Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: X9SrTZ2Pa2ZjIqMbRfye2Pe/01izrrPuI/oVibT8NTc=
Subject key identifier: AE:A8:80:18:E9:24:73:95:E6:32:5B:4A:FA:68:DF:7E:93:C0:AB:3C
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01987ED36A45354E1779806C6568B870A80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 1635
Signing time: Wed 06 Aug 2025 10:00:41 +0000
Manifest this update: Wed 06 Aug 2025 10:00:41 +0000
Manifest next update: Thu 07 Aug 2025 10:00:41 +0000
Files and hashes: 1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: arDpLvbE/ym1hdAjs0dP5HsVgbzd1+ywLkPHSoprUfk=)
4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
8: kL7q5pWuSBxNCY9HWLe5mlUPsgc.roa (hash: pKB8WO7OB8aBBagaQrPCdtrCaJhSDJjwl1TqWIlseSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:6a:45:35:4e:17:79:80:6c:65:68:b8:70:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Aug 6 10:00:41 2025 GMT
Not After : Aug 7 10:00:41 2025 GMT
Subject: CN=aea88018e9247395e6325b4afa68df7e93c0ab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:05:49:e2:47:f3:a9:4f:e2:8f:70:72:99:
3a:08:37:f3:60:e5:66:59:fe:25:42:70:ea:41:50:
83:80:66:30:46:24:12:6f:5d:41:73:5a:e6:6f:2c:
77:53:3b:06:c4:67:a5:aa:94:4d:81:d5:0f:e8:5d:
e1:08:3b:ce:b4:96:01:91:85:b2:24:da:c9:ad:99:
2c:9a:95:68:b3:6b:0f:14:6b:a8:76:b8:ac:fd:93:
78:8d:5c:cc:61:4b:e5:42:fa:ac:1a:7f:84:ec:e6:
a9:4e:52:f3:7d:2d:1d:a7:f9:85:a1:e7:d1:e7:f2:
0e:4c:ae:e3:b8:cb:ac:23:b7:77:89:76:45:47:a4:
72:52:d3:aa:87:62:67:9a:6b:de:6b:d4:e7:ea:8c:
b5:82:97:a8:cd:49:a1:a5:5e:26:e4:43:0c:4d:d2:
b3:6a:5c:d5:a5:41:f7:54:33:60:e1:26:11:a7:27:
a5:c7:88:f7:36:97:ce:c1:9d:7e:e1:0e:2a:20:a8:
ff:58:d6:09:ea:76:33:9e:8e:f6:24:5b:cf:0b:d9:
99:2a:77:1c:8b:68:e0:9f:0e:10:84:54:78:61:f3:
02:60:bd:f4:60:ae:4f:fe:8a:7a:8e:d0:df:30:10:
7c:d6:64:4e:c2:83:12:83:72:e0:26:de:19:37:bb:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:80:18:E9:24:73:95:E6:32:5B:4A:FA:68:DF:7E:93:C0:AB:3C
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:30:4c:6e:bd:54:1a:0f:88:95:41:62:3c:db:74:9a:1d:84:
4f:4d:73:35:2e:5f:71:f0:ae:8b:d8:bc:8a:41:ff:41:45:83:
53:95:ba:ae:5c:22:95:5f:92:95:54:13:ac:95:84:9d:58:6c:
27:ad:2f:28:31:1a:4a:2a:ed:8e:f2:f5:5f:df:67:79:2c:e5:
4c:48:b7:24:e1:ec:0f:ca:92:86:88:f5:af:1b:b1:9e:4a:ce:
24:b0:40:86:38:6b:db:1f:21:6c:60:c4:c2:1b:17:0e:17:87:
53:b2:c6:4b:93:5c:cb:74:76:e0:01:78:91:48:fb:67:ed:f3:
78:bd:ea:68:46:d9:26:7e:e0:e4:79:bb:5c:7b:9b:66:10:08:
4c:75:d2:ac:da:a3:eb:e4:27:0b:62:ac:cc:c0:f5:89:fa:b6:
4d:89:f1:22:16:82:80:cf:bd:45:12:f8:9e:14:10:2c:eb:ad:
08:8d:36:7d:80:3d:32:fb:01:c5:cf:a2:8d:36:c1:f2:1d:ab:
53:49:43:71:fa:bd:84:97:ab:0c:c4:e5:9d:0e:f7:76:8e:1b:
65:08:45:dd:3c:f6:bd:9a:db:dd:63:08:61:2b:9a:ff:da:14:
30:0e:a9:65:dc:17:38:04:1b:39:5d:9b:77:8e:b3:e1:e6:e1:
f4:fa:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:44:36 2025 by rpki-client