Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: 1QA0t23TVE/lvuv0pmVvcERPMWCARpl3jn3LoyybRCk=
Subject key identifier: 22:0C:8E:86:17:67:4C:65:19:12:D2:E1:29:56:8B:F4:C0:79:F5:E7
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 0199FFC80543D4049DE5693DDC22B8270F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:02:02 +0000
Manifest this update: Mon 20 Oct 2025 04:02:02 +0000
Manifest next update: Tue 21 Oct 2025 04:02:02 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: RC++gOLaaspVQlReHR7YCo4m1pIx/pJZ+gbuSxvhcHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:05:43:d4:04:9d:e5:69:3d:dc:22:b8:27:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Oct 20 04:02:02 2025 GMT
Not After : Oct 21 04:02:02 2025 GMT
Subject: CN=220c8e8617674c651912d2e129568bf4c079f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:6f:71:da:38:3d:1d:16:75:d3:e2:a6:08:
19:6b:45:33:bd:b6:5b:5d:a9:d6:b6:6d:1e:99:4b:
87:b6:f0:df:d3:98:eb:49:6b:b4:9b:09:e4:cf:e9:
c4:62:68:9b:af:e5:97:29:ed:27:5d:44:18:32:04:
7d:24:1c:36:bf:25:5d:56:67:28:3d:e5:b1:03:19:
88:56:52:2a:52:dd:2a:0c:03:a5:da:7a:86:ff:10:
01:03:90:9e:07:e9:71:f3:21:1c:06:8c:fe:7a:cd:
40:50:79:45:d4:a4:8c:f7:89:85:61:ab:30:68:04:
8d:56:c2:3c:40:21:76:99:8b:82:ca:e4:7b:4a:fc:
53:3f:d9:21:96:98:7e:c6:b8:80:5b:2b:7e:2c:6e:
7a:ec:9a:e9:d1:07:e7:2c:3b:c9:45:a8:5f:ad:2e:
8a:28:ac:a9:e6:e9:76:c5:73:54:09:cf:c6:e4:4f:
9c:98:10:fa:80:94:3a:fb:28:66:6e:c6:3e:f4:43:
20:c6:bb:73:1f:91:e8:4b:4c:0f:23:35:60:79:59:
77:91:06:ff:02:3b:68:b5:fe:6f:68:c8:2f:dd:13:
a9:70:7b:05:81:fa:63:08:5c:88:8c:58:19:64:0c:
c9:69:22:0b:79:c1:31:ad:5e:1a:87:50:4a:39:c7:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:8E:86:17:67:4C:65:19:12:D2:E1:29:56:8B:F4:C0:79:F5:E7
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:30:f3:40:51:81:b1:cd:ec:12:ab:96:ea:a1:6a:37:aa:
d7:c4:59:8b:c6:86:52:65:13:86:eb:ca:12:4d:3d:c1:d9:d1:
bc:cb:29:6c:25:8d:c0:3d:e1:6c:c4:37:2f:09:d9:83:a5:c9:
d2:ba:53:05:48:6a:7c:ec:3c:25:21:4a:c2:3d:de:ec:ca:8d:
21:13:76:29:21:aa:9d:f2:2d:24:e3:43:c3:a8:8b:c5:df:64:
52:70:42:82:6c:73:3e:33:27:b9:54:f3:d7:c7:e1:4c:25:57:
5d:4d:ff:b4:ef:ee:76:44:07:3f:d9:53:21:d5:fe:0b:9f:16:
9e:b4:f0:e9:5d:f0:ca:05:5f:f8:d2:cc:69:db:37:1f:cd:c2:
37:c5:86:97:dc:12:92:7d:31:08:b4:1f:fa:dd:1c:2b:fe:9e:
34:e1:3c:86:86:54:fb:9b:24:62:f9:d6:48:05:20:7f:27:f7:
32:f1:7e:ec:a8:37:91:00:cd:0d:d7:cb:a3:48:98:90:1f:53:
0f:f7:b2:06:00:dd:69:ee:0b:5c:6c:56:11:8c:a6:7a:f4:bc:
f7:e0:f5:31:7e:c5:fe:df:52:95:07:06:00:76:e5:d4:36:5e:
ed:44:e2:25:65:de:b8:1a:37:13:f7:43:ae:b2:c7:b4:6f:f1:
6e:08:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:22 2025 by rpki-client