Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: AYdpJecCzQVCtMv0nD1xvvUT9adGPaimstQWyflhwGM=
Subject key identifier: 68:16:B7:29:F3:3E:B0:CC:0B:48:FA:3A:42:D3:98:74:36:3A:F2:14
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 019894B82E82A80D303C567ED632A3EF730C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: 01CD
Signing time: Sun 10 Aug 2025 16:02:35 +0000
Manifest this update: Sun 10 Aug 2025 16:02:35 +0000
Manifest next update: Mon 11 Aug 2025 16:02:35 +0000
Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: ZgBJ3uJOxYhDGoraYC4qQcuwh8MHW8C8Vwi4f2vETSg=)
2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:2e:82:a8:0d:30:3c:56:7e:d6:32:a3:ef:73:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Aug 10 16:02:35 2025 GMT
Not After : Aug 11 16:02:35 2025 GMT
Subject: CN=6816b729f33eb0cc0b48fa3a42d39874363af214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:b5:e0:26:2e:3b:bb:ba:95:fb:ff:96:97:
98:27:98:02:ff:77:3d:41:27:ac:e7:f3:a3:c3:13:
52:31:2d:b7:0f:42:b4:41:cf:3e:e6:ed:d2:79:12:
42:02:6f:6e:aa:4c:07:6a:ff:1e:59:e6:8f:d1:46:
40:1f:25:5b:19:01:11:ac:44:db:fe:82:b0:8f:03:
c6:25:5f:2f:79:06:36:7f:a1:a7:4f:a2:d2:80:70:
94:bd:b7:12:b6:95:50:49:72:e2:6f:48:9a:af:09:
64:0c:b1:8b:2b:aa:29:62:3c:e7:5c:49:05:fe:ca:
cc:4d:a1:c3:6a:f8:fc:3a:b6:94:95:12:5b:bd:cf:
42:89:a1:12:fd:3b:9e:64:e1:1c:4e:4c:4e:62:d2:
5c:d9:64:b3:52:07:21:eb:0e:63:33:6e:e6:79:94:
e2:dd:46:0f:2b:10:2d:1f:ea:ce:8c:b8:13:62:ff:
67:d4:0e:28:10:0c:9a:df:38:1e:88:4b:20:01:e3:
5e:39:c6:48:8c:68:c4:da:33:a4:3d:72:e7:30:f3:
06:43:a4:f1:42:07:5b:0f:8e:a1:c9:ac:62:93:4a:
0c:f6:66:96:a8:2a:56:75:28:a5:2d:70:79:f2:d2:
7a:90:25:2b:3c:6d:44:23:89:50:03:3c:53:35:bb:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:B7:29:F3:3E:B0:CC:0B:48:FA:3A:42:D3:98:74:36:3A:F2:14
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:85:6a:4e:80:2f:61:1a:01:65:3c:1d:c7:d5:de:a9:60:
d3:1a:02:c3:03:bd:66:02:4c:eb:f9:21:76:16:b3:6b:9f:01:
96:20:88:21:e1:4c:96:f6:e8:c7:95:8b:73:2e:4e:bd:b8:7e:
d8:ab:c7:8b:09:b1:6d:e3:b5:26:70:44:00:e1:13:a1:31:67:
8f:27:61:98:e8:7f:69:da:1f:ae:83:5f:93:34:01:b6:d5:61:
d9:f9:9a:83:03:15:96:2f:ec:64:ed:37:2a:f0:15:cb:06:d0:
8a:c4:e4:30:20:1a:14:a0:1c:9f:ae:f7:b6:bc:74:71:9d:2c:
04:e5:66:f5:14:09:55:b2:c5:92:d7:32:51:4e:10:35:c2:b4:
ec:ec:f2:4a:5f:7c:6c:6d:68:c0:ba:c7:a0:7f:38:59:da:20:
03:34:fa:b0:8c:f6:64:d2:73:64:5f:50:1d:03:52:36:f9:c4:
28:7c:09:25:98:7e:69:2b:59:1d:1c:59:7b:1a:ab:e4:48:15:
d0:0d:70:88:57:6e:9b:78:3f:44:2f:71:ec:78:3b:8d:51:7a:
3f:9d:cb:a1:8c:3f:8b:a8:55:eb:82:b0:8b:cd:43:62:0c:c4:
3d:81:8a:0e:f2:29:a5:12:ce:c7:1a:af:75:2f:0f:d0:db:c2:
e4:25:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:13 2025 by rpki-client