Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: XTPt9qoTWHE+V/HJBF8/fdYoDcGjQ8BxDbIU7DjRn0E=
Subject key identifier: 81:86:BB:F0:91:35:BA:D8:E0:A9:62:BE:BA:CB:9F:43:AD:F7:47:CC
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 0198D660E2EB0AEF03667A3D85D826823CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0D1B
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: Vzhkzu1qc03QqCHkk8ihd4lYzcC3MqwajHdOJA2YJe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e2:eb:0a:ef:03:66:7a:3d:85:d8:26:82:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=8186bbf09135bad8e0a962bebacb9f43adf747cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:8a:25:7a:2a:83:e3:4c:16:7f:de:52:ee:
68:2f:48:98:cb:88:66:e0:47:54:ff:e7:15:c9:f2:
af:03:61:4d:70:54:ed:65:26:42:63:26:8f:d4:00:
57:5a:24:9e:96:93:a3:8a:9c:23:aa:06:f2:66:44:
02:b2:5c:2c:8f:45:b3:fe:54:2c:0a:d2:69:c6:12:
52:f7:3f:af:ad:6b:8a:28:e5:ee:f4:65:ca:94:fb:
fb:5a:06:e0:da:d8:cc:57:c0:6e:46:5d:0d:3b:49:
8f:4f:ba:37:2f:a9:cd:a5:02:76:7e:02:92:f0:c6:
38:a6:da:07:ad:1d:1e:fd:08:5d:53:6c:e1:da:de:
45:2c:8b:91:f1:c9:ba:df:de:56:14:7d:05:f6:32:
a1:b1:91:99:12:16:3d:f5:d5:c8:a2:fe:0d:7d:98:
64:d2:a1:50:fd:10:ca:ee:4a:35:dd:cf:d8:7d:80:
d5:d5:fb:92:6d:c7:16:ad:21:f1:db:a8:3b:16:bc:
05:02:51:f3:92:8e:42:b2:d4:7d:97:3b:1e:b1:b9:
24:f5:bf:55:02:dc:dc:a4:87:88:99:06:f5:4d:9a:
a0:1a:7f:79:05:53:5b:84:1e:53:63:f3:9e:25:3d:
fd:86:6e:ec:72:2d:a9:23:85:92:59:55:68:08:62:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:BB:F0:91:35:BA:D8:E0:A9:62:BE:BA:CB:9F:43:AD:F7:47:CC
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:c1:c9:94:b1:f9:f5:7d:b9:cb:9c:0d:ef:d7:a3:29:18:
eb:fd:3a:41:55:17:dc:dc:39:f7:ec:78:d2:d0:26:5a:ea:21:
56:cd:54:e5:bb:73:68:b5:9d:f3:9b:94:41:7a:67:b4:92:62:
ab:27:86:4e:e7:87:29:5d:d8:db:b4:e7:ab:7a:6f:4a:77:1c:
da:e8:f3:75:bb:b9:bb:ce:6a:ea:90:5b:9a:76:a8:1e:d8:90:
bc:11:e4:8a:ba:2f:e2:4f:18:a3:48:b9:e5:5d:1d:4b:f2:48:
bd:e0:a6:23:9e:96:00:11:ac:7f:98:18:db:b8:fa:83:05:a2:
f7:27:ad:8d:54:5f:8f:f9:b3:65:3a:12:c9:11:ab:4d:6b:d6:
3b:ba:a7:93:c2:3d:e9:84:f3:a6:07:46:5f:70:17:5c:96:59:
0c:7c:d7:87:28:fa:7a:ce:e6:ef:36:22:0a:13:8b:ba:52:d5:
5a:41:61:de:9b:e9:c3:8c:8a:d8:a4:aa:eb:6b:1e:15:06:6c:
1d:2a:f8:72:d5:d1:be:50:3f:de:15:01:c8:d9:f1:81:e4:59:
5b:d1:24:5a:4d:89:66:35:28:ae:61:1f:63:64:db:12:82:f5:
95:30:7d:6a:4a:13:43:8c:9d:98:f3:e4:a1:32:92:08:09:74:
d4:8e:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:56 2025 by rpki-client