Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: X6BC+OmRKScK9eRsZp8ZLUnlFJJsyeyre59/TjWlkZU=
Subject key identifier: 92:F9:BC:C2:D9:7F:8D:57:CD:7D:59:12:34:E4:62:FE:CF:95:79:F7
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 01987B9C8934773712CBC68E9BD8F97A3897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 068D
Signing time: Tue 05 Aug 2025 19:01:52 +0000
Manifest this update: Tue 05 Aug 2025 19:01:52 +0000
Manifest next update: Wed 06 Aug 2025 19:01:52 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: DdgKFEj1PC9bmzI8z9pTE4jtBguXMuOc5L+UNI/rAy8=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:89:34:77:37:12:cb:c6:8e:9b:d8:f9:7a:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Aug 5 19:01:52 2025 GMT
Not After : Aug 6 19:01:52 2025 GMT
Subject: CN=92f9bcc2d97f8d57cd7d591234e462fecf9579f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:a6:ba:7c:09:1b:11:ed:30:9f:6c:db:2c:
78:a3:6c:90:b1:61:e1:9e:3a:5f:b4:b0:8c:2f:b8:
7b:c9:42:c3:fb:af:8e:da:2b:95:a3:3b:d5:14:21:
c7:6e:b5:67:74:6e:96:77:40:55:be:49:c7:50:d2:
81:bc:26:ac:e1:14:64:a6:ab:ac:18:bb:69:66:21:
52:61:5d:da:67:c8:cc:e3:71:24:9e:25:5d:85:48:
1b:29:b6:a5:55:04:ea:4e:44:80:f0:04:12:72:ce:
f0:95:98:b7:77:4c:7d:73:aa:61:6a:0c:24:66:b0:
28:00:6e:df:90:9d:e2:ae:31:e2:54:09:18:38:a1:
ca:31:4e:29:5c:4a:9d:16:68:c5:0d:fd:ce:75:45:
e3:af:c0:53:1b:08:0a:11:a8:0d:e0:ff:e6:30:cd:
7a:3c:24:16:d8:5e:e7:6d:72:5d:34:22:cc:53:77:
ae:06:ff:f8:d7:60:98:ec:f2:f4:60:17:fb:eb:ae:
36:ec:98:fb:d1:b0:50:9b:5b:ac:59:20:c0:b2:6a:
80:c0:c6:a9:28:63:e9:5b:7f:a8:f2:a6:75:50:71:
a8:34:10:65:86:81:1f:63:49:84:01:a3:39:db:fb:
a5:58:d8:95:7c:2e:66:10:7e:a7:e9:fb:eb:a2:cc:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:BC:C2:D9:7F:8D:57:CD:7D:59:12:34:E4:62:FE:CF:95:79:F7
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4a:d2:f7:00:54:63:01:9c:95:a2:d6:04:c0:b3:12:c5:82:
27:37:3c:fb:6a:2e:54:d1:82:56:6d:99:cb:2c:45:68:23:50:
72:cf:0f:5e:e4:d5:4c:ad:c4:c5:b6:1e:de:44:b0:6b:06:ad:
4a:a5:e1:1f:a9:61:53:71:05:56:43:7a:39:69:80:41:b0:15:
46:64:b4:3f:3d:47:11:0b:27:64:bf:d5:21:9d:83:99:e4:07:
05:d1:b2:84:79:b6:62:2a:58:5e:ff:7f:26:22:d8:91:c4:11:
bf:54:ef:5f:a9:a3:5c:20:0a:df:76:22:c2:47:fb:88:04:39:
8c:48:2f:36:97:8f:c3:4c:31:97:f0:2b:64:6a:9f:8e:34:a9:
c0:33:2c:aa:14:eb:be:19:2f:35:70:f4:06:41:8f:18:61:f3:
c4:56:4b:89:cf:98:1e:c0:f7:1b:9c:5a:44:80:3e:4c:00:c5:
ce:87:d8:1f:7a:76:92:48:0b:1e:c3:16:53:77:61:02:ae:e1:
f7:f0:cd:13:58:cf:6f:cd:cf:1a:04:3e:d2:33:d4:92:0d:02:
d3:3a:3f:0e:eb:27:7a:78:4e:39:4c:51:16:f6:80:ae:f8:1f:
0f:80:ff:ba:78:c5:e1:28:f4:7a:32:3f:a0:09:b0:4f:66:21:
4c:46:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:22 2025 by rpki-client