Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json)
Hash identifier: JBT6N8YoHtADSph2O9MBYYr+LAFYS6XGRziv0u/YEpo=
Subject key identifier: 6B:5D:ED:AD:E7:18:42:83:26:D9:E9:22:F4:7F:9E:BC:BB:BE:89:48
Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969
Certificate serial: 0198D62983DB2B9568301CD90FA658FA13F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
Manifest number: 2E
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: LMaRefh1CVPeQO0yluag3acmh1+i6j0S6uRkKVMAv9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:83:db:2b:95:68:30:1c:d9:0f:a6:58:fa:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=6b5dedade718428326d9e922f47f9ebcbbbe8948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:58:97:9e:b5:49:96:6e:69:d4:a2:65:1a:
c2:0f:03:05:74:ce:f2:94:15:70:24:8b:d7:68:7f:
4b:be:5b:94:bb:c8:13:98:0c:9f:ef:7d:53:68:76:
4a:70:6b:58:3b:55:b7:a6:c2:59:88:30:28:3a:c3:
c2:ea:f7:5f:d3:e0:55:e6:1f:2a:87:89:5b:9b:54:
a1:d6:5b:5a:75:37:b8:5b:d0:1e:6e:e9:41:90:5f:
55:1d:81:ab:61:0c:35:bd:3c:74:cf:1b:8e:71:46:
b6:ee:1d:8d:0a:d9:fd:32:b3:8d:1f:ae:60:07:fe:
a5:3f:cd:8d:07:df:e7:b1:a2:4e:94:fd:0f:13:b3:
75:8a:fc:80:16:63:1f:c5:e0:65:8e:20:aa:d0:73:
fe:3f:f6:65:e1:58:75:b6:dd:73:28:d5:3f:ae:5d:
31:39:e7:25:40:2c:b3:c4:f4:d0:2b:98:f7:50:40:
b3:4f:a6:5e:b2:f4:72:28:8f:74:ee:a9:7d:15:bb:
a4:04:85:ce:86:89:fe:39:ae:7b:d1:97:49:da:50:
ee:71:ae:9e:50:bb:c7:aa:f7:cf:74:3d:c5:ad:c4:
c2:4a:c3:98:e9:8e:66:88:64:bf:ce:cb:67:3a:c3:
35:78:a5:2e:70:5e:21:0b:23:9a:a8:07:b2:b4:3f:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:ED:AD:E7:18:42:83:26:D9:E9:22:F4:7F:9E:BC:BB:BE:89:48
X509v3 Authority Key Identifier:
keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:47:6f:ac:69:66:c4:1d:a6:5e:a6:e3:18:e9:a0:66:24:
02:38:9a:7a:78:8d:00:cc:6e:f3:b5:a8:7d:df:08:56:13:f4:
c9:fc:ba:2b:12:2b:87:03:38:6c:06:e6:0a:7f:69:4c:df:88:
c4:6c:34:54:bf:3f:5f:2e:76:71:cd:28:38:2d:e2:74:85:2f:
b6:30:4b:e8:25:10:8a:e6:e0:68:d8:ba:ce:f6:40:85:fe:dc:
d2:9a:33:10:ed:d9:79:e6:12:b5:9d:ea:14:b9:49:c6:b7:42:
e2:52:bb:f6:08:56:2d:96:a1:73:60:e0:d2:a8:4b:77:ad:7b:
68:e0:f5:5a:db:86:14:0d:e6:d3:21:b7:f0:a2:78:26:ad:f3:
72:17:a2:0c:0b:d8:51:ec:01:60:f4:8a:35:0a:e8:bc:28:20:
8a:b1:18:17:c4:60:34:d3:cf:78:7c:5e:8b:80:14:9b:79:f6:
5e:8f:15:da:43:e7:52:3f:3b:dc:77:cc:50:25:81:93:81:d0:
c5:06:7a:0e:47:88:93:cc:6c:00:7b:e2:9e:3e:e6:50:bf:9f:
90:f7:0e:06:d9:a6:de:1f:79:8c:ea:99:8e:0c:e3:55:b8:14:
69:5b:71:c6:fc:cf:29:d1:69:4e:42:88:df:bc:b0:6e:27:4e:
56:bf:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:51 2025 by rpki-client