Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: AczurnWBQ2y6+vQd/d/JN22PLQcSFB27BVhreuGn1gM=
Subject key identifier: 2F:28:D9:58:EB:67:5D:D9:87:4D:7B:F9:39:A6:F4:3F:40:30:2E:14
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 0198D705CD818D32D1D6D8B1322F5AC3967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:18 +0000
Manifest this update: Sat 23 Aug 2025 13:02:18 +0000
Manifest next update: Sun 24 Aug 2025 13:02:18 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: rdqXuAga57h25xCaIWFhI/IbyX4w3q3mc1bd2ltrVmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cd:81:8d:32:d1:d6:d8:b1:32:2f:5a:c3:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Aug 23 13:02:18 2025 GMT
Not After : Aug 24 13:02:18 2025 GMT
Subject: CN=2f28d958eb675dd9874d7bf939a6f43f40302e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:31:d4:a7:d2:d0:68:d7:f5:3c:2b:cf:28:
fa:0b:79:53:b2:e5:44:a3:2e:08:68:9c:60:cd:03:
0e:f4:97:d6:93:e9:e0:0c:cf:8f:ea:82:1d:4f:0e:
be:fe:48:5e:0b:e2:25:d1:d2:ed:0d:03:f6:b5:b3:
f0:fe:67:6e:96:f5:13:0d:1a:7f:8c:d0:3f:16:ae:
4d:37:d6:03:44:5c:3d:54:fd:68:b5:a2:e9:44:3f:
c8:01:96:cc:0f:31:55:d7:a8:a9:81:ec:3a:e5:6a:
36:99:ed:02:b2:99:b0:d7:74:fc:34:c2:2a:17:29:
06:d2:7b:a6:b4:46:aa:80:aa:fe:31:ff:9a:f6:1e:
8d:72:d6:cc:79:39:4e:06:c7:14:77:99:58:28:c0:
e5:65:ff:5b:df:b6:88:0d:f7:e0:74:80:fd:ed:aa:
25:97:db:75:9f:c4:4d:5c:1c:f8:19:c3:a9:d6:fa:
96:00:0f:21:c0:98:12:b2:de:a7:0e:95:4c:18:24:
01:e0:53:26:8f:61:9a:9a:62:78:de:8e:90:c7:31:
7d:b2:0f:64:4e:6c:5e:90:5f:ec:43:96:eb:66:0c:
82:70:65:e3:f4:9a:18:b6:a1:f6:c1:97:38:23:98:
e4:37:5f:af:a7:02:fd:fe:b4:29:97:7d:f3:04:f1:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:D9:58:EB:67:5D:D9:87:4D:7B:F9:39:A6:F4:3F:40:30:2E:14
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e0:d8:1c:47:a5:cf:07:fe:02:c4:f6:bf:f7:17:16:89:d0:
e1:f0:40:8b:a0:d7:e1:1c:5e:2d:d9:e5:5f:50:0b:4f:f1:7b:
17:7f:2d:1f:01:52:3a:41:32:85:93:0a:fb:53:bc:73:71:bc:
f8:32:10:ed:bf:31:6a:da:46:4e:c9:1d:09:1b:99:b3:28:bc:
51:96:23:d2:4d:34:63:f5:aa:32:5c:bf:df:40:29:ec:87:83:
9e:b3:48:12:e8:a6:13:6e:52:49:42:50:b8:66:df:35:12:e5:
aa:c6:00:9f:8c:f8:de:b5:2b:48:06:71:d7:81:aa:bb:49:b1:
8a:19:00:44:47:d8:ee:b7:22:64:ce:d0:34:90:18:a2:de:e8:
cc:be:8f:99:76:ba:f2:29:e2:37:56:0f:39:2d:43:f9:52:1e:
72:39:dd:32:b9:f7:a6:21:a7:54:0b:cb:16:e8:06:4d:21:d2:
c0:2f:9e:10:fd:a1:e4:1a:90:25:7f:7e:84:aa:ab:12:ca:d3:
6b:84:b6:7f:43:b5:ef:86:87:6f:02:48:0c:84:7d:a6:c6:ad:
7e:92:ff:a7:7f:d1:76:1c:20:84:e0:23:ba:d4:67:65:db:a3:
c1:d2:42:c4:ef:1a:c9:76:af:00:f3:71:bb:43:72:91:45:97:
26:83:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:31 2025 by rpki-client