Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier: X8VFLVXQTzLp9+c8IIwCcvIFgVbst3g0eb+dp5lAcIE=
Subject key identifier: 1E:36:AF:96:E6:FD:45:AC:12:9A:B3:31:44:19:D5:AD:0A:03:E2:DB
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial: 0198D7734B618B743E15EFC69163DFAD580F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number: 0209
Signing time: Sat 23 Aug 2025 15:01:53 +0000
Manifest this update: Sat 23 Aug 2025 15:01:53 +0000
Manifest next update: Sun 24 Aug 2025 15:01:53 +0000
Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: 2iyLBes86G9Mub62MN30rrQ8UUDrKhb48cw/B4s0xUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:4b:61:8b:74:3e:15:ef:c6:91:63:df:ad:58:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Validity
Not Before: Aug 23 15:01:53 2025 GMT
Not After : Aug 24 15:01:53 2025 GMT
Subject: CN=1e36af96e6fd45ac129ab3314419d5ad0a03e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:0c:db:35:6e:06:be:1e:84:17:72:d5:2c:
9c:3c:57:3e:ca:ba:6e:42:89:80:07:b0:87:4f:77:
1d:c6:dd:96:ec:97:96:5e:e7:88:82:b5:57:01:10:
3a:30:5c:45:22:52:8d:80:2e:a6:dd:b4:c7:7e:3f:
0b:c6:a9:d9:50:00:0e:24:bc:d5:01:a2:da:ed:8b:
7d:dc:3d:74:fb:f9:e1:3b:51:1d:9e:c1:35:b2:d3:
42:17:6b:db:9c:37:20:09:5b:4d:e2:8c:db:c8:d4:
9e:ea:c4:bb:45:e7:75:87:b4:e0:8e:fc:c3:06:a1:
ed:f9:96:c7:34:47:a6:31:48:54:07:6c:3b:cb:25:
a0:a3:a7:25:04:3f:06:4c:a5:b1:78:06:d9:71:bb:
2c:da:5f:87:f1:8f:b3:b9:32:a2:2f:b7:d2:fd:27:
f9:17:59:6d:a9:a9:cf:28:d1:a9:43:ef:7e:bc:d2:
d6:7e:1c:6d:25:7e:98:ca:d9:9d:32:34:cc:ad:27:
a2:7a:f1:76:62:df:a6:f4:39:6c:24:ca:e7:ed:c3:
99:63:fe:73:99:10:aa:30:64:b6:4a:55:e0:31:77:
a2:b0:23:c8:e5:12:7a:c1:74:2a:a8:b0:6f:92:08:
92:72:ad:98:d6:f3:cc:c0:85:26:8d:67:f8:55:87:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:AF:96:E6:FD:45:AC:12:9A:B3:31:44:19:D5:AD:0A:03:E2:DB
X509v3 Authority Key Identifier:
keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5d:0d:c9:a7:6a:44:29:13:72:89:eb:44:0a:c4:6c:82:af:
3d:c2:a9:c0:93:4f:64:1e:1e:11:6c:3a:b2:ea:b9:ce:a5:40:
e4:f2:4a:37:a7:5f:1b:17:e3:ef:7c:c1:21:ef:55:9e:40:3d:
87:f6:6f:f1:57:fa:54:90:b2:3b:08:9f:69:ec:35:5f:5c:a3:
68:76:23:17:48:cf:06:82:08:5d:9b:99:d9:8d:3d:6c:41:b1:
78:c4:20:5d:ae:65:6c:36:29:fd:53:3c:e7:ea:0e:e5:4e:90:
de:e2:a0:e5:7d:61:61:07:d7:43:d8:9f:d2:20:e5:29:6e:61:
08:3a:12:70:d0:4e:4f:68:6c:c2:00:d8:6a:e9:66:bf:49:cc:
6d:f3:e3:74:47:ce:c3:e6:10:59:81:48:4c:da:33:fb:38:25:
85:64:1a:62:23:10:f8:94:19:9c:9e:86:d5:df:21:28:fe:f8:
55:a1:63:29:99:9e:66:96:7a:8c:34:a4:c6:2a:74:ba:8e:38:
87:d7:bf:c1:c7:21:38:dc:85:f4:bb:df:00:1a:6e:7d:30:da:
7d:d8:c5:e4:d1:c6:a9:29:21:be:95:96:f0:0a:aa:74:06:ce:
67:e6:e6:14:bc:73:1a:b7:db:50:e1:4e:0f:28:ba:6e:b1:7d:
91:c2:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:54 2025 by rpki-client