Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: qR9ayMrZFDB+4iF++R9kFNZsJvOv5I1GUIiRaO9+Pes=
Subject key identifier: 89:9D:19:3C:33:A7:BC:A2:4D:04:14:24:3A:1F:27:B8:13:CE:7A:14
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 01988CFD69F4A040C336F53855F8E66AFCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 10FF
Signing time: Sat 09 Aug 2025 04:01:14 +0000
Manifest this update: Sat 09 Aug 2025 04:01:14 +0000
Manifest next update: Sun 10 Aug 2025 04:01:14 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: 4V1vi0nSRfpomMQgpVgiUvOZd8+FQHxCPo/8morODIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:69:f4:a0:40:c3:36:f5:38:55:f8:e6:6a:fc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Aug 9 04:01:14 2025 GMT
Not After : Aug 10 04:01:14 2025 GMT
Subject: CN=899d193c33a7bca24d0414243a1f27b813ce7a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:03:3c:2b:90:b5:aa:ae:7f:59:a9:54:8e:
79:ef:fe:f4:98:ef:b6:be:be:99:16:d2:e7:de:aa:
29:73:59:c0:fc:f1:d1:5e:de:df:a9:01:9f:8b:9a:
9e:c8:cd:27:eb:c5:f1:a6:44:9a:da:9a:70:a9:89:
5f:27:42:43:5a:f7:3f:cf:bf:be:34:aa:35:57:10:
7e:7a:13:f5:3c:aa:f8:5a:23:c2:69:6d:f4:ca:0b:
9b:38:18:63:cd:cc:4e:21:7b:ed:26:65:7b:90:40:
91:62:11:81:6b:74:32:7d:a9:0f:65:83:6f:bd:02:
3d:c9:ad:39:f0:44:be:33:9d:92:6e:80:7a:11:17:
98:ba:d4:35:d4:3c:ea:29:ba:70:f5:e2:8b:4e:a9:
2d:b7:7f:a7:45:fb:e2:0b:41:ac:07:b5:dc:1b:53:
42:90:e7:c3:2c:a5:de:2d:e0:7a:e9:47:34:08:98:
78:a5:2c:de:4d:3f:8d:16:91:e5:ed:01:76:a0:38:
c7:f6:74:5f:f5:79:fc:34:c9:4b:1f:d6:4f:d0:dd:
24:fb:be:fe:18:8a:d3:a8:75:8b:60:04:62:da:72:
d0:cd:6c:3a:b4:fb:14:83:26:da:7d:f7:1d:94:bf:
43:66:a1:f7:d5:b3:82:07:15:41:70:34:34:7f:7a:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:19:3C:33:A7:BC:A2:4D:04:14:24:3A:1F:27:B8:13:CE:7A:14
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4a:02:c7:e0:37:8a:58:58:9b:c5:8c:e4:7e:6b:70:78:d1:
61:f6:a3:fc:fe:64:d3:ae:c7:88:b1:67:9d:56:07:e0:f5:4e:
5a:b3:a9:c8:c6:2e:e8:a7:f3:b0:16:3a:13:1d:cd:4f:65:94:
1f:f3:c3:1c:99:ad:38:cc:95:22:38:79:30:7b:58:b8:eb:9e:
b3:6b:d7:e5:07:ed:1c:8b:a7:b3:61:0f:31:de:19:34:3b:37:
79:5e:fd:f1:08:4b:f8:b0:e6:69:52:5c:3f:ba:36:74:8d:dc:
40:5f:54:a1:a9:26:40:49:57:4e:fa:28:71:3a:be:2c:3c:0e:
9e:0e:f5:56:29:32:db:70:13:a0:71:0d:a2:44:fe:ef:70:e5:
17:f0:d8:c0:20:9b:50:a9:25:b6:16:0f:7d:7c:89:9c:c0:ca:
5b:05:a4:c7:31:8a:a0:70:30:ee:64:7b:06:db:56:38:67:43:
5c:d9:89:d5:30:a7:3b:ee:53:f0:b7:64:1e:ed:1c:38:c7:39:
62:9f:57:00:91:81:77:9d:fc:3e:f1:40:d9:90:af:ff:bb:4d:
9c:c6:21:88:60:f1:fb:e4:fa:6a:96:4b:03:21:3c:e8:82:1e:
c1:7e:58:6f:90:d7:cd:c6:b1:24:6b:8f:a4:32:d0:82:97:34:
20:1c:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:36 2025 by rpki-client