Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: cA3C/86za8lW31WMZDuBHg/hRaOA8f0DlQwGPjGt9Ro=
Subject key identifier: 62:44:7B:53:D9:0F:1A:FA:FD:56:78:2E:17:84:D4:C2:8A:FB:AC:EC
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 0198D705A62F4B03FFF05CC3BCA342EED37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: vdBBuE34rlviV1C0tQFDjVLYWQQ84YST08l7OFLYE44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a6:2f:4b:03:ff:f0:5c:c3:bc:a3:42:ee:d3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=62447b53d90f1afafd56782e1784d4c28afbacec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:02:92:f5:d2:e1:e7:2c:ce:b8:c9:cd:0f:
e0:9d:08:9d:54:7b:bd:06:0c:79:7f:5c:77:30:d0:
7e:b9:55:91:cb:86:e3:3c:db:69:f9:94:9b:ff:4a:
d4:a1:ba:df:0b:9c:f1:30:ad:e1:4e:05:f0:19:d5:
f6:1d:42:cb:93:dd:9b:e0:d3:e1:f9:a2:df:a0:5e:
64:f9:a4:a4:fb:4a:8a:b4:c8:29:37:0e:f9:1e:da:
03:1e:35:0b:2c:7c:ae:73:4b:e5:d6:a3:0f:e6:7c:
83:01:99:5a:ef:e8:e5:76:e0:95:27:ee:7d:0c:fe:
ce:6d:e9:09:d1:e8:76:de:41:ee:76:60:65:d4:e5:
2c:53:69:62:c8:b7:d7:b4:3a:0a:ef:9f:61:8c:9c:
26:fb:f6:08:8a:ae:b7:50:16:b0:69:3c:33:27:2a:
00:34:6f:4e:7e:dc:36:b1:f3:ea:ff:77:85:98:88:
81:10:53:bb:49:79:78:52:fa:bb:25:9d:b6:1b:d5:
88:c5:73:8d:b5:56:11:ee:e0:1b:73:36:0a:d9:09:
e1:19:df:85:ce:06:c1:b8:db:ee:21:03:a9:3f:f3:
73:78:dd:28:04:a3:20:cc:88:b2:ad:9b:64:23:cb:
4b:1d:0d:e0:c9:e8:3b:64:24:4f:d7:e3:63:a1:da:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:7B:53:D9:0F:1A:FA:FD:56:78:2E:17:84:D4:C2:8A:FB:AC:EC
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:67:23:8a:35:99:a9:ce:a8:15:e4:06:41:aa:de:22:1e:
bd:29:1c:8f:9f:76:d5:19:46:65:19:b2:7c:31:65:4f:b0:a5:
ce:83:9f:33:66:cd:4e:e4:bf:61:a0:81:45:f3:86:d2:07:ff:
a8:d9:e3:35:30:cb:17:82:70:51:44:c1:9e:a1:c8:ea:df:ae:
7b:9f:a8:b3:b8:d1:d2:23:52:04:55:50:64:e7:4d:f5:0c:ef:
3d:a8:f7:58:3f:ee:ce:f7:17:f8:80:57:cb:e4:92:b4:d1:cc:
18:5a:b7:e7:60:52:8f:90:a4:5f:49:57:9d:59:72:ed:f7:dd:
16:3e:0f:e5:59:6b:77:33:0c:14:b2:3b:ba:0d:ad:37:12:87:
3b:9d:6c:72:5e:1e:21:20:6b:df:42:b9:ce:10:9c:a6:e6:24:
e6:c0:7b:ea:ef:17:08:e9:9f:4a:f9:6c:a1:b1:92:92:2d:06:
56:fb:3b:4a:06:b0:66:66:ab:11:18:93:06:ba:7e:13:88:c0:
61:71:e4:0a:dd:cd:cb:81:e0:d8:ed:9f:d7:e0:c2:86:56:3e:
a1:cb:c4:b6:3d:20:53:db:94:5b:d8:7b:95:94:fa:fb:b3:85:
29:c0:5c:86:4b:5c:5a:6a:a0:0a:da:e0:7c:42:1f:1f:36:1d:
50:da:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:05 2025 by rpki-client