Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: tmhPvS/8qiBM7bUcw4IUuVOU8Ue2U7DCnRiWZRWWlFM=
Subject key identifier: F0:06:EB:3B:65:98:F8:B1:60:1B:88:3E:19:B4:0E:D7:72:79:9B:C8
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 0198D660BD330919F4CB67391049E3EA7F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: HYALjiDbrYgYcn+mLqyqyQfvVtUwcK29iFUSresBlqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bd:33:09:19:f4:cb:67:39:10:49:e3:ea:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=f006eb3b6598f8b1601b883e19b40ed772799bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:d4:b8:55:cd:b3:7e:9c:8a:36:d3:32:ff:
fc:52:cb:fe:7a:77:cb:ee:6f:3f:0d:6f:26:73:15:
7f:32:67:fb:09:d4:a1:87:6f:23:ec:b7:62:82:d8:
4a:c4:4e:52:29:4e:ef:14:72:47:ad:04:30:a7:f0:
dc:c4:81:d9:77:c3:df:9c:76:21:33:15:41:9b:03:
58:3b:a2:24:ee:e4:ca:9d:d3:fd:4b:53:79:c8:83:
f8:54:2e:1d:68:25:48:af:5a:c0:c9:03:27:b2:b7:
b5:47:76:30:99:1e:c7:dc:87:6e:5e:17:a8:d7:1c:
eb:00:80:85:13:13:46:94:d2:57:34:06:27:41:e9:
23:58:30:80:a1:61:a5:bb:f8:a5:0f:84:90:5a:3a:
92:8d:85:5c:1b:4a:7e:dc:4b:a2:24:2e:36:7a:7c:
2f:03:a8:3c:1a:bf:77:37:c0:ac:74:ba:b1:bb:cc:
59:8d:54:73:14:05:41:79:68:49:98:29:46:71:a3:
60:71:b2:29:56:9f:93:48:1b:65:14:48:ac:c6:02:
bc:21:fc:6f:d4:6d:27:ec:96:28:ba:a9:9a:09:86:
fd:de:81:b6:4a:3c:82:60:9a:77:ff:82:13:3f:c6:
1f:34:7b:0e:69:bd:b1:34:fb:93:e5:7b:b1:d4:7a:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:EB:3B:65:98:F8:B1:60:1B:88:3E:19:B4:0E:D7:72:79:9B:C8
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:7d:59:75:3a:c2:eb:d6:3b:79:a6:99:35:bf:ea:bd:59:
72:49:00:f7:2d:9c:d3:aa:90:a4:cb:07:ee:92:6e:e2:cc:b7:
79:42:21:9a:fe:36:b6:a0:72:ef:13:9a:86:59:24:92:2e:1b:
0c:61:b6:6f:25:82:b1:18:b3:54:d9:19:52:e6:68:ea:ec:eb:
89:87:cb:ff:d0:8a:03:d1:5a:54:e0:7f:3c:72:2b:3f:d6:1e:
13:65:e6:43:79:5b:d0:4b:04:c5:46:fc:26:89:ba:80:29:49:
67:79:15:74:16:de:ac:20:a3:2a:dc:0d:05:0d:58:23:da:b3:
7b:99:d6:bd:58:f4:80:06:7e:e8:03:18:77:72:c1:2e:db:d7:
a3:cb:5b:42:68:a4:db:57:de:ef:ff:49:e8:26:49:c4:c7:bf:
58:95:30:b1:c5:24:8f:07:e5:c3:04:1a:4c:4d:e1:5a:fd:ef:
32:aa:9f:59:fa:89:76:c9:e0:8c:09:0b:2e:a5:3e:cd:2c:dd:
da:2f:59:53:55:e7:60:21:27:ec:1f:0b:72:66:fc:66:4d:41:
79:0c:6b:a4:db:3a:1f:2b:6c:36:7e:4a:9d:70:65:26:3a:e9:
1e:db:d4:7f:f9:5c:5b:23:5b:ac:a2:7f:15:53:09:96:a5:a2:
0e:79:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:00 2025 by rpki-client