Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: 9zPgO+IjXN7GXxySRZ+EcbPUFFb4WVGiWkoVHQoVjq0=
Subject key identifier: 3F:64:0E:71:44:F3:97:4E:ED:7E:6C:B9:40:24:79:F8:41:1E:8C:89
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 0198D660D82587AF5315AA92A854B24A0B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 09A8
Signing time: Sat 23 Aug 2025 10:02:07 +0000
Manifest this update: Sat 23 Aug 2025 10:02:07 +0000
Manifest next update: Sun 24 Aug 2025 10:02:07 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: T495JzryKVPEp1sZIevwNTebOGFMvEkACU4uVcJLV9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d8:25:87:af:53:15:aa:92:a8:54:b2:4a:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Aug 23 10:02:07 2025 GMT
Not After : Aug 24 10:02:07 2025 GMT
Subject: CN=3f640e7144f3974eed7e6cb9402479f8411e8c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:a9:c1:07:54:26:43:d0:6f:3b:56:24:b8:
76:fc:ed:47:c5:21:33:a5:10:a6:65:b3:62:39:f6:
eb:6a:70:ef:18:d6:48:07:f1:fc:bd:c4:38:00:64:
9c:1d:be:a9:c3:61:5b:84:76:8e:86:06:2b:9b:26:
e4:67:02:ca:59:7e:ed:9b:29:c9:13:7b:14:5d:de:
46:d2:7f:86:dd:f6:eb:00:d6:bd:54:eb:5c:e2:c9:
8e:a1:6a:df:10:59:b5:c1:f0:48:b8:fe:20:ac:28:
5c:98:71:be:34:12:b2:66:e2:16:45:c9:32:98:59:
ba:1a:b4:6c:53:e2:05:0b:cd:c2:2e:9b:37:05:4c:
6f:cd:67:77:c5:ad:86:67:ef:97:46:83:1c:af:8e:
d3:21:80:27:6d:5e:d4:d1:9f:8d:d0:73:75:37:ef:
ca:68:2f:85:04:e7:8e:dd:5b:d0:7d:4e:db:c6:26:
31:ce:8b:79:29:6c:49:33:31:a4:08:c8:46:b9:09:
97:37:d3:a7:50:8a:60:c8:19:52:22:f1:e9:e5:c7:
d3:98:4e:f1:c8:30:f2:77:99:2e:70:10:c8:d9:f5:
d7:cf:11:12:8f:20:b4:09:60:ca:5a:ba:f0:63:ec:
c9:6e:68:e3:d9:d7:d1:9a:dc:02:5b:21:95:8d:3b:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:0E:71:44:F3:97:4E:ED:7E:6C:B9:40:24:79:F8:41:1E:8C:89
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:0b:1c:07:47:1b:de:13:8b:39:8f:99:29:b3:5e:a2:f5:
3f:7d:51:2d:ad:40:61:8a:ba:39:df:36:84:89:0d:1c:a2:96:
e7:1b:be:03:39:41:7d:c8:e0:30:4f:5f:09:91:fb:35:f5:da:
07:7c:ea:fd:c7:c1:89:83:1b:bc:c4:c4:21:77:e4:bb:48:9c:
b3:17:61:07:40:9d:f9:66:06:8f:1b:a6:40:3e:8f:c2:44:5f:
11:8e:e7:b2:87:13:f0:19:cd:30:51:db:9f:55:ab:60:05:c1:
f4:9b:40:b5:0d:c7:3b:49:c3:69:f8:af:5a:6d:c5:9a:81:99:
ba:86:fd:f4:54:6f:3f:5a:86:8b:93:fd:6f:c8:e5:03:3a:ee:
dc:c2:f3:19:d2:b1:75:8c:24:56:fe:61:ff:a0:0a:4e:d3:05:
00:7f:69:c2:04:f1:db:ce:fd:41:90:6f:12:35:0d:41:a1:c7:
a0:70:ab:79:c4:ae:b3:23:23:d6:07:d3:ba:bc:ff:e8:99:9a:
d7:3b:2b:7d:f6:fa:ea:31:18:52:a6:4f:8e:a4:c1:1c:12:e6:
f4:03:0f:d4:42:fe:fd:75:bf:5a:b2:10:f0:a3:8c:20:a5:7a:
d0:ca:f0:8f:fd:89:3f:55:b0:93:27:d5:79:f1:f7:fb:82:19:
fa:e3:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:41 2025 by rpki-client