Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
File: EYKb9HZLMe40tE2AYpIJqMcGXq8.mft (raw, json)
Hash identifier: +kwCuZZB/3+t+RY5+7JV9yYTI3EKa/bOKb3BkmDj6Go=
Subject key identifier: C2:55:A4:94:DA:9F:E1:F8:AA:28:B1:FD:6C:9D:99:03:8E:0C:ED:34
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial: 0198D65F4BBA12C7AE1637D0CEDD0D7738A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
Manifest number: 0E
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: EYKb9HZLMe40tE2AYpIJqMcGXq8.crl (hash: K6fqXZ6UWPm1FlyVaszexJl0ouHoxQ6zpTjHCm/qyiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:ba:12:c7:ae:16:37:d0:ce:dd:0d:77:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=c255a494da9fe1f8aa28b1fd6c9d99038e0ced34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3a:c1:e5:31:37:d8:83:f8:d9:3e:bf:40:8a:
2e:c2:ca:7f:2f:fe:00:55:b5:e5:0f:c5:22:8a:13:
a5:92:fa:ea:86:f4:4f:18:38:e3:a8:58:cf:bd:1d:
16:1f:31:ac:9c:b3:b5:f3:50:cb:c0:fd:a3:3a:5a:
6e:29:15:d8:e7:f4:29:75:77:59:38:e0:68:1f:b9:
be:6d:d4:3f:3e:8c:8b:36:01:5a:aa:e3:15:0f:7b:
f3:64:ed:bd:8f:d1:54:ca:ea:58:b7:43:30:41:0a:
f8:dc:7c:05:03:c7:45:1a:7c:e8:1e:fe:e8:31:71:
bc:4e:ed:95:36:b0:e7:4b:73:45:be:cc:77:1a:dd:
1c:b2:d5:c2:0a:85:bd:8a:b1:88:0c:f6:4c:ee:b5:
a5:6e:83:29:69:3d:68:fc:60:c2:90:de:6a:54:fc:
22:01:fe:9f:8a:f6:ff:05:84:1f:b7:3f:44:d5:c1:
55:3f:60:22:ec:d4:09:7a:08:2b:3c:85:a9:13:be:
a3:bb:ec:17:6c:30:ef:81:e6:7d:3b:f3:fa:f5:22:
21:a8:85:2b:f5:de:b4:28:a9:fa:e7:1b:bd:48:61:
21:1b:0f:97:18:59:fa:6a:51:4f:ac:e4:cd:95:48:
75:18:67:82:1a:bc:fe:ad:0b:9f:db:79:7e:13:98:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:A4:94:DA:9F:E1:F8:AA:28:B1:FD:6C:9D:99:03:8E:0C:ED:34
X509v3 Authority Key Identifier:
keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d0:b6:cd:cf:f8:7b:01:8b:b2:a6:c2:af:9d:a0:c2:6b:9e:
44:81:d6:91:9f:f4:0c:29:f0:93:d8:bd:7c:06:a7:be:3e:f6:
1a:e2:78:f3:49:c9:16:a3:84:4b:bd:0b:c4:d3:d8:26:10:76:
c9:5b:3f:6f:9e:f4:9e:61:89:48:01:c0:48:df:e9:e6:7e:66:
8c:b9:7b:1c:7d:1e:5f:6f:f2:b3:a8:bf:cc:b6:8e:23:3e:de:
73:eb:9c:6f:6b:63:87:3d:83:02:cb:68:dc:af:97:dd:ae:12:
ac:c9:7b:20:5d:ec:e1:3f:6f:e9:f6:64:f7:8e:04:99:40:01:
15:46:16:db:d3:ec:9a:26:f5:aa:a7:ba:c3:94:a3:bf:53:9a:
be:a4:34:f8:73:06:d2:5c:a5:e8:01:b3:46:ea:39:e6:11:f8:
ef:c5:19:72:f0:cf:84:4f:41:51:5e:70:f0:68:84:9f:5d:fb:
ac:e9:dc:34:38:c9:81:85:e3:46:09:0d:3e:91:a6:1e:de:c1:
97:26:9c:1a:1c:43:12:6b:77:06:b0:45:5c:94:bc:6c:c4:06:
0f:c9:61:3e:a4:51:c0:e9:f9:9c:a3:35:19:a0:c5:45:db:46:
c3:75:79:70:1c:f1:3d:a1:e4:c8:0d:4a:73:63:f6:bb:8b:c1:
96:43:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:42:52 2025 by rpki-client