Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: aYhUXdnJsN7QixFsIwGtAGyn2Crn7Cqfit6DbwH4rE8=
Subject key identifier: 35:8F:A0:19:61:3C:5D:6D:CB:A4:20:2C:39:60:A6:95:9E:A1:9B:1A
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019894B68458385213158BA83C88FE33AB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 07B0
Signing time: Sun 10 Aug 2025 16:00:46 +0000
Manifest this update: Sun 10 Aug 2025 16:00:46 +0000
Manifest next update: Mon 11 Aug 2025 16:00:46 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: P+1w2pcFO3G82/KSYE+XutAo82dtZew09p4gAjr9bHw=)
2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:84:58:38:52:13:15:8b:a8:3c:88:fe:33:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Aug 10 16:00:46 2025 GMT
Not After : Aug 11 16:00:46 2025 GMT
Subject: CN=358fa019613c5d6dcba4202c3960a6959ea19b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:ec:9e:cd:5a:ad:6a:7b:6c:be:e8:a3:7c:
35:69:49:0c:3b:9d:80:17:7c:cd:8f:fb:2b:96:c0:
63:d7:53:f3:85:11:67:b0:7e:e3:19:3a:d1:69:99:
23:d5:fa:5c:4a:4b:20:7b:5d:6d:25:74:e4:58:31:
5c:30:03:08:1f:f3:c7:77:ae:4c:e4:24:17:22:33:
04:7a:f7:30:ab:92:50:20:85:84:98:97:70:5b:b6:
cc:8c:01:f9:38:35:2c:a0:16:df:55:66:b7:ea:a8:
5d:e6:03:28:ac:24:0a:0d:c6:b7:8a:96:af:f5:d8:
eb:0c:08:aa:5f:bf:b6:52:13:7b:b6:5c:86:51:a1:
19:ea:e4:95:b7:46:f3:bd:f5:cf:09:fb:24:8a:78:
16:2d:00:11:61:19:c6:12:11:07:a8:47:62:f2:0f:
2d:f5:fd:56:6f:a4:55:a4:4a:4f:52:4c:94:d7:60:
7f:b3:96:1d:6e:11:35:11:53:7f:de:f0:cd:c3:67:
ea:7a:9f:e6:e4:2f:e2:90:08:26:14:ea:72:73:2e:
ba:c1:20:c9:ea:17:5e:45:85:72:22:dd:a8:b2:db:
bc:1d:b2:2c:00:18:b1:09:56:64:48:3e:e8:fa:41:
99:4c:17:1f:90:3b:09:47:b2:7d:b7:67:dd:55:bd:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:A0:19:61:3C:5D:6D:CB:A4:20:2C:39:60:A6:95:9E:A1:9B:1A
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:a5:40:48:43:1f:3e:37:20:65:56:0a:1b:8b:d9:53:54:
c1:7b:c3:d1:aa:d7:a6:f0:4d:07:2c:aa:b0:49:d7:37:f4:23:
5a:5b:2e:b0:28:b1:1d:30:91:9c:81:9c:11:6b:ce:a4:6a:2d:
61:68:b4:4b:f4:0a:de:78:57:b2:e9:cc:66:82:fd:71:b9:35:
87:31:c7:ff:60:7a:27:3f:ec:34:0b:f7:f3:49:66:bb:2b:f8:
2d:84:37:10:52:10:ea:ab:69:2b:fa:06:a5:61:69:44:15:cf:
58:40:16:42:df:6b:7c:1c:7c:71:c3:c7:d8:16:a5:e8:1d:ba:
6e:a2:5e:29:af:e4:cc:87:24:91:eb:84:b6:5c:19:42:69:8e:
d8:3d:89:38:c4:61:95:af:76:44:6a:c0:46:02:31:4b:f3:72:
fe:cc:d0:0b:fd:60:b7:d0:c4:49:68:d6:e0:3d:a7:ba:c8:48:
a8:eb:31:46:09:60:33:e5:d8:cb:95:54:5a:17:60:8f:29:8f:
ef:7c:6e:b1:c5:d9:bf:80:76:70:00:d2:ca:36:41:1a:a3:3b:
62:10:21:ac:3d:3a:1b:29:2b:ff:a7:b2:73:b7:c9:29:47:52:
4d:36:f1:a2:e3:bd:4f:af:7c:87:ac:24:b7:e6:c4:9b:b6:63:
63:8c:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:16 2025 by rpki-client