Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: ajEsIycPDIvVBK4VQZ3XkM2bZeBb9Ggnk/0wrG9Gjdk=
Subject key identifier: 30:B1:02:35:C0:D3:8A:AB:D1:82:3B:3A:52:A3:36:94:A2:9A:86:A8
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 019894488C6C3FE104870D35C81A25BFD858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 14:00:39 +0000
Manifest this update: Sun 10 Aug 2025 14:00:39 +0000
Manifest next update: Mon 11 Aug 2025 14:00:39 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: A5sJoY78QkTuwcNAKL+UGe8VP/s7xv5TpdIpjq2eIWo=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:8c:6c:3f:e1:04:87:0d:35:c8:1a:25:bf:d8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Aug 10 14:00:39 2025 GMT
Not After : Aug 11 14:00:39 2025 GMT
Subject: CN=30b10235c0d38aabd1823b3a52a33694a29a86a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:f6:b1:0e:97:36:a5:53:c4:66:1b:68:90:
2e:e9:3b:d9:81:22:a8:a8:5a:ea:45:f1:bb:e3:65:
a0:e5:02:26:04:7d:ec:6d:a1:10:67:bd:59:c4:f8:
ed:ed:b9:5a:a6:c3:8f:70:33:ba:99:1d:d5:c9:f0:
68:58:94:6c:17:c4:5b:b3:ab:c3:f6:34:c3:b2:1d:
b0:a6:39:37:7d:c8:4f:dc:d4:7f:3e:ac:23:1f:99:
a1:32:7a:2e:8e:a4:90:db:c7:f2:4a:81:c0:c9:66:
79:31:c6:51:ec:a1:0d:3d:9e:56:e7:38:15:57:a0:
af:81:a4:51:cc:b3:51:ce:ee:6e:1b:e1:cf:93:35:
8e:56:00:64:71:b5:1f:1d:cc:f9:3f:92:64:03:d8:
0f:04:73:ff:15:d6:e2:82:d8:2b:82:07:e8:14:13:
62:b9:1a:69:5a:b0:17:c1:a9:65:f5:23:05:f9:60:
84:48:29:cf:e8:87:16:05:99:20:d1:c2:2d:87:d4:
33:cf:79:ae:dd:be:94:70:11:24:e0:5f:8a:dd:40:
02:85:7a:6b:0d:c5:12:e1:e4:9d:56:65:e2:2d:76:
cb:b6:18:18:e1:69:2e:25:2e:15:44:9d:1a:b9:37:
11:14:b1:a3:35:48:e4:d6:f0:e6:15:b2:dd:3e:a0:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B1:02:35:C0:D3:8A:AB:D1:82:3B:3A:52:A3:36:94:A2:9A:86:A8
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:86:84:73:3c:15:f8:85:af:98:6f:f5:72:5e:1d:e8:67:
f7:b0:28:ac:ef:c0:f0:01:5b:f3:b7:e0:f1:7a:0a:cd:63:b7:
bf:ed:b1:2b:23:ae:2d:53:6c:1d:33:b7:1c:df:89:07:bd:1d:
80:03:b7:b6:98:c1:90:f1:32:59:36:0d:98:05:5d:32:97:c0:
fb:fd:dc:76:26:f7:be:8d:23:b2:8e:c9:73:bc:ba:a1:6c:f1:
02:23:74:d1:af:f9:c8:ca:20:25:58:42:9d:66:aa:98:f5:2b:
3d:b0:bd:27:2a:73:26:ad:67:fc:4d:fd:28:52:58:26:13:f8:
00:7a:14:f8:66:69:7a:12:a8:21:42:97:b2:70:4c:df:7e:41:
c6:af:75:bb:74:9e:e6:70:b8:e6:69:60:9f:5b:d6:cb:a2:98:
ac:12:8b:0d:44:42:e7:05:04:b9:3a:04:3d:b7:89:b5:b3:b1:
2e:0b:f7:a4:e3:7e:31:24:77:3b:bb:f0:57:99:8c:2c:1b:32:
75:d9:06:32:e6:8a:38:a1:ea:63:dc:59:c1:d8:73:9d:54:35:
62:97:2f:c7:a2:98:e7:27:2e:20:73:b1:d6:06:5e:34:6e:0d:
3b:a6:07:fb:31:2c:7d:74:27:df:a3:60:28:2a:4d:af:fe:07:
de:59:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:05:56 2025 by rpki-client