Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: Q0lvxEDbKkPuSkWjPvh6m4MCRA+VKov6cC3xVAXPDuw=
Subject key identifier: CE:AB:A4:F3:EA:26:FC:8F:BC:FF:BC:DB:90:3C:57:25:47:4B:29:D2
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 0197C61371FF2CC0D9D5192C6CC5CDC531C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 041F
Signing time: Tue 01 Jul 2025 13:00:52 +0000
Manifest this update: Tue 01 Jul 2025 13:00:52 +0000
Manifest next update: Wed 02 Jul 2025 13:00:52 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: QGO3WPgKtICltFEh0KDpnce4AKfIa9gD+ceadxLGUQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:71:ff:2c:c0:d9:d5:19:2c:6c:c5:cd:c5:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Jul 1 13:00:52 2025 GMT
Not After : Jul 2 13:00:52 2025 GMT
Subject: CN=ceaba4f3ea26fc8fbcffbcdb903c5725474b29d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:c3:00:09:55:04:f1:9b:9e:5b:59:25:15:
79:c4:54:9b:9d:b6:52:10:bb:2d:94:42:81:77:ba:
f9:73:89:ff:10:2c:bd:41:dd:cd:d3:03:77:86:d8:
a8:49:a8:c6:60:6c:1b:e6:6b:4e:72:bb:14:5e:cf:
e5:20:3d:d2:6d:18:cc:f6:26:d4:20:e6:56:65:5f:
8c:02:d0:9b:1c:6b:3a:26:81:d8:bb:96:f0:17:85:
dd:f0:45:46:1c:dc:76:1d:09:27:ce:72:2a:cd:60:
d7:b5:5e:78:84:82:d5:79:81:f7:91:6a:80:7b:af:
c4:78:a7:6c:65:68:5e:51:d6:c1:b2:47:8f:00:a6:
c4:af:74:d4:2e:4b:85:86:4f:2a:c1:06:09:a3:64:
06:4a:17:79:8b:3c:d8:62:dd:ae:a1:0a:6c:23:86:
aa:8a:98:02:d0:5f:8d:7f:db:dd:4a:2f:db:91:b1:
e0:52:73:3f:d4:c3:b1:c9:98:86:2a:57:05:43:d0:
04:22:dc:f0:af:7a:14:cd:a1:85:4b:7d:e2:ab:a2:
a6:81:46:5b:a1:d5:ba:48:28:c5:fe:0d:10:76:93:
42:5f:81:f5:fc:2d:b8:f5:c7:54:30:d3:75:92:56:
af:eb:79:1f:1d:ea:3d:e6:d4:33:65:1e:c4:ed:08:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:A4:F3:EA:26:FC:8F:BC:FF:BC:DB:90:3C:57:25:47:4B:29:D2
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:50:df:87:1c:a2:5d:c0:d7:a9:9f:f4:fe:19:43:e9:d6:f2:
48:a2:a3:19:4f:9d:2e:d8:25:76:51:0b:cc:98:18:e5:69:f7:
e8:48:dd:d4:d9:ca:54:e9:c8:5e:73:0f:5a:05:a2:e9:0c:d5:
fa:cd:63:2d:7a:b1:63:a4:3c:b2:d1:67:f5:7e:55:d1:5d:87:
e7:08:e2:67:35:5b:f5:8d:7a:57:f5:09:04:91:ce:9b:29:6f:
8b:66:df:52:d8:f9:60:11:11:8a:a3:8b:a8:6b:6e:4e:3c:b5:
08:0d:6c:78:71:ad:d6:dc:f4:1c:5a:b1:19:ed:80:3f:b2:78:
76:89:5e:59:20:c8:13:25:91:ef:27:eb:6a:63:a9:29:d7:0e:
81:f2:d6:cc:01:b9:f5:2e:c9:44:53:d4:82:1a:6e:96:fd:54:
e3:b8:d8:46:f2:4c:db:4d:fd:b1:4d:d3:2b:12:c6:a7:df:3f:
25:80:4a:56:26:aa:eb:22:02:b3:09:07:88:83:79:20:4f:33:
de:43:d4:c6:a2:2d:6b:06:0b:14:e6:da:2d:db:da:76:16:c7:
0c:ad:62:91:c3:6d:8c:8e:eb:0a:30:69:ed:9c:5b:fa:b3:ce:
4e:91:c3:b5:f7:c4:65:cd:f8:12:d5:f4:9d:d9:10:c8:b1:fa:
fb:0a:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:09:13 2025 by rpki-client