Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: Ykmo0eXXhYvhUFCLAvsDlWe9I05EZP4yd01JRK17Kq8=
Subject key identifier: 65:02:46:0E:26:CA:D1:A5:94:FC:CE:88:A4:8B:A7:30:F7:AD:C4:10
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 0198D5BC2E90731293C55DC083B1B36E2FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: KaUqgqBvK/0tWYPbTlcHo0Ak8TxdE4ayYSKhUqQxdMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2e:90:73:12:93:c5:5d:c0:83:b1:b3:6e:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=6502460e26cad1a594fcce88a48ba730f7adc410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:9b:b3:e5:ac:b1:bc:48:fd:7a:48:8f:5d:
ee:96:fb:9d:f8:4f:f7:0e:68:f2:bb:9e:fb:9e:fe:
e1:0e:98:99:18:4a:39:fc:17:77:06:1d:e1:da:ea:
fc:56:ac:75:4b:64:1b:b0:c3:6d:ca:9e:95:04:6e:
c7:90:40:22:45:0d:34:29:71:50:b2:25:12:73:94:
0f:83:a7:49:fa:3c:0d:91:b3:9d:52:12:39:f6:8d:
e0:4d:88:e8:16:01:18:31:db:99:71:58:ee:fa:94:
0a:9a:9c:95:be:00:6f:dc:e3:29:f7:b6:d2:2c:f7:
01:73:e2:b0:2e:34:ae:64:11:b1:48:fd:e6:72:8a:
5f:79:ef:3a:0b:1b:8a:6b:cd:ec:90:29:27:50:83:
60:65:3c:ac:56:42:34:0f:7b:b3:80:5e:2c:73:13:
02:ed:ee:42:ce:f8:64:32:f8:91:56:4f:2b:8f:db:
df:fe:f7:02:cc:86:e1:cf:30:4b:4d:dd:de:d2:25:
b9:21:c7:65:52:17:2c:c2:85:3e:a4:6e:dd:96:67:
78:c9:32:e2:3c:7e:d8:91:6c:33:8e:2d:da:ce:bb:
d7:77:9d:a4:a2:29:ec:c1:87:07:a3:0c:77:22:12:
12:61:e6:fd:fa:72:1c:61:9c:43:8e:58:7e:40:a3:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:46:0E:26:CA:D1:A5:94:FC:CE:88:A4:8B:A7:30:F7:AD:C4:10
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:43:30:01:14:c5:1e:9c:01:41:76:36:4c:17:b6:ad:f9:95:
14:b4:b3:6e:86:b6:53:7f:83:18:50:c8:dc:a6:99:3e:e8:85:
f7:37:e8:56:e5:d2:26:8c:60:c2:ee:27:5d:19:b1:b6:06:f2:
2c:2c:7c:31:7b:fe:b0:a1:1b:48:56:76:36:a6:f3:1e:68:b2:
8a:27:88:25:cf:c9:17:39:1a:58:c0:d9:45:fd:85:4c:47:a8:
e7:24:fa:d2:4c:5e:fb:1b:36:b9:77:c0:bc:77:bc:73:de:0a:
cf:ca:ae:dc:21:c4:73:e7:a6:33:c1:cf:53:56:dc:0d:ac:44:
ba:f3:de:f2:57:53:af:77:62:27:99:82:da:12:e7:19:8f:87:
08:0b:6d:97:ce:25:9c:89:09:78:fc:5e:35:d7:49:fe:a0:d9:
a0:4b:ab:d0:2c:e8:be:b4:26:77:35:53:1e:5d:29:bf:72:8e:
93:65:9d:6a:e5:83:ae:3d:da:1c:3a:40:36:0b:4b:41:fe:86:
62:84:cb:d4:51:15:3d:de:b4:3f:22:55:2a:23:1c:f3:2c:6c:
fa:b6:2f:77:5f:7e:2e:f3:44:cc:fc:73:7e:06:f1:32:7c:47:
a5:63:52:5c:26:7f:cd:e0:66:34:0c:24:38:fb:ea:6e:f5:5a:
76:61:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:34 2025 by rpki-client