Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: JLGsro2OMmKLeSr5yKSNF3ZpH7NJLVKtKPlGKSPMo4w=
Subject key identifier: 2B:21:B1:E8:A1:02:24:CE:12:5B:B1:E0:15:B1:A9:D9:D7:6D:BB:0C
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 0198D4A831EFCF6BBC4A53021422ECCB7196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 0318
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: xZ8oFk0O/zXwPbEwmPgROYkVRIR7Rde0EC4qtiOhPmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:31:ef:cf:6b:bc:4a:53:02:14:22:ec:cb:71:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=2b21b1e8a10224ce125bb1e015b1a9d9d76dbb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:ff:90:c5:16:bb:ff:ef:95:c8:e9:4d:8b:
d4:86:a0:a4:9d:8b:1a:f7:f3:07:de:95:cd:36:50:
14:c7:11:93:62:e3:a2:20:11:29:22:4a:2d:9c:78:
1a:51:84:0a:6d:e4:39:9f:e8:a3:d5:cd:dc:14:6a:
96:e0:17:5f:90:65:31:62:f4:25:68:cb:4e:37:77:
f9:a8:34:9f:ec:6d:58:88:f1:f7:9d:76:33:c5:3f:
c2:88:f4:78:98:c9:78:8d:6d:f8:ec:55:38:cb:6e:
2c:14:56:a2:24:8c:5a:97:18:40:f3:ac:4a:08:6d:
75:da:5b:b8:18:01:34:d7:88:09:60:22:26:d0:64:
68:47:49:86:d3:4f:b6:39:b1:cb:54:a7:61:1a:93:
35:f5:b1:f2:f1:ce:51:d5:2d:e9:13:42:f2:1a:e9:
55:4f:08:52:81:29:e8:25:2d:98:3a:7c:40:06:f8:
76:33:a1:2f:b8:79:f6:05:35:3b:94:86:61:63:78:
5b:5c:d6:e7:43:60:58:cf:ce:67:04:57:f5:1b:4c:
27:37:61:fe:ec:ba:ee:8d:31:71:5b:8a:52:19:bf:
0e:9f:c9:22:e0:6e:6b:7c:f0:97:94:7e:0f:0c:97:
00:ac:87:cb:56:db:45:b6:9c:bb:44:b9:d3:f2:f7:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:B1:E8:A1:02:24:CE:12:5B:B1:E0:15:B1:A9:D9:D7:6D:BB:0C
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b4:68:a8:1d:8b:24:95:20:a8:ce:f3:d0:1b:5f:0d:c5:c1:
52:c5:85:85:1b:f3:a3:b9:12:49:37:fd:9e:d0:16:4b:79:a7:
25:5e:6a:e6:6a:98:a3:e7:37:18:62:95:41:80:83:69:a1:2e:
ba:b9:ba:c7:aa:5d:3a:77:9b:6e:1d:9d:20:ca:85:4f:37:8d:
24:d7:6d:7d:a4:4d:15:49:7d:0b:16:08:d2:95:e2:df:7a:33:
3f:c7:ef:4c:aa:48:e5:33:52:c1:bb:7a:f2:2a:ed:be:44:95:
5b:ee:83:7b:29:63:03:da:81:7e:c0:26:91:d1:4c:d7:e0:72:
5d:66:6c:2e:68:5f:50:4d:91:ba:05:71:4a:c1:75:0e:7f:31:
bf:da:35:74:15:5c:41:0f:ae:3a:ec:20:5d:23:38:f9:b3:c3:
1f:ba:c7:5d:ac:57:fb:1b:98:fc:56:d1:0d:f8:c8:d5:36:ce:
72:20:63:c1:8d:a6:fb:3a:fe:f7:db:d8:5a:83:12:96:d6:44:
97:94:40:db:3c:93:64:81:75:f1:4d:5a:f4:2e:e6:2f:dc:99:
e7:4a:b8:12:98:9a:09:2c:16:f0:41:c2:37:17:1c:0d:78:89:
45:ff:8c:e2:92:f4:7d:ca:00:37:2a:04:f4:68:de:21:d4:42:
a6:af:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:20 2025 by rpki-client