Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: FlKpa8fTgwVe4xFuWNNugCMiUQk7oa//FcUu5tI+MEg=
Subject key identifier: F3:D0:E4:8F:02:A1:67:F5:EC:C8:92:17:4B:4A:3B:0C:84:7A:D8:DB
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 01988E0FEBBDCD008011E10DA494C923DABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 08D5
Signing time: Sat 09 Aug 2025 09:01:04 +0000
Manifest this update: Sat 09 Aug 2025 09:01:04 +0000
Manifest next update: Sun 10 Aug 2025 09:01:04 +0000
Files and hashes: 1: VFYdZxVFCdCpkpyuxb39UT4cTZU.roa (hash: 9daq5hdLe7own+qRWKzM9da7RfcLhRIst1jMZCbP+lo=)
2: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: Cq2t+rGBNceOrmToxRh25C2HX2o9jbOqcChiaF5ccmQ=)
3: wWNImYV_qusP-8tj830GeFyHo-0.roa (hash: TFb93bClGCsSwFF6uHgZAuz4lfTVxVkQiC5YvyRCimQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:eb:bd:cd:00:80:11:e1:0d:a4:94:c9:23:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Aug 9 09:01:04 2025 GMT
Not After : Aug 10 09:01:04 2025 GMT
Subject: CN=f3d0e48f02a167f5ecc892174b4a3b0c847ad8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:4f:0a:39:78:2f:62:42:62:55:c6:29:75:
56:48:0f:71:4b:bc:8c:ab:4d:15:75:ef:52:26:3a:
02:a8:f1:dc:13:94:82:a4:fe:f3:43:13:30:a8:a4:
53:c4:51:48:df:70:60:8f:16:c8:e7:4a:5d:54:9e:
0c:69:fb:c2:ee:b6:56:5e:88:09:59:8a:42:5b:1e:
60:78:40:02:59:d0:a9:64:20:2b:b6:3a:06:82:de:
29:d1:b7:32:eb:8e:34:05:c8:49:f6:80:8f:e1:6a:
6c:5f:91:86:3e:09:0a:ee:5c:44:b5:d0:cb:4a:aa:
19:88:44:d9:01:07:41:ab:32:3f:bf:b2:0e:07:8e:
da:ec:31:74:7f:ee:05:cc:81:4b:69:89:48:ac:f2:
d0:e4:2d:28:3e:5e:39:f3:72:46:cb:d6:d5:77:a8:
8c:d4:b8:d8:49:7a:94:9d:fb:a5:8e:a4:fc:86:a4:
6b:d5:73:f9:dc:cc:8b:b0:90:72:93:e8:10:c3:56:
e6:d9:c0:33:dd:46:2a:75:da:e0:5f:c5:a5:dc:c8:
25:cd:19:85:16:c8:ba:25:0c:15:a0:78:e7:6c:ff:
d0:43:22:49:f6:5d:33:30:b1:05:23:d1:d7:3d:ce:
2b:a0:ee:08:ad:70:2a:a0:7a:11:d6:9c:fe:63:32:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:E4:8F:02:A1:67:F5:EC:C8:92:17:4B:4A:3B:0C:84:7A:D8:DB
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:ea:6c:20:bb:3d:3f:5e:f9:98:0a:76:a7:82:e0:13:94:
3d:8e:90:e6:1f:3d:64:63:6b:5b:28:48:cd:ab:3e:05:ed:e0:
63:0f:c9:8c:9e:1a:d6:41:94:86:4d:33:f1:94:17:a6:0d:f9:
ec:e3:f3:65:96:fe:f1:c9:46:52:14:29:79:9c:7a:c1:93:b6:
e0:cd:a0:71:8b:91:08:bb:7c:9f:3a:64:c4:02:86:ee:a8:c6:
4d:ed:ce:86:58:2b:f6:87:19:d9:eb:ae:4b:71:6d:4a:86:f1:
b2:7f:65:37:cf:65:76:26:51:e3:50:76:7f:4c:fc:d6:9b:9a:
73:0f:0a:b7:37:1e:2c:05:a2:f5:cf:17:49:ad:e8:fb:b3:48:
8f:cd:73:19:7e:e6:b5:45:48:75:7c:90:7c:53:7c:5c:2e:69:
3d:4a:66:b0:df:60:7f:b4:f1:6f:31:ac:c9:46:7e:40:51:f5:
55:63:94:b4:de:92:99:2d:98:ce:ae:87:4c:ec:7b:fb:5b:f6:
3c:e6:d5:2e:2d:b9:ab:a3:b2:12:2c:91:a8:46:1d:d9:30:1a:
aa:11:51:df:0f:39:7d:d8:0c:e9:1a:6a:70:ea:a5:8f:41:69:
20:c9:df:62:a1:60:76:23:27:dc:2c:4c:72:ce:92:11:c7:fc:
1b:28:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:56 2025 by rpki-client