Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: yDgVH+WaJRZMHEGcj4dAkP86Te6vjIM4/baamzmgnOU=
Subject key identifier: 1B:D6:FF:F6:7F:3D:31:DE:BA:55:B2:CA:A3:16:1A:D0:8A:85:A4:72
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 0198733D8A783711FF89609CD1810231F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 14D8
Signing time: Mon 04 Aug 2025 04:01:09 +0000
Manifest this update: Mon 04 Aug 2025 04:01:09 +0000
Manifest next update: Tue 05 Aug 2025 04:01:09 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: zc54hf4yZlgqtd4vqEedA9toOMnVg7npA88D7WHrIv8=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:8a:78:37:11:ff:89:60:9c:d1:81:02:31:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Aug 4 04:01:09 2025 GMT
Not After : Aug 5 04:01:09 2025 GMT
Subject: CN=1bd6fff67f3d31deba55b2caa3161ad08a85a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:9f:a0:35:40:82:16:2b:13:e0:5d:81:c7:
b8:bc:8c:25:38:30:88:63:31:c5:c7:65:12:7e:8c:
1f:7d:54:4f:1b:f9:cd:17:44:4d:3e:2f:e7:04:14:
57:01:f1:a1:c3:db:93:59:eb:e9:d7:42:b7:da:15:
b9:49:e5:13:41:be:10:ef:82:ef:98:87:71:01:27:
56:7d:7e:75:9f:60:a9:4c:32:38:b4:9f:d6:85:f6:
4f:59:84:e4:10:ae:b1:5f:33:86:1e:b1:3b:f5:20:
84:4e:7d:3e:a1:5c:00:ca:cb:77:8d:6b:b5:c9:ba:
26:b5:21:34:99:70:28:df:c4:67:75:45:fd:eb:2a:
64:25:e4:9c:d4:0c:62:34:a6:9f:92:f1:87:11:5c:
7e:e6:69:da:48:7e:35:39:f0:88:38:cf:d3:3d:d5:
fe:57:b9:a6:0c:e8:b3:fb:0e:eb:2e:0d:08:bc:81:
5b:40:b5:df:af:c0:9a:9f:c3:3c:5a:f7:9f:af:d2:
6a:2c:26:cc:7d:ce:99:3c:74:36:e0:d2:16:1b:7d:
8e:f2:74:22:38:f2:46:24:d8:b1:a3:ac:38:7f:c8:
23:8c:44:2f:2e:2f:0e:d7:f1:f7:2a:41:75:a7:c3:
fe:ba:32:15:cd:a4:ae:e8:ae:8e:db:1c:76:eb:a1:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:FF:F6:7F:3D:31:DE:BA:55:B2:CA:A3:16:1A:D0:8A:85:A4:72
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5b:1f:4d:18:ca:48:86:2d:7b:08:6c:0d:e6:9e:ab:86:5b:
25:7e:a4:91:fd:85:5e:1e:06:f4:69:c2:ff:f2:0b:46:6a:1a:
fe:c5:79:fe:06:e6:78:30:c2:74:b0:0c:8e:13:81:fc:3c:f0:
17:af:c8:40:8f:74:ed:ad:65:35:2b:93:a7:e1:e2:01:25:51:
12:3c:41:10:c8:53:36:e1:1a:ec:3c:40:ea:be:e2:a3:de:3c:
f7:2c:e6:cb:55:bb:1f:69:15:0f:46:d4:ca:f7:95:ce:c1:53:
ae:61:71:7d:ff:de:cf:58:8c:1c:8e:50:96:bb:7d:d5:28:8d:
81:56:46:3b:7e:dc:d1:83:cd:20:37:4e:9a:7e:2d:31:5e:a2:
28:c7:82:7e:b7:8c:c6:97:e4:7f:b3:a8:38:20:06:73:c9:70:
e7:5d:e2:e9:d9:ce:e9:2b:dc:19:44:f3:89:80:bb:e8:b0:96:
68:86:b7:73:68:72:de:59:eb:9d:bc:17:22:76:f4:2b:bc:3a:
53:46:8a:45:04:00:8a:19:06:e6:7b:66:b0:a9:4e:5f:57:03:
9d:62:e7:d8:15:63:a1:80:50:dd:4e:51:a2:9a:de:d4:06:27:
f6:8b:ff:0d:0a:d0:06:46:ab:ea:fe:ca:1a:92:01:d6:e4:f3:
d7:f3:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:31 2025 by rpki-client