Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: hJ1i/J33Wpwq5cN/eQ70Pkqu5hIyE3B9xjIohd4lfcg=
Subject key identifier: 4E:10:99:DC:FA:27:3D:1D:6D:6D:90:9E:0C:E1:25:47:11:1E:7E:53
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 0198D47277DB5D6D187E0E73D63E5F87210B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 1354
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: CfRxpLDEwEQDm0y5d1ckXV618P5+8m6dzZH+wxKxz6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:77:db:5d:6d:18:7e:0e:73:d6:3e:5f:87:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=4e1099dcfa273d1d6d6d909e0ce12547111e7e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:cb:5e:da:a3:e6:36:fa:f0:07:8e:74:bc:
38:9d:c1:37:02:64:44:0c:e0:4a:d6:6c:50:98:04:
ec:00:04:d2:3e:59:0f:c5:37:9f:c4:72:ec:5f:eb:
3c:d7:e1:8d:f6:b8:06:03:82:4b:4f:f5:37:df:d0:
b5:6e:03:e3:63:0c:e4:00:f6:12:bf:b3:3f:eb:a4:
65:8e:9d:2d:84:42:5d:9d:a5:7c:ff:de:cb:fe:cb:
e4:44:d4:e5:33:64:7b:4d:4f:6e:d0:6d:09:92:2a:
6e:92:2b:0a:ea:3b:5d:cc:1d:0d:41:99:f0:65:67:
ce:8a:46:b4:5d:fd:3b:fd:6e:0d:4b:3a:2e:25:3d:
2f:87:9b:17:12:e1:c9:f4:ec:bc:fd:a2:a3:ae:51:
6e:6e:9e:c8:61:fb:51:6c:3c:1c:ab:ed:00:e8:b8:
5b:b0:c5:3a:5f:3d:45:97:f6:18:c2:7d:e1:28:36:
7e:b0:1c:36:7d:a4:c8:ae:2d:9f:51:58:ff:82:42:
21:b3:71:2a:24:c2:44:57:33:15:ab:b5:87:5a:a4:
a5:f7:de:b6:a5:d8:34:05:51:d5:2d:c3:c9:3a:13:
a9:19:f8:e5:90:29:8c:46:ea:44:97:46:62:0e:4e:
02:4c:ca:a3:44:1c:77:f4:58:53:49:d0:43:75:bc:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:99:DC:FA:27:3D:1D:6D:6D:90:9E:0C:E1:25:47:11:1E:7E:53
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:16:6f:d6:19:bd:4d:4f:2a:63:dd:49:49:42:0c:2b:a5:e7:
f9:75:d3:3a:7c:69:c1:f7:26:55:d8:26:8b:7f:0e:36:80:39:
36:40:f7:dc:02:df:d7:44:83:6b:12:ed:e9:13:28:fe:18:56:
4b:a6:83:27:6d:af:c9:e2:60:12:cc:60:22:0b:58:b5:bd:4e:
d8:f5:cc:96:f7:31:3d:b7:5e:5f:08:1b:9b:93:9f:8c:3a:71:
78:a6:e9:4b:bb:68:5e:15:1c:74:8b:4f:3c:46:6f:80:c7:59:
5c:c6:4c:d6:8a:13:92:a7:6c:bf:25:bc:13:db:09:8a:a7:9a:
dd:fd:ec:c5:30:fa:54:59:6e:64:61:85:d9:27:77:3e:42:b0:
e7:29:c0:91:04:4e:94:da:34:f6:21:c3:71:96:dc:8e:97:a8:
07:78:c9:cc:a1:c0:70:8c:45:7a:79:dd:8b:a8:e1:28:9e:b5:
d4:a3:bc:d8:c3:2f:f0:9a:30:bb:36:cd:02:f7:39:38:26:fb:
b8:a9:b2:05:6e:f0:56:ad:27:6f:52:2a:79:b8:d9:c3:60:79:
a0:4a:ea:b5:c6:7a:07:10:e0:93:f8:e7:b7:a1:45:a6:b3:83:
a4:c4:07:c3:ce:e0:4c:c3:48:77:f6:09:5e:ae:37:6f:4e:18:
89:dd:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:06 2025 by rpki-client