Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: kWb8Yk/mkwg8EAfaxIhUOzQzsF1fR8yKAaT0Xf8zeQM=
Subject key identifier: 44:16:92:AF:8A:9F:5C:C6:5A:E0:15:E4:43:38:21:2D:BA:EA:A9:C0
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019893A42C834BE13F0C317CA3440CEE72A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 0FEF
Signing time: Sun 10 Aug 2025 11:01:06 +0000
Manifest this update: Sun 10 Aug 2025 11:01:06 +0000
Manifest next update: Mon 11 Aug 2025 11:01:06 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: T9GO338KJDg7xYwqukn9AFiu40GrDXy0k6pv1JANKe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:2c:83:4b:e1:3f:0c:31:7c:a3:44:0c:ee:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Aug 10 11:01:06 2025 GMT
Not After : Aug 11 11:01:06 2025 GMT
Subject: CN=441692af8a9f5cc65ae015e44338212dbaeaa9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:83:d0:7b:aa:6a:77:0e:7f:0e:55:56:8f:
b7:52:50:56:5b:39:55:50:7a:77:f7:ab:d0:67:45:
62:00:af:6b:fd:2d:01:91:b4:3a:66:e0:de:be:c8:
49:8f:48:8e:e5:53:9a:4c:79:42:f6:e3:e1:cf:5d:
ee:2e:6d:e3:23:67:1d:73:c0:03:40:4c:62:3e:fe:
46:32:88:11:88:e4:23:40:fb:ec:71:55:f1:57:87:
b4:ad:a1:2c:50:43:81:5c:10:78:9a:16:80:65:a4:
03:2e:1d:5a:95:47:cc:99:69:51:3b:0c:86:4f:6e:
0a:a3:2e:76:35:60:29:70:64:21:bc:b5:42:b1:93:
e3:f6:54:64:23:87:06:b1:39:59:9c:56:fd:0f:a3:
6c:46:b9:ea:a3:19:ae:8f:87:9b:c5:41:58:14:1e:
7a:bc:9f:80:fa:d5:a0:4d:81:84:aa:99:7d:d7:c4:
15:54:f0:fc:fb:82:55:a5:0c:77:b7:69:7b:75:6b:
53:83:10:9e:e2:a1:b9:47:9e:31:d0:55:94:80:4f:
10:86:30:48:5a:38:9c:99:2e:e7:b8:ed:d7:e4:4b:
0b:a9:4b:08:20:b9:c9:95:a7:31:aa:4a:36:9d:90:
a2:e7:12:8f:6b:3c:0d:65:7c:e3:a2:2b:16:b3:1c:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:92:AF:8A:9F:5C:C6:5A:E0:15:E4:43:38:21:2D:BA:EA:A9:C0
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7e:d4:4c:18:6a:5f:18:62:97:c4:cd:ff:56:cd:a1:48:76:
06:1f:27:d5:d3:bc:08:00:eb:50:dd:9a:e7:7b:b6:26:cb:89:
c8:46:aa:62:19:af:96:bf:b2:0c:e8:51:4d:b4:9e:ab:3b:c9:
e1:b4:b5:11:90:a5:fe:b5:cb:08:23:ef:31:ae:63:12:09:0f:
3c:d1:e2:62:a7:38:db:c4:64:9b:69:0a:5d:bf:91:aa:03:78:
26:55:09:0c:50:b3:91:5f:b2:34:2f:51:fd:49:27:e2:99:81:
73:f8:33:77:82:22:9e:17:90:43:22:a6:04:28:84:26:f5:f9:
92:11:7d:14:72:3a:fd:48:ae:23:cc:7a:4e:68:ef:0f:93:69:
b5:b8:c3:76:be:4f:ce:ef:9e:ed:27:ba:b4:ae:bd:7a:e6:01:
37:d3:48:24:47:6d:e7:d6:8f:d5:57:ef:a0:02:44:7e:96:c4:
28:7c:42:05:5f:26:05:1b:d7:9a:51:92:87:78:4e:bb:f6:2c:
31:28:25:be:2b:d7:7e:a7:85:c4:05:fe:66:41:bf:53:11:4a:
06:93:02:81:a6:87:68:37:6c:a9:41:96:3b:60:93:d7:83:07:
f4:93:05:e6:ad:43:43:c5:36:4e:25:52:d9:be:a9:f0:ea:f0:
88:2f:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:26 2025 by rpki-client