Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: lhtZOzfnPd0eAvQvldEORTop7dQnZnKbBqJDWoJ7fmA=
Subject key identifier: A7:B9:D8:83:A7:73:49:25:E3:AC:1D:9E:FF:97:5F:86:97:BC:78:26
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 0198D66000E21EBC1AB0D35965D62B490BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: B6
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: mQWz/Dms0wlhNwQNLJ/CjCcTLYmUGGVBVfRJltjvZ9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:00:e2:1e:bc:1a:b0:d3:59:65:d6:2b:49:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=a7b9d883a7734925e3ac1d9eff975f8697bc7826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:b2:1d:43:96:14:d2:e1:50:ad:b5:41:06:
7b:31:ef:bf:7f:43:a9:51:e5:49:2b:6d:64:9b:2b:
6f:b3:8c:ae:ec:5d:5e:05:16:14:24:ae:6a:8e:ae:
6f:06:61:1c:e1:8b:e9:51:8a:fe:6e:85:92:07:37:
6d:7d:45:c9:b5:fc:6d:51:de:d8:79:e7:31:74:b6:
79:03:54:75:d6:21:9b:2e:4c:ea:0e:f7:86:e3:c9:
ea:42:19:c3:1e:40:07:7f:dc:43:c2:3d:c7:52:e5:
26:0e:6f:aa:c4:29:66:b3:3a:a6:3f:c5:da:02:34:
4e:a9:a8:f5:8e:75:b5:b2:45:eb:35:c1:65:43:bd:
26:fb:f5:c6:9f:89:b8:51:a1:4e:6f:3c:94:08:f9:
a2:69:02:ed:1e:83:6e:14:e8:c2:04:54:f1:aa:66:
c5:a6:e8:5b:7a:06:f1:41:6a:e7:61:b2:3a:91:32:
87:4c:81:46:b2:36:d2:07:56:87:91:86:db:7a:46:
12:b8:67:3a:c3:c2:75:3c:0a:4e:da:4f:85:68:6b:
e9:b2:7c:d7:bb:67:85:8a:db:96:7d:5c:a0:b2:f5:
98:ac:88:a9:dc:47:6b:7d:e8:5f:71:bf:c2:75:49:
b3:8e:bd:81:cf:7c:98:db:c0:aa:ec:ed:cb:40:82:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:D8:83:A7:73:49:25:E3:AC:1D:9E:FF:97:5F:86:97:BC:78:26
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:89:54:74:93:56:c3:65:89:19:3f:02:1b:0a:4b:9c:fc:dd:
c1:f6:9a:fd:d6:8f:57:e4:4d:70:8d:35:5e:a5:c8:86:ae:67:
df:2a:30:94:c9:05:19:d6:a4:e5:d8:48:24:b3:fb:b8:ef:eb:
32:69:70:5b:a3:55:8b:6c:a1:0e:bf:ea:90:44:8c:1e:28:5f:
a1:5d:c2:d8:52:df:16:87:3f:c8:78:1a:0a:ab:d7:a1:dd:87:
0f:64:3d:2c:1c:16:ae:9c:e7:31:12:57:88:5a:85:20:45:f7:
37:9b:80:7d:59:46:eb:a8:b0:e9:3f:46:7d:69:08:c5:e8:03:
4a:fe:55:bb:47:64:7e:57:96:57:3e:66:dc:2f:69:b4:ce:4a:
9f:11:4f:f7:4a:01:0f:e3:a5:ff:95:ac:6c:27:2f:94:da:5e:
eb:ea:64:ba:cd:25:70:6d:e2:13:78:64:00:4d:b2:64:47:7c:
2c:ff:73:39:4c:1c:a6:d0:4b:19:1d:79:92:38:40:69:0a:c1:
4a:66:0a:86:5b:86:28:66:38:68:77:79:bb:5b:c9:56:11:db:
95:61:8b:91:db:72:9b:a4:6d:71:6a:7d:74:66:f7:a7:ec:29:
42:3a:6d:15:b5:f2:98:04:12:79:1a:53:ad:71:3b:ba:82:fd:
f5:16:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:39 2025 by rpki-client