:12:42:88:fa:13:68:
c9:4d:a3:2d:f2:c7:39:2f:af:80:48:80:24:87:af:
3a:f3:9d:03:80:b7:ac:fa:2a:84:92:61:1e:4d:a7:
64:bf:3a:7b:9e:f6:e0:5a:f5:8d:20:6e:f4:15:83:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:89:B7:CB:6C:65:5D:3A:50:DB:76:E1:A2:8E:64:04:06:95:A9
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:3b:98:99:c3:ba:c3:45:4a:24:8d:d7:21:e4:7d:f0:08:
b8:e6:ee:cb:b7:22:58:59:f2:91:0f:4b:fe:65:2e:93:21:9f:
39:6c:11:e8:a9:85:b4:4a:64:40:c8:81:80:f8:bd:a6:01:92:
1d:54:bb:04:6d:be:88:a9:ed:f6:81:96:f8:b2:1f:d1:b2:3f:
0f:dd:60:f1:e9:8c:c9:a3:0f:77:95:ee:74:ea:29:7e:b9:73:
7e:44:5e:39:96:ff:e1:3a:78:cd:04:1f:94:25:be:71:3d:42:
26:a1:a4:6b:62:da:2c:16:79:d4:0a:fd:5e:9b:a0:ee:33:dc:
36:45:53:b9:a9:5a:25:d3:bc:3a:db:f0:02:ea:30:38:23:3e:
07:a8:9e:da:dc:46:2b:c5:b8:4c:bf:29:0d:df:3d:46:af:28:
5e:99:e6:89:f6:b2:5d:18:58:a4:9f:5c:8d:bb:ff:ee:b4:24:
82:4f:ba:2b:6b:5c:26:80:b8:cc:c1:df:af:c9:e3:49:35:f0:
20:d6:4b:94:67:cb:95:44:98:f3:66:a4:bb:a3:5c:b1:3b:b4:
be:37:18:2e:40:91:92:d5:f1:91:7b:d9:a3:78:e5:2e:41:f3:
f0:c4:2d:b1:9b:b8:c3:ba:66:a0:78:c6:13:f7:fb:f0:49:41:
07:da:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:47 2025 by rpki-client