Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: Kd5qgwtzRZBmUY8+kybGZW/MTVbGskbkYmWniLhwxbw=
Subject key identifier: BF:1F:3D:47:C7:70:D4:DA:EA:57:A4:B4:09:A9:26:AD:87:CB:F9:15
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019874BE6196918B9C513288F1BFF30F9EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 1227
Signing time: Mon 04 Aug 2025 11:01:30 +0000
Manifest this update: Mon 04 Aug 2025 11:01:30 +0000
Manifest next update: Tue 05 Aug 2025 11:01:30 +0000
Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: KTG4ked8qpOy0wxOminxOZyke/VWeppnzTLRiQ2sZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:61:96:91:8b:9c:51:32:88:f1:bf:f3:0f:9e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Aug 4 11:01:30 2025 GMT
Not After : Aug 5 11:01:30 2025 GMT
Subject: CN=bf1f3d47c770d4daea57a4b409a926ad87cbf915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:70:f5:14:0d:54:5c:79:ca:8b:4c:98:20:
c5:59:88:52:19:0a:06:ff:cb:11:17:b7:65:06:08:
42:d7:85:35:6d:48:45:fb:83:84:7c:c3:08:f6:5f:
5e:da:0a:b7:5b:d9:89:50:cf:49:99:53:ed:d8:c3:
8c:d8:d8:62:e3:6d:4e:70:de:fa:9b:da:83:d0:d2:
50:61:20:e4:84:d8:15:72:de:cf:7d:19:a5:30:32:
be:ff:14:5f:28:78:13:19:83:40:03:b7:aa:5a:21:
22:56:7a:a1:16:ee:f4:a5:6b:fc:b1:d1:2e:9c:94:
87:22:39:38:01:c2:f6:ca:c7:b5:2a:60:bc:cf:27:
b2:d3:28:be:9c:a8:b9:6a:26:33:3a:24:f2:76:13:
d3:38:65:14:ba:31:b3:9b:d0:d9:47:2a:4d:1a:b5:
a8:7f:61:9f:cc:2b:6c:e2:66:62:b3:9d:fe:72:d4:
29:a4:e0:2d:33:c7:0e:3c:b8:cd:e1:52:97:a0:c7:
15:1e:a4:2f:36:f8:d9:8b:be:7a:02:7d:38:ed:b5:
58:eb:a2:fb:43:39:2c:9b:d7:ff:3c:fc:04:91:86:
41:a5:5b:4d:ca:76:94:c6:ea:2a:bf:23:36:62:45:
3a:07:50:de:e8:92:ab:37:22:2b:e9:d3:86:9d:f3:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:3D:47:C7:70:D4:DA:EA:57:A4:B4:09:A9:26:AD:87:CB:F9:15
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:f0:e7:7a:57:38:4d:be:17:6a:f6:cc:be:26:0e:76:5d:
b4:13:09:f7:94:96:af:96:8a:7c:07:c6:f7:93:8a:58:5d:4c:
77:93:97:96:83:48:b0:4a:a1:d5:72:97:79:15:4a:0b:8d:b7:
ab:07:15:e3:d1:98:f6:90:c7:7b:24:bb:49:a4:f6:71:79:a4:
a8:f6:3e:5d:eb:9f:72:75:82:6a:2e:af:00:5a:a0:87:76:e7:
0a:1d:e1:b3:98:24:00:4d:f9:36:cf:ed:47:3d:79:d2:8b:0b:
db:15:d2:87:ec:5e:31:73:02:1e:19:28:8a:e7:66:4b:e7:83:
87:88:91:48:d3:89:65:0d:31:5c:f2:64:c7:1e:ce:d1:35:d2:
d7:48:5f:88:7f:cf:78:0c:15:20:7a:9e:95:42:83:b2:f6:8b:
79:1e:c4:da:96:f3:71:8e:6c:5d:e4:db:09:06:da:6f:5c:a4:
58:3b:b1:41:34:89:46:06:ba:8f:2c:eb:6c:58:b3:3a:e7:99:
ef:e6:68:33:4a:c9:99:24:2a:76:ce:c3:cc:82:86:c5:8d:8f:
e3:a1:72:34:72:ef:4e:25:54:ea:79:25:10:9f:c6:30:20:df:
b1:83:f9:c1:c8:fc:68:e2:63:61:de:37:02:ba:f1:56:a0:51:
b2:a8:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:40:07 2025 by rpki-client