Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: LSlVDn2nTgUlakGMKB4zzLoSFUfhw+/bbvFtCOb1ZWs=
Subject key identifier: 78:82:76:2E:23:89:DB:EF:C8:DB:2F:C1:BE:23:FF:A9:DE:7F:37:1D
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0198D51573F09C9B0A8F080084A87CA75643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: WLKwmFOuGpbFnye9qoDok8NO4FGJAN7SSkDIiL7XVLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:73:f0:9c:9b:0a:8f:08:00:84:a8:7c:a7:56:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=7882762e2389dbefc8db2fc1be23ffa9de7f371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:dc:fb:60:19:48:88:4c:11:d5:17:a6:46:
9e:3d:51:66:fe:a8:48:87:2d:0f:fe:af:b1:c5:a6:
02:5a:00:9f:d3:c9:52:28:19:0b:75:45:be:e9:69:
df:c1:f2:9a:c6:32:af:db:da:91:84:cb:f9:cf:c8:
86:8a:09:d7:fd:94:5f:c2:d9:66:81:34:20:9d:a6:
09:b5:58:91:ac:cd:65:96:f0:30:57:32:2c:c0:3b:
df:f0:50:b0:4f:e9:0a:4d:0b:18:12:0e:88:ed:cf:
87:04:58:62:d3:43:11:f9:69:7f:18:7c:73:49:30:
fa:70:66:f6:5b:3c:84:dc:70:1e:af:ac:78:4d:3b:
7e:3f:6d:42:c5:8b:8e:81:fb:59:12:e0:aa:7f:06:
62:b3:c4:7d:45:a9:6e:7a:af:cf:c2:3a:f7:fe:d4:
6b:dc:3c:db:8b:aa:ea:a1:4c:4d:7b:60:ad:7a:34:
08:1a:aa:fa:58:1f:46:46:36:c0:ba:8e:6a:11:9e:
4e:c9:38:0e:95:8a:be:0e:32:61:df:fe:af:53:19:
99:e1:9f:74:31:b5:59:42:28:65:b1:40:57:67:de:
c9:73:59:33:35:a7:27:7f:28:f0:13:ad:64:0d:d8:
df:b8:10:21:ce:d6:ad:c0:87:be:7a:6a:0d:e5:9e:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:76:2E:23:89:DB:EF:C8:DB:2F:C1:BE:23:FF:A9:DE:7F:37:1D
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cc:46:7e:22:6e:a8:f7:dd:0a:d5:72:a2:c0:a7:91:fc:da:
07:8a:d3:fb:14:e6:80:4d:f0:99:12:06:b9:6a:1a:c8:f1:13:
5d:70:1e:8b:be:5a:a4:85:f1:79:b9:ca:56:78:8f:9c:de:d9:
31:57:15:cf:87:1b:87:6d:b0:86:82:8e:54:8e:d6:37:2d:f0:
a1:5e:d1:0c:31:98:4d:7d:f7:fb:66:86:1d:de:e3:8c:5d:0a:
38:d7:a5:82:df:06:09:36:03:17:5d:50:f1:f1:c7:e2:78:0d:
78:66:f1:04:3d:45:54:de:b1:1f:00:1a:6e:a9:3c:b8:db:b7:
91:7e:76:d9:17:a5:28:1c:c6:cd:79:0c:bf:48:c2:77:39:84:
0d:d8:e7:3f:65:b9:b8:ce:2e:55:be:5d:2f:fa:88:4c:a5:e0:
25:00:e7:ee:ae:02:42:c9:a0:d9:83:52:b3:fb:3b:10:f2:ee:
fd:e5:13:26:17:87:6b:a5:4b:b3:9d:6a:e5:dd:6e:b9:85:39:
04:9b:81:e3:ff:9e:f9:0b:76:67:14:56:79:c4:ab:25:77:15:
ab:c6:ae:d3:83:4f:28:68:2c:23:58:5c:35:61:b6:bd:aa:04:
b7:d7:7b:7e:16:ef:a9:48:65:43:4f:3d:86:9d:df:de:c0:31:
02:85:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:26 2025 by rpki-client