
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: 1DPQOgzdMcPeJ3SKT05Jm42Ow5aY0n0clWZbG2cBgtQ=
Subject key identifier: 48:10:10:EF:A2:DE:51:23:AD:CE:E8:7B:77:D9:48:69:F2:27:AD:AD
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 019879AF35F24E3B37B779C0126B0B2A3663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0BBD
Signing time: Tue 05 Aug 2025 10:03:02 +0000
Manifest this update: Tue 05 Aug 2025 10:03:02 +0000
Manifest next update: Wed 06 Aug 2025 10:03:02 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: Sevagp9e1gnpm9KvXJoI/sbIpgl2+mrvJQgvne7xLu0=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:35:f2:4e:3b:37:b7:79:c0:12:6b:0b:2a:36:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Aug 5 10:03:02 2025 GMT
Not After : Aug 6 10:03:02 2025 GMT
Subject: CN=481010efa2de5123adcee87b77d94869f227adad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:87:c6:ec:eb:ac:0b:ff:8b:32:7c:1c:8e:
bb:ff:4e:3e:61:d0:4b:84:ae:a6:46:75:4a:79:f2:
34:3c:d6:c6:4b:16:f8:60:39:7b:75:a0:b2:db:33:
b4:86:6c:76:88:96:8a:df:a9:50:bc:7c:a4:1c:d9:
c8:cf:e8:c8:2a:45:e1:29:a5:8b:50:d2:e1:0c:3e:
5d:d7:ee:cd:02:e7:fe:41:15:22:14:ce:eb:1f:91:
97:b3:df:c1:22:ad:c5:1f:d3:a3:44:b2:19:23:d8:
ef:d9:f3:60:1d:e7:c7:17:b7:59:0d:d7:67:7a:0a:
7c:6b:1c:d5:05:40:f8:d2:b1:29:30:6b:e4:29:a2:
72:60:89:f0:01:77:19:0d:91:23:a8:90:48:79:95:
ee:e0:31:9d:82:31:c4:59:83:fb:0a:f1:19:92:c5:
d1:36:70:1e:e1:d7:d8:96:a5:89:75:a1:46:88:74:
db:7b:31:cf:4a:e2:76:ac:d1:d4:fb:72:67:3e:17:
42:36:03:48:61:92:c0:95:e4:9d:66:c2:af:59:c4:
08:3e:4b:a8:b1:df:cd:69:e6:6a:a3:9d:f2:3a:b6:
36:71:39:f6:50:5b:19:43:47:42:ea:7f:e2:80:ed:
70:66:ea:5e:4e:5a:a8:d8:05:bf:ee:86:9b:41:0c:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:10:EF:A2:DE:51:23:AD:CE:E8:7B:77:D9:48:69:F2:27:AD:AD
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9d:3d:c3:79:dd:56:ed:77:6f:d7:c1:6e:18:81:aa:7b:41:
da:79:b0:4e:14:2f:49:b3:42:cf:f6:7e:b3:a0:ea:db:b9:b8:
4f:5d:7e:06:66:ae:72:04:86:65:4f:17:7b:ef:dc:c3:3d:18:
27:60:df:86:dc:42:59:8d:87:37:96:83:6c:4a:9d:eb:a3:b2:
0c:0b:22:3a:cb:dd:e6:a0:de:e5:a4:ef:10:d1:22:f8:f9:38:
91:02:ee:09:82:97:82:32:09:92:87:f1:f9:b0:ab:e3:1b:3a:
a8:4d:86:78:9e:21:1a:11:a7:53:24:44:15:2d:2e:a6:f6:7c:
43:a7:52:b7:b8:25:a3:f4:ab:04:24:0c:de:66:a9:89:15:b8:
05:f6:9c:24:4d:cd:60:4f:6f:56:9e:84:83:7b:39:8e:17:35:
32:29:d0:ef:0f:91:29:56:23:df:5b:a5:ee:2e:dd:ff:60:c7:
6b:d1:f6:7c:59:57:55:66:2f:9d:3c:25:3f:1c:f0:a8:09:6d:
39:97:44:48:44:57:b8:83:bb:0b:21:14:64:c1:18:9b:08:bf:
ee:b5:e9:45:6a:4f:df:69:5e:4d:7e:10:c8:f7:e9:97:5d:2c:
59:60:5b:6f:74:70:24:db:b4:cb:a5:35:5e:16:ff:54:a6:80:
36:e7:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:05:42 2025 by rpki-client