Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: vL2UTqZBBUlwELfvKMeCFANeLP05gMzoP8evWTMn53U=
Subject key identifier: B1:54:10:FD:00:57:89:B0:55:87:87:5C:FD:5A:42:82:9F:D2:E9:35
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 01987AF7495C16725AC3BAFBA07482E3E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0F07
Signing time: Tue 05 Aug 2025 16:01:23 +0000
Manifest this update: Tue 05 Aug 2025 16:01:23 +0000
Manifest next update: Wed 06 Aug 2025 16:01:23 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: yhpynt/7jXR7AnIhvgnAozLa3EI3ZQwgJ6Gg6VcPLZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:49:5c:16:72:5a:c3:ba:fb:a0:74:82:e3:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Aug 5 16:01:23 2025 GMT
Not After : Aug 6 16:01:23 2025 GMT
Subject: CN=b15410fd005789b05587875cfd5a42829fd2e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:cd:e3:41:45:8e:c2:1d:24:0c:79:06:6a:
aa:42:60:a1:3a:c4:05:dc:1b:0c:33:f2:80:e7:db:
56:94:87:78:cd:e4:9b:2d:17:23:6c:ca:3c:0b:73:
70:cb:19:02:90:6b:5a:fa:5a:24:0c:68:fe:07:cb:
f5:89:e2:3d:07:96:ea:b5:d5:32:6f:38:2e:2b:55:
85:90:aa:a3:df:47:04:ab:db:8b:63:ec:6d:55:73:
fc:72:cb:dd:e0:02:36:1f:5b:3b:7f:15:0a:65:fb:
42:5f:7f:ec:35:71:18:f3:47:a6:42:de:58:61:d2:
e4:04:43:58:b8:0e:05:41:81:2d:67:3f:40:0f:6e:
27:b7:c1:5e:ab:85:1b:f1:32:d2:7e:65:1c:e1:e4:
4b:b2:ff:a7:76:91:88:ad:29:a3:5d:bc:b4:09:8b:
70:82:99:ab:28:9e:ca:f6:94:ac:f1:c2:af:19:6d:
37:5a:ef:25:5c:d5:bb:03:4e:06:5e:6a:2f:38:4f:
62:0f:c3:9d:cd:4d:44:f4:3f:aa:cd:1a:60:35:e6:
fc:8b:f2:1f:42:b5:bd:2e:a5:c5:f8:c0:13:84:53:
bd:2a:c1:43:b3:b1:d0:85:8a:b0:a6:7f:ab:cc:35:
b3:88:6c:59:bc:7f:c4:0a:da:79:8e:aa:71:0d:87:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:10:FD:00:57:89:B0:55:87:87:5C:FD:5A:42:82:9F:D2:E9:35
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:da:11:a5:78:39:2a:49:56:a4:ba:9b:cb:51:36:22:cc:43:
c7:15:61:a5:9b:70:a2:67:cd:69:dd:b1:64:5e:2e:a8:d8:69:
f8:13:fc:41:dc:b8:85:6d:08:af:bf:22:85:bf:95:a1:e7:8d:
2d:d4:57:80:f0:1e:3f:23:35:ac:2d:ec:a7:4e:a2:98:fb:9c:
86:85:2a:a2:52:c4:70:c9:57:5f:f4:4a:29:7b:8a:0e:b0:6f:
c2:44:b0:75:68:4c:84:96:46:d0:8d:86:2d:ed:38:6c:44:cb:
cd:73:c7:7a:45:a9:7c:4d:dd:54:ee:8a:99:09:75:29:d4:ba:
c6:7b:9d:e9:9f:21:86:33:20:f0:32:8f:6a:c0:a2:8c:4e:c3:
ba:53:01:74:d2:2a:5f:3c:6b:74:93:10:75:1b:c6:c2:65:28:
7e:9a:61:a5:a7:d1:34:a4:f4:11:e1:b5:3d:15:21:58:7d:9c:
be:22:83:7c:1f:8c:b0:24:d1:bb:b8:3d:83:d9:63:fa:e9:11:
de:46:6c:1e:ae:34:63:1d:73:0f:8b:ba:36:eb:cb:fd:32:13:
5b:a7:dd:31:78:0c:5f:91:29:1a:ac:a5:e9:e1:ee:87:5f:61:
e9:06:94:6e:1c:c6:41:b7:b0:46:1f:06:a2:6e:f2:86:49:04:
f0:ae:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:21 2025 by rpki-client