Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier: syIlu4PE3h7VY+PaE6fKW8nVwsbweM98G3QC2xgACBo=
Subject key identifier: EA:89:D9:DF:DB:2E:CC:C3:F0:4E:36:F7:F9:CF:93:F7:BE:75:85:5B
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 0198820BAD12EF7993FB881D67D953B79C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number: 0817
Signing time: Thu 07 Aug 2025 01:00:59 +0000
Manifest this update: Thu 07 Aug 2025 01:00:59 +0000
Manifest next update: Fri 08 Aug 2025 01:00:59 +0000
Files and hashes: 1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: /cEM4YoFFqRG6Obol7Mgj0QSqokf5I+OMOsQ5zNYvZ0=)
2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:ad:12:ef:79:93:fb:88:1d:67:d9:53:b7:9c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Aug 7 01:00:59 2025 GMT
Not After : Aug 8 01:00:59 2025 GMT
Subject: CN=ea89d9dfdb2eccc3f04e36f7f9cf93f7be75855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:12:dc:11:3c:e8:1a:71:dd:87:cd:4f:ea:
31:98:db:08:6c:6c:6f:24:76:aa:b1:1d:c8:cc:b2:
24:44:4f:43:f7:b4:0e:bf:85:8c:b7:96:cd:39:a3:
02:85:37:14:2a:31:fc:61:7c:2e:13:1a:d4:f7:63:
f4:40:4b:fc:6c:df:a5:ae:1d:9d:8a:00:3b:32:be:
2b:9b:50:f0:75:f4:cb:75:06:ec:c0:80:7b:a0:75:
fe:b7:b5:f3:de:9d:df:cb:7c:88:9a:02:91:7c:2b:
5d:57:7a:30:2c:2e:c2:90:4b:40:d3:1d:ce:99:1f:
3e:50:f2:bf:92:32:8e:0f:1b:59:d7:52:89:95:5b:
bf:77:39:50:fa:a2:c5:59:60:a9:9e:1f:37:17:54:
31:bc:38:a0:ae:ba:52:16:79:7e:2d:56:61:ad:a5:
11:cd:bd:0f:3d:1d:b7:30:60:07:af:95:a7:00:e3:
a1:b0:60:70:e9:20:3b:95:f0:a2:99:88:36:50:68:
6d:b0:bd:6b:bd:71:d2:99:f3:93:9c:2b:5b:4e:2d:
b1:28:ea:a9:72:ad:8b:2e:03:d2:24:53:6c:ae:ab:
88:02:e4:3b:c2:bf:41:b7:aa:fd:bd:ad:0e:d2:59:
fb:1c:50:e4:41:f1:dd:d5:95:95:55:f1:c2:d7:c9:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:D9:DF:DB:2E:CC:C3:F0:4E:36:F7:F9:CF:93:F7:BE:75:85:5B
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:22:81:43:13:1c:cd:74:80:de:19:6d:d0:c0:a9:24:33:
8a:a5:f3:89:92:08:af:c0:8b:29:d4:39:77:d9:c1:3a:2f:84:
17:4d:bf:84:02:95:da:d8:25:8c:35:81:b6:e7:9a:a9:5e:da:
a7:31:f3:c7:24:23:29:57:07:97:d1:a9:27:f4:4e:50:3f:bd:
48:cd:e5:e7:00:66:55:47:b0:b5:23:3b:1f:28:78:03:7d:a7:
db:8a:30:ba:1b:4d:bd:ab:94:ab:53:38:01:0d:72:a7:66:5f:
50:0c:a0:9e:99:4f:4a:95:ca:00:0c:bd:ed:1e:bf:f4:73:77:
9b:3b:69:df:f0:c4:20:1b:cc:69:35:13:9f:7d:6a:95:43:3d:
0a:6f:a8:e8:f4:d0:d3:43:69:ff:5b:1b:db:98:a8:ba:3d:59:
d4:90:fb:ff:0b:12:7e:9e:0c:c4:7f:e7:b1:d1:3e:fb:34:9f:
11:4b:17:d2:f0:53:1a:dd:8b:5e:fa:4f:5c:4a:6f:46:8c:54:
ce:11:3b:ed:8f:b5:ea:87:cc:b1:c4:d9:9e:e3:89:c3:0c:e6:
71:ca:78:fc:eb:be:28:02:8a:f4:b8:93:c0:16:30:2f:6d:ef:
af:5a:3f:6e:22:fb:2d:57:3c:8f:a1:b8:59:f2:36:23:9f:06:
db:1b:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:52 2025 by rpki-client