Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: TuoRb7FIPFfRAFWoUmJzpxvH4xlrUlWoiY5Idn/StZQ=
Subject key identifier: 5C:DE:0A:CA:E0:30:FC:4E:A8:D8:ED:70:88:F7:62:C7:F5:1E:E5:13
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 0198D4A79AB0CC1EFE31DF36BC2B000BCB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 15A0
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: Mbg0N+7EihBwlwdT2jFWQI1/2ij2xCC9dwyq2BEfuvI=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9a:b0:cc:1e:fe:31:df:36:bc:2b:00:0b:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=5cde0acae030fc4ea8d8ed7088f762c7f51ee513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:d5:1f:6e:4e:bf:da:2b:69:c1:9c:4d:24:
3b:21:35:f3:53:7d:b6:87:09:f6:b7:ba:94:08:2b:
d2:16:d3:38:38:ad:e5:e6:4a:74:00:f9:3d:53:5d:
66:65:65:54:41:01:46:3d:19:7a:e1:61:37:1e:2b:
ef:73:e9:f7:f9:a8:f4:01:d0:e3:06:ae:af:55:9e:
3b:d5:c6:c6:55:ca:89:f3:ab:32:63:7b:4f:fa:22:
5c:4a:b7:6d:92:5e:22:f7:c5:98:1d:60:e1:9c:01:
47:a0:f3:5a:79:c9:a1:0e:6c:c1:b0:ac:d0:f9:50:
3a:6f:e9:a4:16:f3:9d:da:f9:f0:d2:f6:e3:37:73:
0f:92:95:56:ba:ad:95:16:14:90:73:b8:e9:e6:1e:
ad:9d:56:d9:de:13:1d:93:f1:7a:37:96:2b:01:3a:
7e:6b:7c:7e:e1:e1:2a:35:c4:19:76:c3:64:de:74:
3f:f9:a4:f5:27:0d:98:fa:82:d3:b3:0f:52:ff:f8:
fa:2d:72:81:ca:02:cd:8a:eb:5f:3f:27:b1:22:94:
37:b8:74:f1:91:dd:45:18:8e:2d:71:dd:aa:14:c9:
3f:69:ae:41:25:99:71:dc:bc:7c:91:6e:d6:69:08:
09:65:f0:ca:0d:59:1b:4a:8a:78:87:9c:c4:06:be:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DE:0A:CA:E0:30:FC:4E:A8:D8:ED:70:88:F7:62:C7:F5:1E:E5:13
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:e6:cd:d2:06:f2:6c:e0:2b:5c:75:42:a5:d0:91:89:88:
a5:93:ce:a6:b5:25:bd:f6:66:97:cc:26:67:4b:d2:46:82:e0:
14:37:6c:6f:2f:57:70:eb:3e:bc:e9:8e:8a:ee:98:1b:2e:48:
73:93:85:37:15:61:7c:b3:c9:ab:36:d4:4e:e5:9a:3b:aa:c5:
b9:05:92:85:83:5d:fa:42:ed:ae:34:e2:bb:dd:c9:fc:0e:8d:
75:6e:67:91:96:67:97:6e:7e:e8:02:30:ef:3b:48:c5:d2:5c:
30:2c:5c:3c:9c:79:d7:02:aa:05:08:bd:b3:96:d9:5c:7d:74:
16:e9:7f:78:51:12:58:4d:12:e2:74:a6:fe:4e:07:5a:6a:75:
2a:7e:1c:58:65:13:b5:77:fe:31:dd:2c:34:c1:44:64:c6:ae:
57:0c:97:8f:a6:2f:db:5a:de:c3:36:19:53:0a:ff:12:36:52:
be:e6:88:fe:38:c1:64:3a:f9:e5:68:c9:4a:61:10:44:d6:d8:
8e:34:a5:9d:39:7e:dd:c7:28:01:42:c3:11:53:a3:02:61:64:
9e:b4:7b:cb:d2:3d:cf:91:35:b2:a4:04:25:ac:e9:d3:b1:c9:
0e:12:a8:ad:95:96:1a:89:62:b7:f0:73:11:7d:f5:60:5d:0a:
4d:6d:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:55 2025 by rpki-client