
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: 0rt/B85PSxUSDNLuuE2S1NR/N/yLmeOfr5gQFGcqGlw=
Subject key identifier: EA:EC:CF:52:FE:5B:89:89:26:E5:8C:60:29:F3:D8:8C:75:B6:2C:CF
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 019873E25A9FF9E3987530B91E86C5C18C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 0726
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: YenT7z5Xue/hF+nCL6kwQ5wYBvHBbSTkGWB/hM7yScI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5a:9f:f9:e3:98:75:30:b9:1e:86:c5:c1:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=eaeccf52fe5b898926e58c6029f3d88c75b62ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:4c:3a:95:3a:89:16:57:73:a5:97:c3:d1:
83:64:7c:7a:76:0e:4b:3d:e5:0b:e3:d7:37:a6:c9:
4b:80:39:45:ab:0a:cd:3f:92:17:0d:97:9f:3c:ff:
be:e3:24:84:fa:3a:cf:9d:73:01:04:04:e4:43:20:
91:94:d5:ed:f0:4e:af:7b:48:19:28:a2:6e:38:a4:
c7:2d:3d:04:60:06:de:b4:f9:7b:3d:5b:26:e7:d2:
82:e9:7b:75:0d:f8:e1:18:6c:9f:ed:cd:f7:6b:9f:
19:41:df:3d:64:fc:23:c6:17:d7:d8:3a:3b:00:25:
c7:e2:1e:02:30:91:3d:d4:6d:29:8f:fb:44:9d:8e:
8d:8a:fc:43:a8:40:55:04:21:f5:1d:e9:65:93:a9:
f8:f6:6c:0c:3d:fe:48:06:73:f6:0f:4f:b8:18:c1:
9e:ea:c0:f1:eb:84:a8:13:55:2c:d5:8c:a3:03:91:
51:14:8f:df:62:5c:1c:b8:c3:9a:31:10:fc:12:da:
96:84:b7:fd:a4:46:e3:6f:27:a7:27:c2:8f:c4:e1:
87:75:66:41:d6:22:43:6d:68:3b:7e:7e:4a:34:90:
1b:e2:52:e2:98:fb:4c:45:dc:8a:12:da:b5:9b:4b:
47:6f:df:d5:4b:d4:89:f8:ae:26:c3:64:f9:52:4e:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:CF:52:FE:5B:89:89:26:E5:8C:60:29:F3:D8:8C:75:B6:2C:CF
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:80:3c:4e:e8:62:ee:a3:73:77:44:ba:0a:95:e9:78:cd:
ca:6d:a2:52:64:b0:d7:6b:95:f1:db:06:de:eb:67:d0:bb:0f:
0b:6e:73:d0:4c:2b:f0:33:6e:80:5b:12:dc:f5:c4:9b:fd:32:
70:52:9a:65:61:2d:56:78:54:73:1e:52:44:86:79:3c:b5:8e:
d3:10:67:12:60:a9:22:67:e8:87:f1:5d:3a:a4:01:7d:8a:ae:
df:ef:e8:e7:67:7f:0b:1e:7e:03:32:0f:33:e6:c6:7e:8c:b8:
ad:be:78:96:22:5b:86:0d:74:39:d9:a1:ae:84:46:1b:91:01:
0d:a5:99:9d:3b:72:6c:30:10:8c:b1:4b:74:3f:d2:cb:98:d8:
90:5c:80:28:b3:1a:34:6d:6f:36:41:a1:51:5e:47:c8:e5:e1:
13:53:d1:25:40:d0:89:a6:c3:fd:59:f6:ab:da:29:20:ca:e0:
3a:46:ce:26:30:1d:c9:08:a1:f4:15:20:79:f0:ab:f7:c7:e5:
db:e8:c2:20:bb:4d:a0:58:f7:57:e5:0b:3b:fc:03:d6:54:40:
53:1a:18:c2:74:61:14:ae:a2:0d:02:d5:9a:84:79:20:ae:a7:
5e:ad:7a:59:62:9a:01:32:1a:e7:28:db:f7:f9:97:a3:88:50:
39:38:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:28 2025 by rpki-client