Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier: XWzxMN67Kj5RgyficGcvCVlkdFs9PtK3niqR12vFzJo=
Subject key identifier: 16:33:D4:7F:7D:1D:D7:B9:71:F1:55:1F:06:4C:81:0D:A0:CC:12:96
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial: 0199FBEB0F60A4A785B8A3B9B4D4C8F32FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number: 02F3
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: 86pUfL2nOniQG5X+F3N7fXs8mzf5l5DoRSrtkc921No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:60:a4:a7:85:b8:a3:b9:b4:d4:c8:f3:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=1633d47f7d1dd7b971f1551f064c810da0cc1296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:64:33:f8:9f:bf:56:c5:45:be:56:72:fa:
fa:1c:98:d2:46:8e:43:8a:5b:60:9d:e1:df:06:b6:
2b:cf:87:68:05:50:c8:b7:e8:cd:9b:9c:19:5b:6e:
e4:04:d0:ef:ef:98:27:6b:9f:dd:ca:b5:41:4c:ee:
bc:0f:6d:49:13:15:7c:f5:02:ab:21:3d:71:02:5d:
54:43:c6:89:00:cb:b6:16:a9:7e:43:73:04:24:2c:
b0:3a:e7:bc:a9:54:20:f5:e0:26:26:c1:bf:e8:74:
db:1a:3f:ed:77:34:1c:cc:e6:f1:d1:86:de:c2:ea:
26:db:20:65:59:66:e5:6a:67:27:e1:4b:92:68:eb:
78:cd:b2:fc:dd:f4:3f:1b:34:22:24:b7:a8:8a:f8:
d4:56:94:3b:ba:85:f9:1c:10:1d:a9:44:15:06:3f:
8d:14:b3:2d:2e:21:e6:0b:3d:83:e4:74:11:89:8b:
16:88:e8:f0:1c:3c:75:be:b0:2b:ff:ff:e3:a8:3c:
9e:8e:73:30:33:d7:ff:6a:ac:83:2d:cd:ec:24:f0:
69:e6:90:e9:4e:77:7a:0c:8b:14:43:a5:bc:4f:d2:
d2:84:06:42:ed:3a:2b:42:d3:15:9f:e9:af:e8:c0:
4b:1b:67:27:77:ca:93:97:d4:d3:e2:8f:15:d9:25:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:D4:7F:7D:1D:D7:B9:71:F1:55:1F:06:4C:81:0D:A0:CC:12:96
X509v3 Authority Key Identifier:
keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:f5:f3:61:75:d3:8f:b0:a4:69:d3:ae:75:8e:4d:fe:1b:
f9:d3:20:96:7c:dc:08:29:78:59:90:8f:e3:88:6e:6f:34:d0:
5f:a5:73:39:80:e2:9f:1b:a2:fd:dd:bd:f3:7a:c6:8f:c6:7d:
df:4b:bf:74:8f:6e:db:97:d4:a4:3b:58:7e:05:e6:7d:73:79:
d5:33:b4:33:1e:40:5c:15:ac:8e:21:cc:57:d6:eb:6c:fa:6b:
3b:35:c1:50:f3:8b:4a:8e:1c:07:0b:12:e1:a4:cb:01:bb:b3:
b4:fa:c2:74:b6:16:8e:6a:ab:17:2b:d3:2e:e4:60:6d:5e:ee:
ee:db:60:09:ae:90:82:6b:23:38:ae:e1:cf:7b:99:ba:1c:5d:
53:94:bd:25:f5:96:fc:18:51:5a:38:f2:c3:3b:c6:4e:37:5b:
73:21:40:f7:3f:d2:2d:eb:8c:cd:1a:4a:b5:1c:3b:df:64:16:
9d:23:25:93:90:d4:02:6f:d0:1b:b5:2a:4f:17:04:a1:68:1d:
5f:92:6f:88:10:1a:95:d1:8d:86:de:8d:46:69:52:4f:9c:1e:
ff:01:b4:b2:27:88:80:a0:46:83:2b:18:18:0e:bc:2f:94:9a:
81:9b:0c:c8:46:f5:57:7c:d7:ed:6b:15:31:8d:e9:4f:51:48:
6b:e4:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:44 2025 by rpki-client