Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: +Smenh9AGnfMemiqo9wFLFc1ceL4aBOjhAU9mfrtEPE=
Subject key identifier: 92:9C:FE:E6:EA:B2:F5:56:1E:33:FD:91:18:3A:8A:88:D9:D3:88:49
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019874502E165D95FBCB15336460263300BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:08 +0000
Manifest this update: Mon 04 Aug 2025 09:01:08 +0000
Manifest next update: Tue 05 Aug 2025 09:01:08 +0000
Files and hashes: 1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: IfPYYk7t8vaZq/2l+bbEc+HeoZzW1VWXezL2AEVJXT8=)
2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2e:16:5d:95:fb:cb:15:33:64:60:26:33:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Aug 4 09:01:08 2025 GMT
Not After : Aug 5 09:01:08 2025 GMT
Subject: CN=929cfee6eab2f5561e33fd91183a8a88d9d38849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:3c:eb:ed:de:5d:40:27:c3:e8:85:d5:fd:
5f:27:86:58:a5:99:c1:73:55:23:ac:f1:d1:4e:e5:
2d:0e:e1:2f:4d:40:aa:94:15:51:02:ec:19:b5:d7:
2c:ce:02:83:da:1f:38:19:e0:f0:b1:cc:bb:c0:98:
cd:a9:1f:d5:5d:63:92:f0:3f:02:5c:b4:e7:bb:50:
91:e6:fd:48:85:de:7e:ae:ca:63:6c:8f:d5:ba:a9:
30:6b:3e:1b:ad:6b:d0:66:f9:c8:f0:c4:dc:34:c4:
de:90:ac:4d:b0:18:6c:31:c4:b2:9b:e6:b3:d8:78:
5a:4d:36:5c:17:78:dc:c1:7c:41:ee:97:cc:96:4e:
80:6e:48:d2:18:3a:40:fb:b9:9f:cf:d8:7d:e1:c6:
8f:e2:de:e6:15:15:5a:67:93:45:02:c6:7c:53:44:
ae:1f:71:1a:4a:fa:14:ba:df:62:9d:22:3c:84:77:
00:6a:48:75:08:0a:55:9d:5e:f4:3c:a4:71:bd:09:
06:9b:64:8c:99:f5:b9:a9:bf:43:2d:18:05:c3:9c:
8c:57:eb:0a:ba:45:85:fd:6a:e5:d8:2c:57:46:6d:
9f:a0:49:2e:ff:30:38:64:dc:6e:d8:89:c9:17:c2:
09:de:75:9d:2c:77:f5:ab:be:3c:58:ce:31:d5:ae:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:FE:E6:EA:B2:F5:56:1E:33:FD:91:18:3A:8A:88:D9:D3:88:49
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8b:f8:aa:d6:a2:4b:e3:18:3f:5d:75:4a:17:b3:5f:74:7c:
63:fe:ef:3e:da:c8:a5:88:45:31:8b:b5:3d:eb:df:52:8c:29:
7a:b9:83:9b:88:07:90:d9:07:d9:c4:92:dc:d0:af:d9:a3:fe:
16:8f:e2:c3:fe:66:1e:bc:35:85:99:17:73:b1:eb:ed:35:b9:
d8:09:9f:9a:9f:89:6f:95:74:f9:9e:a5:84:1c:1a:8d:86:1e:
ae:85:a7:ae:0b:71:0b:ea:1c:0d:40:83:39:c2:04:25:37:fa:
13:c9:4e:eb:d7:c8:6c:cb:a3:94:e4:8c:b3:cd:20:ea:00:31:
13:7b:cc:bf:26:40:40:42:86:68:d3:28:78:8b:53:fa:8e:e2:
a5:bf:79:50:df:4b:58:fa:bf:43:50:9a:5c:dc:e0:09:4f:eb:
53:21:72:74:0b:ec:b1:92:25:01:8d:fd:64:48:e1:84:12:48:
29:31:bb:33:a5:b0:3f:5f:03:4c:09:de:09:78:97:14:1a:cb:
99:52:77:66:65:cf:ab:4c:60:93:82:15:1e:2c:c4:e7:f8:c1:
b4:91:fe:8b:26:28:c6:00:99:53:5d:05:62:18:a3:e4:b4:65:
72:97:b6:c2:7d:f6:8a:f4:e5:fc:a9:cb:81:b6:44:ba:78:b0:
50:4a:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:24 2025 by rpki-client