Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: UtQhEpr4514fKm1fuaPGq3G080YW0rt4vdaDgxrUfmQ=
Subject key identifier: 03:75:28:97:3F:26:85:56:1E:5F:4E:C9:6D:F6:1C:2D:84:46:91:FE
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01987BD2551091ECB0CE06DF138404D64FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1241
Signing time: Tue 05 Aug 2025 20:00:38 +0000
Manifest this update: Tue 05 Aug 2025 20:00:38 +0000
Manifest next update: Wed 06 Aug 2025 20:00:38 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: fk2AChbkKcMolqD86RmLyAyjLE+w9cVsoUw7OBOR46k=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:55:10:91:ec:b0:ce:06:df:13:84:04:d6:4f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Aug 5 20:00:38 2025 GMT
Not After : Aug 6 20:00:38 2025 GMT
Subject: CN=037528973f2685561e5f4ec96df61c2d844691fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:dc:45:75:54:8c:31:48:ed:f1:ca:8c:49:
93:33:04:d9:a6:f4:1b:8c:d1:a0:b3:b8:c0:be:46:
c9:20:6a:61:75:4c:87:a7:84:f2:3e:92:44:f7:f2:
5b:dd:bc:b6:8e:07:01:8d:5a:c3:f3:0a:18:cc:cc:
6e:c3:4a:bc:45:b6:1e:b0:a6:b6:b9:30:01:06:ec:
91:74:c2:3e:4f:98:c2:ec:62:00:89:e9:b9:91:f7:
66:f5:e0:eb:4b:8a:97:0a:92:d6:b7:cb:fd:1e:8c:
d7:b0:7b:31:01:15:16:48:82:06:5e:d2:9c:7d:00:
cd:ee:7b:2e:e7:1d:cd:72:9d:cc:37:c9:4e:f2:11:
49:ae:8e:fa:cb:c8:79:e0:e5:96:19:9c:d7:90:9d:
e9:99:24:46:d2:e0:89:df:29:b8:63:52:ca:b6:df:
f2:c1:a5:ec:22:7e:ea:45:78:bc:64:80:1d:05:15:
5d:fb:ca:1a:a0:75:82:4d:db:ee:de:18:77:65:ce:
4e:41:95:19:a3:20:0b:d0:47:c6:8d:e5:cd:59:df:
fb:12:d4:0a:72:83:b5:38:3b:ab:72:e6:fd:8e:a5:
6f:b7:d5:04:1c:5f:3c:bf:4c:25:ac:9e:e9:0b:c8:
76:69:ec:d2:78:ba:59:c9:7b:56:c8:92:43:1a:9a:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:28:97:3F:26:85:56:1E:5F:4E:C9:6D:F6:1C:2D:84:46:91:FE
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:08:96:8f:d3:1f:23:9b:32:34:cb:8f:cc:47:55:3d:ed:a8:
32:9b:e5:b5:7d:49:a2:2c:0e:32:3d:5f:ee:a1:33:ad:d3:ba:
77:f3:6b:3e:8b:79:51:87:59:1e:f1:1d:81:a9:8f:c5:ef:79:
ed:0e:e2:f8:07:a8:5b:f7:a7:93:1a:06:47:fc:78:0e:b1:24:
dc:b5:c2:9c:0a:0f:93:d9:7e:93:17:0d:66:c3:82:6b:26:33:
57:ef:93:a7:6c:98:81:c9:62:e4:d1:84:47:d4:8b:ce:60:8c:
89:a6:79:70:90:56:2d:34:15:19:f0:b7:dc:3b:22:47:72:65:
4c:4a:51:96:7d:7f:16:d8:4a:52:5e:0a:51:d6:eb:db:6c:c9:
ef:8e:0c:b7:97:bd:35:68:7b:ef:f7:e0:dc:64:46:17:41:d5:
5c:6f:5c:37:0a:b8:7f:b8:5b:b7:99:b6:24:86:6d:94:7b:4d:
d6:f3:cb:fd:2b:59:e7:64:b8:22:27:03:f8:3c:6c:4e:33:da:
1f:80:f6:9a:2a:a8:bf:3b:25:fc:b4:e3:5f:42:06:6e:e4:47:
5a:98:2b:7a:d9:24:fd:70:07:30:24:3b:bb:2b:e9:6a:3c:b4:
1c:19:bd:5d:72:0a:a7:2b:6a:fe:70:ed:05:1a:0d:1d:ab:a6:
8d:2a:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:44 2025 by rpki-client