Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier: GBDx7SfG05yuQQhxEUjS4893mzTTdivuX5fHTxjV2Ns=
Subject key identifier: 05:2A:3E:4E:7F:53:C6:F9:F7:E9:77:3F:CC:0D:7F:44:D9:9C:3F:EC
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial: 0197BA7E86FF74CC083C0AACF49CEE1BFFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number: 14F1
Signing time: Sun 29 Jun 2025 07:02:23 +0000
Manifest this update: Sun 29 Jun 2025 07:02:23 +0000
Manifest next update: Mon 30 Jun 2025 07:02:23 +0000
Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: sfXX28e3N6IHed9qumtgWQPoFmTm1NmUVVdRptWkEdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:86:ff:74:cc:08:3c:0a:ac:f4:9c:ee:1b:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
Validity
Not Before: Jun 29 07:02:23 2025 GMT
Not After : Jun 30 07:02:23 2025 GMT
Subject: CN=052a3e4e7f53c6f9f7e9773fcc0d7f44d99c3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:5e:eb:2d:9b:32:c4:d2:0a:e6:36:1b:a3:
13:79:45:c2:d8:02:31:0d:92:8b:52:3a:0a:90:ae:
8c:45:f1:b7:ee:40:65:0e:57:cb:05:bf:18:fa:d9:
d6:7b:da:2a:bc:29:36:cd:a7:ab:b7:a6:8a:1a:fd:
b3:c2:55:56:01:5f:2b:f0:39:e3:34:4e:18:91:bb:
53:38:ad:a8:24:89:d2:c7:fc:c5:ef:f3:35:4b:66:
e3:b1:11:8d:8d:66:4d:d1:87:1b:16:8f:51:61:73:
fc:a4:ee:73:2f:fe:ad:a6:eb:87:f1:75:58:f2:28:
fd:7b:22:e9:6e:b9:e6:5e:4d:ca:b9:74:b6:3c:28:
68:8c:a8:d7:5e:0f:2f:41:f0:38:49:ea:3b:c7:bc:
85:fe:55:df:17:39:f6:1c:a7:65:11:6e:d6:ec:1d:
3a:88:7b:41:ba:3a:c9:e3:9c:7c:16:00:44:b8:09:
26:fd:7b:8c:b7:86:88:02:e3:9f:b3:48:03:13:bf:
98:2f:7d:d4:32:76:84:44:7b:89:3a:7f:26:05:e9:
95:9a:f0:08:88:30:96:22:1f:46:54:b6:8e:4f:61:
1e:c5:63:75:26:c9:16:45:7c:66:d4:32:e0:21:82:
de:ab:14:2f:20:32:a6:e4:de:c2:1d:94:ab:fb:81:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:3E:4E:7F:53:C6:F9:F7:E9:77:3F:CC:0D:7F:44:D9:9C:3F:EC
X509v3 Authority Key Identifier:
keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:d2:c5:f4:b8:9c:50:64:6c:e2:15:87:32:ad:2e:e0:62:
51:6e:69:64:34:1d:7c:18:2f:f1:c3:54:6a:a1:ee:83:96:78:
22:65:8b:f2:4c:0c:17:bc:43:c6:b7:20:96:33:b0:52:d2:6e:
18:91:bb:b5:1a:18:61:51:5e:4d:14:6f:f2:e1:4d:26:22:5c:
76:ea:4a:b8:e3:3b:7b:47:00:d3:de:a1:6c:29:5d:19:c7:9e:
a2:25:14:25:0b:0f:b4:20:84:98:fc:36:60:1c:ae:be:52:a0:
07:00:87:3c:78:d7:62:11:6e:24:ff:48:8e:4e:1a:5f:9a:7a:
1f:f7:78:9a:02:61:f6:7e:77:eb:cd:96:b8:25:f5:bf:ac:18:
ce:17:6c:64:88:98:6f:a4:13:27:a3:e9:5b:8a:44:45:cf:95:
ff:be:37:b2:78:c4:84:5c:14:f5:e1:b2:51:3a:ba:4a:1b:b8:
c6:4d:2f:21:b8:b9:bc:e3:75:50:cd:95:80:95:31:b5:77:06:
30:3b:25:99:2d:60:3c:88:48:2b:e3:c9:e5:0f:5c:00:b5:ba:
c9:4d:0e:c7:70:34:58:01:15:d4:76:b3:ff:cd:0b:40:60:86:
cc:94:7e:c6:0c:d2:7c:fa:67:8e:1e:54:71:da:4a:d3:4f:df:
aa:bd:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:23 2025 by rpki-client