Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: C2w8y43MNVxk73lZD3JJulvZmW6lkBByI1iDdvQJzNs=
Subject key identifier: D0:A8:09:EB:75:69:20:F4:27:B3:02:B8:AB:9E:2C:59:93:8C:DE:83
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 01988B0EC0552878484D1306DC57E37225CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 0330
Signing time: Fri 08 Aug 2025 19:00:56 +0000
Manifest this update: Fri 08 Aug 2025 19:00:56 +0000
Manifest next update: Sat 09 Aug 2025 19:00:56 +0000
Files and hashes: 1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: AwuWPdQNyXSBYZ9Z+YBPTpiDkRPfgeP4ytU3nlenNMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:c0:55:28:78:48:4d:13:06:dc:57:e3:72:25:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Aug 8 19:00:56 2025 GMT
Not After : Aug 9 19:00:56 2025 GMT
Subject: CN=d0a809eb756920f427b302b8ab9e2c59938cde83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:78:60:01:0e:72:6b:00:2e:5d:54:07:ed:
df:ba:99:70:de:59:88:f9:ce:d4:db:cf:26:94:d3:
96:7e:e2:09:aa:f1:53:3c:82:15:cf:80:81:8f:0b:
7b:2c:55:f2:11:40:71:e0:b0:28:50:66:cb:c5:ce:
4c:19:c9:c4:6d:3c:0b:3f:cd:0b:2d:1b:e6:09:c6:
67:9b:5f:7a:d6:44:67:e5:c3:ab:ff:e4:8d:ff:0b:
79:d7:d8:38:59:6b:84:2c:10:5e:e2:f1:55:36:55:
95:f6:6f:9a:d3:e6:43:57:9e:5c:f5:6d:cc:b4:37:
5a:41:78:09:b6:26:42:e6:7c:d1:aa:b1:5b:0e:5f:
eb:03:38:50:7b:29:f2:dd:5d:52:6e:67:41:1e:e9:
5e:24:d7:5f:be:87:ed:6e:7c:3a:9c:08:0c:14:e9:
3b:86:eb:bb:3f:6d:81:d2:ba:84:8a:07:4c:58:96:
7e:e4:4e:85:20:85:18:49:e6:71:1d:f8:51:b2:b8:
cf:71:81:b3:07:fa:18:4b:ee:c2:80:7b:3a:00:94:
c8:2b:a5:de:d4:28:f3:5c:cd:ab:d2:c8:e2:4c:78:
1c:80:8e:e2:60:a9:1b:37:da:a4:86:69:18:ee:7b:
50:01:3d:d2:5d:47:8d:a2:06:ed:2d:ef:b1:a7:d9:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:09:EB:75:69:20:F4:27:B3:02:B8:AB:9E:2C:59:93:8C:DE:83
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:16:13:66:f5:8f:e4:eb:53:e6:34:c8:be:05:d3:51:10:
f2:79:ef:ac:0f:ae:d5:8c:99:de:1c:9c:f0:80:96:61:9c:da:
68:81:29:f6:99:44:17:ab:ae:d5:3f:b4:eb:b0:3d:0b:92:9b:
c6:fa:1d:dd:c2:9f:83:82:f6:9b:f8:31:7e:3a:9a:f0:e4:9f:
0a:e6:c1:a4:59:96:6f:63:19:d6:76:ab:e0:4e:0d:db:37:af:
87:80:fc:b6:be:24:ad:02:48:61:85:40:4c:d2:42:d6:f0:1e:
d0:28:35:b9:ab:08:08:11:e9:21:71:d3:4e:60:38:5b:ae:16:
3a:e7:6c:e8:86:11:7e:a3:f1:e1:4e:42:21:39:17:1e:80:26:
89:42:2b:07:dc:cd:82:d3:ee:50:d6:7a:c7:af:c5:ef:2c:9e:
d3:81:c3:45:ec:bb:9f:f3:8b:9d:0f:c9:63:e4:5c:7f:28:29:
11:74:e9:11:2b:d0:30:2a:fb:52:af:2d:45:52:b0:dd:a8:6c:
c9:e8:d7:1d:43:23:49:35:b7:b0:b3:42:f7:f6:1e:2a:9a:dd:
87:82:aa:96:2e:1d:02:3f:ed:28:37:ac:d9:f1:62:c0:5e:fa:
16:1e:cd:4c:b7:1d:10:43:5a:c8:47:02:9f:03:c6:6c:64:a8:
16:d9:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:27 2025 by rpki-client