Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: klL1UxRTvr+Lj/rp+CaqRoiIeE/Glk1GKq0Wi0WRz4Y=
Subject key identifier: 5C:C2:92:4C:23:28:C9:9B:E7:FC:FC:8F:B6:C8:AC:80:38:DD:E2:92
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 0198D4A7BC39D979AEC6CDDD7F6BD652C2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 015B
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: jzEKfmLq+ttkr3BCJ+ioiCeTjOH7scbHlq03kVN3RZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bc:39:d9:79:ae:c6:cd:dd:7f:6b:d6:52:c2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=5cc2924c2328c99be7fcfc8fb6c8ac8038dde292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c6:09:3c:61:37:df:09:d7:8d:e0:de:41:8d:
81:c2:46:16:59:c6:62:fc:5b:4f:c4:37:65:04:97:
cb:2d:61:c4:ee:0d:e3:2c:f7:5b:3f:4f:fb:a3:91:
9c:51:a9:d2:f2:cd:d8:a6:58:35:11:2e:d0:5a:40:
bc:b9:f0:c2:38:66:0d:c4:c5:40:16:73:aa:c9:39:
1b:6c:cf:27:77:f4:4e:0d:65:26:32:11:77:aa:43:
f3:04:67:86:3c:fc:76:dc:eb:04:f7:01:f6:f5:89:
af:6a:5b:fb:30:74:02:a7:d2:6a:01:d4:c8:c2:38:
6d:3e:e4:0e:73:d3:ff:3b:3f:03:da:72:b3:a8:06:
33:f4:8c:25:bf:3d:3c:d4:1a:51:7c:e3:92:0e:31:
8a:a1:59:02:fc:8b:97:01:db:9c:ab:c1:52:d3:36:
1c:c5:a0:2d:20:ce:34:1d:6f:e6:55:2d:00:01:55:
c4:8b:a5:f5:d9:4e:56:a4:8b:cc:f5:0d:ba:12:6e:
71:d5:9a:c4:92:d2:96:42:c7:a2:13:c7:78:1c:39:
37:d3:39:b9:3f:c2:9d:5d:3d:01:ec:f5:6a:43:d5:
d3:e6:7c:93:30:8a:96:59:78:4c:bd:0d:89:92:cf:
1f:a6:a5:33:1f:a7:5d:b9:55:ad:f6:94:4b:dc:67:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:92:4C:23:28:C9:9B:E7:FC:FC:8F:B6:C8:AC:80:38:DD:E2:92
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1d:14:f5:df:43:e2:a1:59:c5:3c:86:e9:d2:9e:cd:ac:2b:
f1:7c:fd:fe:38:85:ce:20:65:9a:40:1e:d0:4d:fa:27:ef:2c:
30:60:ee:8b:e1:5f:33:9b:52:e3:5f:e3:3c:8b:f7:49:06:1b:
9f:32:f2:9c:ee:7c:f2:38:24:b2:3a:7a:35:79:d9:c2:68:f5:
30:d8:a1:71:df:17:ce:e8:a6:21:a5:1f:a0:31:2c:6c:80:12:
a7:d1:c4:f5:ce:b4:65:7e:c5:6d:54:23:6c:0f:83:42:51:91:
f3:af:44:47:35:e1:97:86:e0:51:bf:91:a0:50:b7:da:73:75:
f1:4e:d2:ae:90:b7:67:96:30:46:7d:a4:12:24:2f:2b:58:ac:
68:f8:b9:a2:40:89:e9:98:21:26:5f:dd:98:b4:c1:17:a7:ac:
7d:a4:12:30:2d:b6:14:fe:79:c0:04:dc:f0:09:56:cd:1f:8a:
9c:b8:ee:8d:8a:e9:df:da:7d:a6:2e:4e:78:d8:ec:0b:5f:d4:
19:48:aa:2d:a2:11:07:81:fb:14:31:45:90:43:3b:b3:19:3a:
43:df:1f:07:2f:4a:b6:56:6b:b7:92:07:a8:09:72:1b:9b:c4:
c4:02:e2:2f:13:c8:43:3f:90:91:9a:e3:e8:39:e4:b4:d2:10:
ed:12:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:49 2025 by rpki-client