Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: HyOqxBmp1NEihnu9SWIJ32Krm6sCSq7u6sQd/jZrAoI=
Subject key identifier: 57:A3:78:3C:79:5F:A3:5F:6E:79:B2:0F:50:92:D9:C2:A7:34:B4:01
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 01987C77A89DEFE94360070D8CBD3018247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0D08
Signing time: Tue 05 Aug 2025 23:01:13 +0000
Manifest this update: Tue 05 Aug 2025 23:01:13 +0000
Manifest next update: Wed 06 Aug 2025 23:01:13 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: REVgdtETxEEEit0FQotFXqCwBD0wB+yNgXyVXmanyTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:a8:9d:ef:e9:43:60:07:0d:8c:bd:30:18:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Aug 5 23:01:13 2025 GMT
Not After : Aug 6 23:01:13 2025 GMT
Subject: CN=57a3783c795fa35f6e79b20f5092d9c2a734b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:52:5b:9f:80:9e:70:2c:13:a3:5e:03:ed:
da:a8:f7:6d:8b:03:ea:25:97:1b:a6:ec:e8:33:d7:
a2:52:39:a1:ff:79:bc:56:42:aa:e6:e6:26:5c:ff:
ac:b9:0f:26:4d:19:b3:51:92:a6:06:fc:91:e8:58:
6e:08:44:e1:2a:e3:2f:40:f8:71:8d:16:76:2f:c7:
1b:60:20:dd:a6:fb:bd:c5:e4:f1:1d:23:49:82:34:
7f:2c:2b:d9:c3:85:16:4c:0c:20:f2:91:96:7c:31:
19:bc:a5:b4:ba:0c:4f:93:bf:46:e7:2f:fa:3a:fa:
44:18:d9:ca:31:90:73:96:7a:7e:ff:4f:57:32:43:
5f:3c:f0:b1:fe:b8:60:6b:46:0d:76:63:9e:f6:26:
54:db:41:c2:91:5f:91:db:2a:55:18:a5:75:65:22:
dd:59:e9:52:c8:2d:a8:cc:4c:f5:57:42:46:df:23:
2f:40:5e:8c:9b:a2:52:46:21:fd:f4:a2:ab:88:c3:
15:53:b3:25:0e:b1:9f:b5:f5:16:4e:6b:cf:d4:0e:
5d:21:0a:c6:70:0b:e2:27:61:22:43:c0:18:d1:f8:
0c:47:48:ad:78:e2:14:c0:71:b2:f6:d6:32:c1:a6:
45:5c:17:c2:f1:df:95:64:8d:f2:b0:26:7d:7b:ba:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:78:3C:79:5F:A3:5F:6E:79:B2:0F:50:92:D9:C2:A7:34:B4:01
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0b:26:96:55:e6:e6:91:2d:1e:6b:e4:ea:2e:82:ba:75:dc:
75:5d:66:ef:c3:9b:68:f7:16:35:d6:b5:7c:5d:4e:3a:1e:ba:
9c:f8:60:e2:32:0f:a7:95:93:b1:b6:b0:e0:1e:cb:28:28:a8:
5d:f5:d4:99:f6:ed:dc:18:a6:2a:ca:42:c7:fe:a0:34:dd:51:
43:e9:8d:8a:02:87:e2:c1:93:9a:75:9c:73:0c:60:4c:23:d8:
44:d2:71:5b:9e:39:9f:41:07:e5:db:62:ca:a0:91:56:8e:b6:
e3:a8:28:7a:d3:b1:43:12:c9:0c:57:f9:60:82:8e:30:46:7c:
cd:d0:0c:52:d9:ff:a4:64:90:e9:ba:9b:94:ed:33:de:9b:e4:
65:9a:b6:8e:2b:45:d1:dd:92:7f:b9:4f:6e:88:07:02:83:b5:
9c:73:ba:64:fb:53:a9:27:bf:61:62:2c:85:eb:4f:db:f2:40:
43:1f:94:e6:7e:b4:41:36:be:05:c9:e6:5b:66:32:b5:0c:72:
61:b1:b9:1d:f9:e0:82:16:78:a5:97:ac:f2:a7:95:6b:bb:e6:
b0:33:02:cf:ee:d7:ef:ca:04:62:d8:3e:9b:27:96:e7:aa:ab:
1e:4c:29:a5:85:ea:ea:40:4a:f3:2a:f2:db:5a:b8:ef:2e:0f:
93:c2:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:52 2025 by rpki-client