Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier: OZTUs6QTinnUz25HgdK4GPtmL4ADMmo2rCZPeqEjHgs=
Subject key identifier: BA:D2:EE:66:B7:7B:32:22:86:DD:1A:03:92:43:5F:77:B9:4E:47:1E
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial: 0198D65F9303B04B8FF941E4CE98604B02E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: aXcZ16p1B69ky6TfLK8wrDaGlQ0m9xRD6PgWv8rhheg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:93:03:b0:4b:8f:f9:41:e4:ce:98:60:4b:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=bad2ee66b77b322286dd1a0392435f77b94e471e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:4b:81:48:e9:7d:8e:fe:8e:ce:10:3f:a5:
fa:84:7b:bd:50:09:56:d2:7f:a6:90:36:3d:9d:c8:
fd:0d:85:f0:c5:29:ac:e0:21:27:08:9f:34:aa:03:
3b:f0:a4:27:f8:42:be:7b:eb:c3:ef:c8:6a:9c:8e:
77:38:1c:fa:77:6c:64:0c:4c:15:af:f6:f1:b8:cb:
90:b8:b9:3e:6c:29:76:cb:e0:2e:57:a9:ed:72:5e:
be:ce:88:8a:c4:14:e1:62:b2:bd:86:cd:80:0a:eb:
a0:f3:3e:32:af:d8:c8:ce:e6:b0:97:ec:4b:07:9a:
15:df:10:92:a3:02:f8:a2:6a:4d:48:8a:18:41:ca:
49:b4:0a:2d:19:7d:25:2a:ff:b5:88:1a:47:fa:19:
bf:f7:00:3c:39:7d:7e:10:0f:5c:05:4c:79:2c:c3:
5c:ce:ed:ae:1a:f4:69:15:0b:e7:0b:e6:00:7c:a1:
24:04:73:44:2b:30:e7:94:c4:9d:b4:d9:22:13:c6:
17:cc:ee:52:41:d6:39:cb:4e:84:8f:10:4f:de:d8:
ab:ed:00:62:94:13:6f:6c:cf:e1:d8:e6:a6:4c:aa:
da:50:38:3e:a3:4f:1d:72:1f:21:8b:a1:83:c2:ed:
92:cb:95:7d:8c:18:f5:16:96:5c:a8:ed:29:56:a8:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:EE:66:B7:7B:32:22:86:DD:1A:03:92:43:5F:77:B9:4E:47:1E
X509v3 Authority Key Identifier:
keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:49:ad:69:58:9a:82:b2:89:bc:ec:2c:91:04:b1:bf:0d:
0e:6d:0f:87:1f:06:e6:71:9b:f5:6f:27:08:f2:7f:b9:a6:65:
8d:a4:61:e0:62:73:87:99:67:fa:f0:a6:cf:be:aa:42:be:0c:
07:4e:ef:be:cb:66:97:f8:a3:f6:4c:52:db:9d:14:20:6e:ab:
23:fb:3e:81:0f:e3:9e:bd:27:36:28:5b:20:01:bc:4e:24:74:
39:02:af:4d:35:f5:50:2c:54:ce:10:bd:62:a3:0a:75:09:25:
26:ff:39:57:35:55:ca:51:c4:8d:3a:9f:ea:0c:cb:7c:31:f6:
dc:32:e5:48:3e:66:11:48:a8:62:1e:18:76:44:19:48:73:5c:
4a:f4:e7:9e:26:f6:20:08:ae:8b:e6:e5:b1:dd:4a:3a:31:2c:
36:d2:6b:c8:fd:bd:d2:93:64:58:c9:f2:d4:0e:93:ca:cc:9c:
93:5d:75:21:70:8e:7f:3d:bb:09:68:db:6c:03:9a:b5:78:ed:
4a:0f:a6:d6:11:ad:77:9c:2a:2b:99:b3:5f:48:77:9e:3b:76:
45:58:1c:9e:05:f0:9a:9f:7d:dc:71:ff:58:76:f8:dc:88:be:
67:a9:c6:c3:1f:8e:82:29:88:c5:31:0f:25:ea:3c:86:0b:d3:
41:a0:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:59 2025 by rpki-client