
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: oC6NWBfx4nTRWe9FdEbfbNYhhFHoXDOcCNo6KmNdW4I=
Subject key identifier: 39:29:46:1D:64:69:51:09:C7:C2:2C:61:C0:98:27:A7:25:B7:DE:91
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 01989901A290494CFA122DAC5B60055CDBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 12:01:17 +0000
Manifest this update: Mon 11 Aug 2025 12:01:17 +0000
Manifest next update: Tue 12 Aug 2025 12:01:17 +0000
Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=)
2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: 1SimoHCt/zwDPwS7DfswBCvPvtgnzFm7wHb12FOS0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:01:a2:90:49:4c:fa:12:2d:ac:5b:60:05:5c:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Aug 11 12:01:17 2025 GMT
Not After : Aug 12 12:01:17 2025 GMT
Subject: CN=3929461d64695109c7c22c61c09827a725b7de91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:f4:11:2e:7e:9e:c9:58:e5:3f:ad:22:9a:
3e:26:ea:e0:b0:41:8f:5d:65:1f:88:d4:88:ed:9e:
f5:2a:68:ef:a1:04:fd:6f:b6:62:ee:95:6d:55:78:
e4:69:69:e1:4b:62:36:96:18:d3:e0:c7:5f:8a:25:
dc:41:3c:58:b7:11:97:8a:d8:74:88:94:32:75:b1:
65:f9:02:f0:f1:a1:39:a2:33:c8:80:fa:bf:f9:54:
38:c8:2a:f1:76:99:c5:93:db:c6:52:f4:f4:72:c7:
26:f1:18:f9:76:79:96:70:72:73:fe:22:d9:35:73:
e1:60:2a:34:6c:d5:c7:85:70:32:7d:3f:d8:56:1c:
04:e0:08:37:ba:3d:95:92:9b:9d:f6:f3:06:f3:b5:
66:33:98:35:70:bd:fc:5a:46:42:3f:2b:97:52:96:
d3:ef:fa:b0:78:13:47:f6:63:3b:ba:06:c9:d9:53:
51:9f:a2:81:a0:28:93:46:7c:0e:23:af:54:95:42:
6f:6d:32:e9:17:d1:d5:10:ad:27:40:f2:6f:05:23:
bb:f9:e8:10:4f:0a:fa:d7:39:b4:b4:85:33:43:4b:
85:00:44:6a:fc:48:18:a8:83:23:71:78:e6:cd:12:
fe:eb:35:4c:39:cc:7f:46:e5:11:4e:77:49:09:0a:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:46:1D:64:69:51:09:C7:C2:2C:61:C0:98:27:A7:25:B7:DE:91
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:6d:65:31:ca:49:10:7f:03:d2:c1:31:ce:7f:21:05:3c:
eb:71:f3:ab:8b:1c:96:ea:d2:96:ec:1e:b0:b6:66:12:33:d4:
b0:78:32:c9:27:ce:0b:fa:15:28:19:82:57:5a:eb:54:d2:ff:
b3:b3:17:8c:e6:7e:22:d8:95:6b:4b:73:85:e4:4e:92:1c:eb:
1e:fa:05:ee:89:3a:5e:e1:6f:03:57:0b:c1:6b:74:18:98:af:
b0:36:ec:87:d2:9d:ba:da:a4:51:a3:e7:0b:b1:0a:2e:7c:16:
dd:e9:5e:a1:00:5b:cb:16:7f:bb:9f:b8:d6:d3:e3:da:b5:43:
ed:d9:bc:3d:b7:c6:7b:33:a2:60:49:9d:c4:6d:95:1c:97:18:
c1:75:7c:2b:e1:0a:6e:7b:fc:1a:5c:2d:b1:7b:39:1f:de:b8:
18:01:05:e3:0d:94:17:4e:34:06:d8:70:44:2d:01:26:4a:90:
fc:e4:5d:e6:15:50:6c:a5:b6:91:0b:d0:60:b5:0f:2a:c2:01:
20:f9:1f:e9:2d:9b:dc:e2:47:a1:dd:8a:df:f2:6c:53:c9:25:
49:b9:70:7b:56:12:1f:6b:09:53:b4:ed:00:a4:0d:50:1c:67:
23:da:6d:bd:38:1b:b3:a7:41:5b:2c:9d:d4:8e:d7:6d:73:36:
93:87:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:42:43 2025 by rpki-client