Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: rOtzkJpc/jPMuRqKJjOcUfrsEihRo/vABdtRv6xDjeU=
Subject key identifier: DD:89:F0:0E:A3:0B:45:81:19:72:7B:E9:44:A4:23:00:0D:48:20:1A
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019881D577C3526AB92399EF7214F87A966F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0D42
Signing time: Thu 07 Aug 2025 00:01:47 +0000
Manifest this update: Thu 07 Aug 2025 00:01:47 +0000
Manifest next update: Fri 08 Aug 2025 00:01:47 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: HjCtjKOh5UCP3FkjLTd6/oVRzsqYRoBI8xPEg5PJBLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:77:c3:52:6a:b9:23:99:ef:72:14:f8:7a:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Aug 7 00:01:47 2025 GMT
Not After : Aug 8 00:01:47 2025 GMT
Subject: CN=dd89f00ea30b458119727be944a423000d48201a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:89:21:7d:60:9c:ea:d0:14:27:be:ae:c7:
e2:2d:26:dc:e1:cb:b5:8f:9d:8f:e8:84:7b:e3:ea:
52:88:fc:a7:2f:c9:f2:f8:3f:0b:fd:f9:6a:a6:a1:
fc:26:ad:e1:df:82:ad:a7:be:fd:e1:d8:32:fd:87:
66:af:b7:27:52:87:c1:00:36:48:a3:28:c9:53:9a:
b9:ac:91:82:43:58:6c:3d:f7:67:d4:a7:55:03:26:
f8:22:4d:80:aa:f2:c8:ff:e6:47:3f:24:9b:bd:fa:
1a:b6:b9:ee:b8:4a:ec:5a:e2:46:6c:c5:40:85:05:
d7:5a:c6:1a:4d:13:64:19:b4:32:1c:b2:43:2e:3b:
8e:71:f6:28:06:b7:5c:da:78:a2:af:1a:f1:ad:99:
bf:0a:c0:64:33:f9:e5:a5:e5:30:8d:a1:17:b6:70:
57:b8:ba:2f:d4:b9:77:54:86:c2:04:40:af:9f:86:
34:18:0b:bc:4b:d2:fa:dd:cd:0c:26:17:50:5e:90:
96:1a:00:c2:3b:5a:9e:25:54:14:48:14:10:56:84:
da:d4:7a:87:36:67:42:86:44:bf:b4:d3:9c:46:45:
7c:86:91:a2:80:67:a1:f6:64:d2:67:8f:b2:68:7c:
7f:2f:84:d2:f5:28:1f:ed:5d:e0:3f:ce:94:78:5d:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:F0:0E:A3:0B:45:81:19:72:7B:E9:44:A4:23:00:0D:48:20:1A
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:53:ad:82:52:50:21:79:15:6b:e9:3e:59:3f:b8:8b:1b:
82:69:e4:8c:10:33:11:b9:2e:c5:79:7d:43:97:e6:9a:76:68:
e9:bc:e9:50:84:f9:5b:fa:27:a3:3f:07:d2:a8:c3:9b:88:9f:
67:3f:97:70:66:7b:22:e1:22:1a:b1:84:76:8c:c9:0f:4e:29:
30:56:13:dc:07:35:63:aa:e2:4d:d4:26:b9:a2:76:cf:43:22:
6a:44:ce:34:0d:c5:b6:4d:96:a8:8e:6d:05:46:7c:29:25:87:
21:4b:e2:33:5c:ce:56:cd:1e:60:cf:08:cd:be:93:23:63:08:
00:d5:f1:87:67:9d:b4:c5:5f:a9:4f:82:62:28:a2:fb:4a:02:
3c:97:94:23:4f:94:77:e1:06:14:bb:8b:77:b4:3f:f9:91:c5:
f1:13:53:1e:69:63:4f:73:bf:49:08:34:00:e0:e6:bb:03:36:
7c:ed:41:33:07:eb:33:d4:9f:55:a0:23:0c:7b:35:52:55:6b:
9b:79:b2:3e:6a:41:86:67:48:9c:7d:20:1b:08:33:ff:25:0e:
f1:17:ec:ce:6a:93:1b:b3:97:35:da:4e:8c:28:dd:8e:bc:16:
98:d8:b7:d8:ab:04:68:4e:9d:3d:78:6e:1f:66:15:0e:80:69:
8c:6b:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:07 2025 by rpki-client