Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: jukJWxxIuseo4zb9cueL9oGUe48Mk6PpYIUCCQAX5XQ=
Subject key identifier: 59:FA:3A:D0:9D:F0:21:5E:2A:07:B8:EB:8A:2A:C2:FB:98:08:86:69
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 0198D4E0ADDF5F38C523DBAA92299D93AE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: 0HgCKJ/xDim/2gfLfAtypIL0XAU7VOTYdZnyzIK7U1I=)
2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ad:df:5f:38:c5:23:db:aa:92:29:9d:93:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=59fa3ad09df0215e2a07b8eb8a2ac2fb98088669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:61:7f:73:9c:bb:2f:35:c7:cf:01:1f:fb:
7c:ee:42:bc:60:06:3a:08:f7:3e:38:71:fe:36:6f:
7d:37:83:c7:14:16:32:99:ee:87:29:67:18:46:fa:
02:73:cc:45:a6:5e:95:c9:c5:b4:73:e6:aa:05:ba:
77:1b:5f:2e:04:da:94:55:77:9a:c8:61:d5:22:db:
e3:1d:68:8a:0a:62:e6:3a:5e:25:21:e7:8b:cf:7f:
84:af:d0:80:66:17:9b:54:cf:55:d3:29:7f:8a:7e:
5a:1e:a9:42:e1:ad:e4:07:6b:73:57:b4:02:c7:36:
a1:13:ae:b5:f6:87:ab:a4:f6:2e:80:16:71:dc:3a:
e9:68:17:48:66:2d:88:2d:4e:53:ac:84:70:33:2f:
c3:34:a1:34:ea:62:c9:f0:40:58:53:d7:62:63:65:
5a:0e:a6:14:83:0b:db:22:75:e1:fd:83:70:33:ca:
07:de:b7:05:21:ca:67:e4:36:b8:6f:1f:1c:06:a6:
85:33:a3:a8:a6:73:9e:72:1b:ff:6f:15:c1:2b:1f:
81:de:d9:6c:9b:fb:a6:0c:39:67:3f:6c:52:41:0b:
c8:48:12:fa:07:d1:95:83:9a:22:c9:46:e4:3b:26:
6a:eb:2f:bf:b6:67:15:70:fe:97:9c:ee:ca:02:b3:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:3A:D0:9D:F0:21:5E:2A:07:B8:EB:8A:2A:C2:FB:98:08:86:69
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:7f:fb:8b:9c:99:18:c9:9e:8a:6f:21:44:29:10:07:0a:
d4:e9:32:91:de:07:7c:97:33:e5:bc:19:7f:ba:41:70:f3:73:
9f:6a:dc:39:f1:04:fe:d1:5c:3a:dc:96:12:cc:c6:74:f0:f7:
08:17:73:0b:a8:20:14:3e:a9:dd:f8:a3:bf:da:3e:67:6d:4e:
ac:53:da:59:35:1f:cc:40:f9:18:ed:2b:13:2b:98:2d:5e:a3:
3e:0f:50:de:d6:ac:73:7d:12:9c:a7:ef:09:7d:36:24:73:68:
b0:35:08:86:3b:a8:fa:70:fb:32:e3:3e:26:a6:51:c6:09:73:
c8:64:26:6c:42:dc:7d:8f:46:d7:88:fc:1c:cf:bc:8d:05:36:
f9:e7:f6:14:d4:bb:36:65:08:ca:0c:1b:c0:bb:62:8f:ef:0f:
d8:9d:6b:01:ac:b5:90:12:fa:87:92:33:a6:a5:e7:96:52:50:
4f:5c:8b:42:87:cc:e7:ff:2c:16:41:98:61:1f:b9:ea:75:20:
7c:ae:e0:de:b9:c2:fc:6e:40:95:43:17:cf:a9:af:2a:e4:f6:
90:61:30:5c:2f:82:42:65:35:20:74:c4:26:fd:dc:25:93:1b:
b7:8b:0d:4a:92:7b:22:8a:23:1d:5d:e5:58:6a:4f:5f:27:c2:
cf:8f:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:37 2025 by rpki-client