Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: Y/TFqRp+dkYf3tvyodii1/XxLR5gN0FNq+9V8henwAc=
Subject key identifier: A2:B6:08:FA:2E:D7:57:6B:12:AA:AE:E5:EB:86:45:AC:20:5C:52:27
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019894ED89DD609647AF3743DA9815D6421B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1152
Signing time: Sun 10 Aug 2025 17:00:51 +0000
Manifest this update: Sun 10 Aug 2025 17:00:51 +0000
Manifest next update: Mon 11 Aug 2025 17:00:51 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: io2yOEongF+l3tF/N3GjvER6Xn9PzIdgVNyeTWs9fk0=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:89:dd:60:96:47:af:37:43:da:98:15:d6:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Aug 10 17:00:51 2025 GMT
Not After : Aug 11 17:00:51 2025 GMT
Subject: CN=a2b608fa2ed7576b12aaaee5eb8645ac205c5227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:b9:44:ed:e3:fd:fa:32:ce:2e:fc:4f:27:
20:99:73:9e:4e:a5:8b:69:df:21:af:cf:d5:38:b1:
68:18:87:be:05:3f:7b:ca:de:fa:8f:c8:19:c0:13:
a1:d1:f6:2d:69:80:11:49:f9:43:1f:0b:12:65:41:
15:a4:81:a9:1e:c4:bc:45:78:da:c7:38:99:52:b0:
82:a8:e1:61:37:1e:64:ee:de:0d:61:25:eb:e3:31:
98:39:bb:6e:b6:fd:34:b2:60:26:a7:58:a0:66:6c:
8f:d2:57:ca:bc:fc:33:ed:cd:93:94:06:68:e4:b1:
34:c1:da:f9:04:ed:d1:f8:22:78:c2:ac:56:35:cb:
69:d3:0d:d6:7c:eb:02:1f:e3:b0:4e:4f:13:53:69:
fe:3b:18:9e:25:08:f2:9d:00:0e:7c:a6:5f:59:2c:
f0:77:fa:a9:de:be:a4:e3:d4:97:a3:23:8d:de:12:
d5:d6:25:3d:6a:7b:be:57:70:6f:05:af:3f:a4:22:
fd:18:be:a7:b0:9c:16:1d:04:8e:d0:dc:50:36:e6:
13:82:f3:52:6a:3c:97:8c:7d:02:52:7c:31:df:ad:
90:ad:67:a8:07:8c:95:05:df:ad:d5:65:44:06:b9:
8a:62:a6:4d:d1:85:bc:0c:5f:fd:c2:fe:27:06:4f:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B6:08:FA:2E:D7:57:6B:12:AA:AE:E5:EB:86:45:AC:20:5C:52:27
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:46:07:49:68:d7:61:f5:31:7a:4c:5d:04:e6:30:37:30:6e:
ca:c9:bc:b8:5d:44:0e:28:02:49:e4:f8:72:1a:3d:89:df:ef:
31:2b:92:9e:b8:dc:31:d8:59:44:db:4b:0a:36:31:06:ee:c4:
1a:ff:e0:13:22:42:fd:69:0a:c5:5c:c4:4e:5d:0f:5a:0c:0a:
2b:19:f5:75:03:47:10:e5:a8:07:31:23:ee:da:d8:91:5a:9b:
a6:2c:ea:67:83:dc:29:b4:d3:58:49:85:a9:5b:fd:b3:ce:1e:
c6:29:ce:c4:ce:8b:c8:70:d7:10:2d:75:37:8b:dd:9f:8e:b9:
25:0f:d6:24:61:29:b4:e7:a5:26:c9:ec:99:9e:b6:db:0e:29:
29:f1:5e:46:89:ce:4f:1f:72:41:dc:c0:1c:a1:3a:64:8f:49:
31:a3:0d:18:61:40:2f:c3:5f:29:4a:7a:7b:7c:05:15:b5:56:
0b:86:40:2a:2a:c9:7c:36:36:a7:50:a2:a3:92:39:e6:17:86:
bb:ab:e0:27:74:55:66:8f:dc:15:d1:ce:84:63:0e:7e:6c:80:
da:bc:23:6f:ae:d0:aa:1f:50:ca:58:e9:4b:dd:b3:b7:f3:a8:
e2:f4:1f:7e:a9:27:0f:f3:76:45:72:ec:fc:85:68:04:2a:b7:
0f:3a:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:45 2025 by rpki-client