Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: /juiqszaC5IZV93PKOE8EiAU2I+4MX1BC93QuH750XQ=
Subject key identifier: 3B:08:0E:29:B0:63:D2:34:8D:A7:71:64:59:E7:74:7D:D4:57:33:15
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 0198D54DCC7DF160D93C9FD94D45A4006D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 066A
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: CS7MFwZSbaoLqX+rzQ5Gr0uFvvlQBc08Rzc+WC0MgAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cc:7d:f1:60:d9:3c:9f:d9:4d:45:a4:00:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=3b080e29b063d2348da7716459e7747dd4573315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:28:e1:c9:ae:e7:8a:54:9f:35:68:6a:92:
8f:f5:65:43:4d:7e:22:75:77:46:c9:fa:ec:cd:32:
7c:80:df:43:ce:19:1e:b0:1c:ec:3d:e5:ac:ba:a2:
dd:90:72:28:74:3a:1a:62:82:32:9f:f4:b2:24:fe:
af:79:ba:9c:9f:86:39:b3:bf:e7:81:02:e7:c3:66:
47:7b:81:9b:02:58:9d:6a:78:16:d7:69:60:e8:ba:
44:83:f2:0e:50:61:f1:94:04:bc:9d:90:58:80:32:
fc:45:da:a6:72:36:0f:6b:a7:7d:c4:02:bc:d3:ba:
46:60:96:20:a2:f4:be:eb:34:49:2b:59:7f:cc:23:
02:0b:48:72:94:98:ec:f6:00:29:41:43:c9:55:52:
57:ae:4c:d0:d0:92:51:24:78:77:ac:e1:be:28:eb:
71:3f:e8:ec:ba:be:dd:77:4c:70:0e:ef:c5:98:d8:
86:1d:ec:dc:14:96:79:57:a0:d2:6f:3e:94:9e:25:
ae:9a:4c:eb:00:aa:6e:52:1c:29:6b:34:f5:3d:69:
18:e5:74:d8:12:a4:30:70:dc:e1:2d:cd:2b:e7:62:
04:69:be:04:8f:30:a3:5b:5e:01:3f:91:39:15:8c:
85:2e:70:36:6d:2b:e8:fb:53:d8:05:f2:52:52:bb:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:0E:29:B0:63:D2:34:8D:A7:71:64:59:E7:74:7D:D4:57:33:15
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:9a:ad:4a:58:4b:1a:81:10:c9:4b:61:c9:18:19:31:bc:
94:db:33:3f:b3:bc:69:a6:d7:e1:5d:9b:35:7e:f0:55:e2:c7:
98:51:f7:ef:6f:6c:d3:fe:3f:b9:20:8d:d4:58:78:00:1a:2b:
7a:db:9e:7d:0f:f1:83:48:bb:0d:1b:fd:13:6a:0f:3c:19:cc:
c7:8f:55:59:f7:a9:a9:d2:3f:25:31:77:29:0b:8f:b7:27:b8:
c3:43:25:87:0d:cf:e1:dd:4e:d2:f6:41:68:3c:7c:a8:b0:31:
3c:3b:77:6d:34:ba:53:91:dd:91:fd:8a:7d:78:af:f1:74:ac:
c3:bf:47:44:d6:60:1f:ea:31:1f:98:35:22:f4:52:54:d6:07:
50:55:f6:d9:7d:76:b8:0a:10:39:04:f8:2f:d0:5d:58:af:15:
1f:b9:82:49:ab:b8:e4:ae:c0:e4:dd:4d:aa:99:db:5f:1b:d1:
9a:37:44:1c:0a:25:67:9a:2a:83:4c:3c:ea:c8:ed:5c:d7:b7:
92:85:39:84:98:1a:0b:cd:c0:b2:c0:4e:f6:7f:6f:5e:d8:9f:
4c:4e:6f:86:94:c7:95:4f:08:d0:1f:23:d0:90:66:14:b9:ea:
29:12:f6:9f:cb:0d:b4:08:21:d7:b4:4b:6e:a1:2f:cd:5e:af:
9f:96:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:44 2025 by rpki-client