Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: GC0t3hQckZUG1oJ+sHkKGs/CIVsm225WcR17WB9gCSE=
Subject key identifier: 68:22:12:28:F5:37:43:B4:8D:3F:A6:7A:CF:74:C9:1E:0B:0B:64:BE
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 01988EED2C1BCD4B44C8DA3E7DD2595B9A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 13:02:44 +0000
Manifest this update: Sat 09 Aug 2025 13:02:44 +0000
Manifest next update: Sun 10 Aug 2025 13:02:44 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: zWQCeE3Jli2VOhUGGc1/1Todscakt3CNpWyWcVK10jA=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:2c:1b:cd:4b:44:c8:da:3e:7d:d2:59:5b:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Aug 9 13:02:44 2025 GMT
Not After : Aug 10 13:02:44 2025 GMT
Subject: CN=68221228f53743b48d3fa67acf74c91e0b0b64be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:35:85:29:7b:6d:c4:79:98:ed:90:cb:fa:
fa:d7:5c:87:9a:2a:0a:7c:0a:20:a2:a3:df:79:d9:
bd:89:a6:dc:1a:7b:b2:03:85:a9:cc:1f:7f:c6:7a:
91:b8:42:ba:c4:da:9e:39:41:e3:10:b8:e6:79:e3:
10:c8:20:04:b2:aa:bc:89:89:ae:e8:8b:0c:d9:f8:
0d:57:f1:d3:b2:ba:c4:af:bc:3a:91:d4:02:3b:d3:
14:6a:95:3b:04:c1:a9:85:f7:5f:34:5f:f5:8c:2c:
cb:0f:3d:69:40:ee:67:9f:a9:67:d7:f6:87:2b:a6:
58:04:ed:13:47:6e:17:b0:5d:2a:1f:09:bc:2d:54:
a0:8d:a6:91:0f:31:ab:1e:9f:7e:e4:e2:f0:c7:9e:
76:f9:49:0e:d0:53:b6:aa:68:ef:09:ac:3b:15:4c:
f0:5d:fd:dc:e0:62:29:04:2d:7a:c4:35:86:a3:9e:
7c:49:b3:d8:69:fb:a9:07:65:ca:a1:21:60:9f:4d:
80:0d:00:5c:b9:93:d6:33:56:24:6f:f8:71:78:eb:
14:a9:08:5c:7d:1d:82:ac:42:f5:08:a9:94:d0:27:
04:b7:3e:c4:3a:0f:07:2d:e5:52:66:a0:2c:4a:f8:
1e:5f:a5:5e:56:13:ba:09:72:d5:19:4e:59:af:db:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:12:28:F5:37:43:B4:8D:3F:A6:7A:CF:74:C9:1E:0B:0B:64:BE
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:f1:97:9b:52:cb:ae:62:9a:22:06:f2:38:56:b8:53:f5:
56:0f:1e:0c:7e:23:d5:bf:cb:c2:08:a4:4a:84:06:12:63:29:
18:23:98:32:47:98:59:b6:c6:81:f8:9a:30:ad:32:24:27:64:
f4:65:d9:79:4f:6b:b7:2b:b5:25:79:d2:10:34:f7:b3:3c:87:
46:98:58:88:c4:2d:39:53:63:79:4d:3f:64:c4:f5:dc:63:12:
57:4c:bb:9f:99:82:e7:7a:1e:b9:ef:cb:25:17:75:e9:2a:58:
88:4e:6e:48:12:b3:74:bc:e9:92:ff:46:f5:75:3c:81:1f:63:
1e:93:5d:a8:90:60:a2:cd:73:44:46:9b:f1:4c:2c:7a:3a:13:
b9:17:47:16:c5:66:9a:43:d5:29:0a:41:b8:3e:84:12:72:37:
a2:ae:97:ea:9b:bb:01:44:8d:d5:81:fd:89:f7:23:f3:73:21:
71:87:fa:f1:39:54:54:7d:37:d5:3a:43:25:ad:a1:90:d0:54:
14:e6:af:87:cb:67:02:f1:ab:d6:79:ff:3c:13:9a:2e:0b:3c:
71:ea:92:29:be:cd:ac:58:15:54:6b:dc:e6:5d:e7:43:96:86:
60:73:4e:77:2c:53:7c:06:29:ef:8d:20:f5:a5:99:4c:cd:32:
98:f6:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:05 2025 by rpki-client