Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: ONSclGPpVHWfmaV76r61IyJgQoi5/dV8lTgxUzgwcSs=
Subject key identifier: 0E:2E:05:B0:A3:34:E5:5F:DE:E8:EE:E3:C4:CD:11:3C:10:43:66:CD
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 0199FBEAD6028C09E9FCCBE746EEBAA6B1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 0768
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: dWSOhBMlnbrSu0mWFlt00nPwJtvWjUUehZ2CAK5RC6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:02:8c:09:e9:fc:cb:e7:46:ee:ba:a6:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=0e2e05b0a334e55fdee8eee3c4cd113c104366cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:96:3c:e8:a7:e6:0e:d3:15:eb:39:e8:22:
b7:6d:15:91:1f:88:5c:df:4d:a6:a2:e1:72:c0:76:
78:e8:b0:c2:78:75:7a:9d:9e:78:eb:d7:0f:d7:b1:
2a:a3:50:d0:1e:95:45:a0:87:79:a8:53:53:29:88:
8f:50:62:65:41:06:39:2b:05:b8:55:0c:8e:8e:92:
5f:f3:0a:28:83:20:11:5c:0b:fe:69:21:a1:e9:78:
7e:bc:48:7f:b4:c4:e1:48:e9:ca:ca:d3:46:32:73:
4b:5b:06:33:de:13:50:ee:e0:c1:ba:93:93:de:1d:
16:40:f3:c1:fd:fb:28:52:89:a6:f3:e4:e2:41:ad:
c3:f9:d2:dc:c6:c9:9b:96:73:0c:2b:8f:a0:d9:b6:
64:70:c5:38:86:31:db:38:00:87:7c:ea:22:c4:8f:
52:1c:04:24:30:8f:8c:02:2c:08:8c:fe:64:e3:5a:
77:88:e7:1f:37:5e:06:ef:5b:9f:2e:7d:2a:37:5b:
1a:64:24:c0:64:a6:00:65:c1:f2:d8:c8:34:f3:e5:
14:3d:c1:e1:cb:0e:a6:8a:a7:a7:05:c8:b9:80:df:
c2:d2:b5:7c:8f:b6:c9:d0:c1:2a:0e:49:08:28:61:
08:88:b6:8e:1e:5e:52:7a:ef:19:93:74:77:84:c5:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:05:B0:A3:34:E5:5F:DE:E8:EE:E3:C4:CD:11:3C:10:43:66:CD
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:13:1a:00:ee:b3:e3:bc:14:39:89:0a:fc:b2:7f:5e:8f:d0:
68:99:ef:cc:01:7b:af:ab:95:a3:bc:22:55:a9:4c:2f:7f:fd:
42:54:de:f7:3d:53:62:8c:7e:06:21:eb:81:54:dd:01:3d:04:
90:b6:41:7c:cc:5f:9f:c3:82:ea:97:0a:83:b4:41:cd:93:31:
14:14:76:bf:20:ae:08:d5:4e:6a:08:1e:e1:28:15:9e:d3:3b:
c6:01:2c:d0:87:46:b8:56:41:53:44:b2:d5:94:48:ec:1a:56:
63:4d:5f:f2:2e:cc:5c:d2:22:52:e9:48:5d:44:ff:c8:bb:29:
0c:96:8b:cc:9d:08:54:f0:28:47:fd:53:02:ab:32:a2:4c:9c:
67:30:f9:d8:48:b8:ea:37:2f:fe:b0:5c:57:9d:1d:3a:e0:8b:
91:2d:72:2f:26:d6:5e:90:b8:7d:0e:b6:38:6a:09:23:06:70:
90:6b:24:c1:c1:01:37:47:f9:1a:85:d5:57:0d:39:f5:d4:19:
e9:0d:53:07:1c:fe:11:3e:9f:61:44:13:81:05:eb:13:71:33:
5c:bc:84:a0:af:f6:ac:19:29:da:99:5c:ab:39:6e:f3:29:af:
e1:4a:b9:b9:53:30:d9:f3:fa:4c:2a:e7:3d:fc:c5:a6:49:28:
1b:0a:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:38 2025 by rpki-client