Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: lD7tzV1okHER80Hq1vjTpBwkiPHhZEoAMGmHt9vM/lc=
Subject key identifier: C4:8D:12:5D:8A:74:FE:7A:64:F1:7D:09:BD:2B:D5:4F:BA:7A:0F:FF
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0198A128A2E98E211140043D14CC293E5D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 162F
Signing time: Wed 13 Aug 2025 02:00:51 +0000
Manifest this update: Wed 13 Aug 2025 02:00:51 +0000
Manifest next update: Thu 14 Aug 2025 02:00:51 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: C9fi/hBlnsrrh0SHupQpLhtcmyerS+BTwRGQswoY2J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:a2:e9:8e:21:11:40:04:3d:14:cc:29:3e:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Aug 13 02:00:51 2025 GMT
Not After : Aug 14 02:00:51 2025 GMT
Subject: CN=c48d125d8a74fe7a64f17d09bd2bd54fba7a0fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:ec:7f:ca:38:b2:1f:b6:05:ce:16:9d:85:
ab:0f:86:26:00:be:5c:56:7b:01:4a:e2:e4:2a:db:
ed:21:3c:27:b9:41:c7:ce:71:ad:7d:43:d9:5d:57:
43:1a:fd:2d:70:e1:d9:5a:fd:b2:46:de:35:61:39:
89:60:f4:de:16:d3:d0:98:ce:6e:f5:19:a5:bc:58:
60:c4:5a:14:b4:d8:25:4b:f2:37:4c:3e:85:62:5f:
5c:ae:e3:ab:bf:53:7e:9f:6d:f1:39:b6:dc:39:f2:
d0:b7:16:ff:ba:f2:63:80:8a:9d:9d:a5:ef:52:c0:
c5:6f:03:18:53:9a:55:ff:a6:0b:68:31:66:b8:9f:
12:7b:01:fa:a8:4d:61:8a:6a:a9:89:6a:e1:0a:2f:
8a:45:56:ef:1d:85:8d:45:35:a9:d6:ab:2b:11:06:
63:3b:f9:89:ac:36:5b:c3:49:d7:1b:a7:6a:39:fd:
33:7b:b4:5e:73:07:94:15:20:1a:16:3e:76:ee:0f:
8e:e3:a9:6a:74:dc:86:57:44:6b:1f:4f:71:3f:98:
1a:28:ba:e2:a6:92:5f:19:a2:d1:11:7b:b8:a0:23:
35:f8:84:da:3c:fa:17:11:f3:c5:b6:ef:be:4c:a2:
1d:42:d3:3a:22:90:02:ae:5c:c5:12:4e:f0:3e:b1:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:12:5D:8A:74:FE:7A:64:F1:7D:09:BD:2B:D5:4F:BA:7A:0F:FF
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:74:1f:c5:71:df:66:4d:df:93:d0:01:6f:bb:9b:10:bf:
08:b3:0d:23:32:f0:b2:af:b3:06:e2:05:e6:e3:69:2d:29:24:
0a:0d:e2:a4:1d:58:23:fa:f4:2f:46:9c:d8:90:9a:07:10:10:
5c:45:5d:a1:94:44:66:46:b8:86:10:a5:c7:29:ad:4b:89:d6:
1a:80:5d:b8:93:0b:50:0d:45:d5:74:01:1b:d2:70:50:ff:93:
cf:a2:d7:0c:5c:2e:31:2a:d2:b8:da:46:10:2d:c7:9c:19:bb:
ba:e7:dd:56:a8:38:24:5e:95:e6:e6:f0:d7:e1:4c:96:36:df:
0b:e8:f4:86:0c:9e:64:34:6d:f1:1c:91:c6:dc:ce:43:36:5a:
ac:47:6c:52:37:7b:b5:27:02:0f:53:81:f7:47:c8:12:af:0c:
54:87:aa:1f:c5:2a:b5:d1:29:52:f8:7f:05:14:99:05:50:b5:
8f:73:6d:ec:b4:29:be:62:53:cf:76:18:ca:20:ce:e2:96:1c:
55:82:17:35:e4:fb:09:d5:4b:79:e3:31:f7:29:ec:a1:a9:3d:
28:cd:96:c9:14:6d:d8:6f:97:90:76:2d:24:55:3a:2b:64:e9:
35:16:f9:b5:8e:d6:e6:da:ec:4a:23:7c:88:b4:70:cc:47:fa:
4f:8b:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:30 2025 by rpki-client