
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: o8oXKs6Um2yGWiu2ClRpdfrReLc67a7bWllRJNCjBlQ=
Subject key identifier: BB:7A:35:BC:59:D7:01:BC:3E:8F:21:CA:D6:DE:D0:9A:07:0B:1A:09
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 0198D4A7D74519720046F64B0C318E3EEFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: /NsoDaRxa32ijLrTiPfedvUbBAF0TrgbSew5I3IkC6k=)
2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d7:45:19:72:00:46:f6:4b:0c:31:8e:3e:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=bb7a35bc59d701bc3e8f21cad6ded09a070b1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:ce:5c:0c:b1:b6:5b:f7:0b:78:c9:1e:9d:
39:ba:e9:a0:04:0b:68:c7:35:54:21:1e:da:76:01:
5f:ab:4b:ce:94:3a:9e:88:70:ee:c8:08:f5:dc:58:
e1:53:a6:da:71:5f:ef:24:48:db:d6:85:7f:c4:a6:
10:07:4b:7b:61:de:e5:03:54:d2:25:35:6c:84:c7:
22:fe:44:8e:64:fc:de:ea:b2:67:c2:25:26:61:9e:
46:13:71:b8:44:c1:84:d6:d4:1f:12:4b:23:08:8c:
c7:c1:13:e4:12:81:45:a1:00:e6:98:32:a3:6a:09:
d4:c6:b6:85:1c:83:ba:52:4d:79:64:5b:d1:e2:8e:
d3:4d:42:6d:11:e5:89:84:62:39:d5:22:4e:0b:3a:
ff:6f:6c:4c:b3:16:71:b0:bc:6b:ca:14:d5:8c:a7:
26:d5:0e:59:57:49:1d:df:0a:57:82:68:14:5b:2d:
e5:b2:a1:44:fe:56:08:62:f3:02:2a:01:04:99:ca:
41:24:b2:0c:43:74:d1:72:c1:5b:94:0e:7c:ca:ff:
55:c9:13:53:37:5c:e4:d6:db:99:f4:f2:af:f7:8f:
00:de:e9:bc:a4:be:42:ee:b8:64:58:7d:30:12:db:
4d:b3:b0:5f:8d:20:56:a4:93:d6:69:ac:df:6e:50:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:35:BC:59:D7:01:BC:3E:8F:21:CA:D6:DE:D0:9A:07:0B:1A:09
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:ac:55:08:6b:56:7c:0e:b3:ec:0b:48:65:ad:2a:9a:88:
72:88:dd:16:de:40:07:02:57:17:88:51:cc:b3:31:77:85:10:
ac:10:42:a3:3b:a0:82:71:99:88:26:d7:c9:7d:23:0b:e9:01:
dc:92:ce:89:44:96:b9:46:02:c7:9c:ea:2d:62:3e:e1:e3:72:
2d:31:7b:ab:65:67:66:5a:8f:7b:a3:82:c8:e9:a0:91:91:03:
98:70:dd:9b:42:15:96:fa:05:35:2d:8a:b3:dd:61:80:eb:2d:
58:d7:f7:a6:09:f2:1d:0b:67:9b:7d:ea:85:ae:93:d4:87:af:
76:2c:e6:2c:6d:87:3e:a9:d8:2c:d1:6d:0f:b5:02:04:17:bb:
4a:5d:b1:c7:58:a7:9f:4f:86:e6:7f:31:00:fe:71:33:3f:30:
8d:55:d1:17:e7:1c:44:47:cb:83:90:6d:ee:d3:f5:68:bc:e9:
8a:fa:1f:04:35:eb:a5:ec:48:7b:ac:22:6c:08:75:3a:20:75:
c0:96:b7:55:d8:5a:a8:75:6e:3f:d7:3c:b3:a4:49:0a:99:9f:
c2:6f:b1:4d:96:06:3f:cb:5d:b9:14:4a:be:85:b8:bb:ad:a4:
fb:ee:0b:19:ff:80:12:6c:b6:2a:3b:57:93:87:91:90:db:b2:
e7:c3:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:09 2025 by rpki-client