Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: t4hXSZYM65gVPu2InXVtTHxMa6sxWAKOOMJ0q/unorc=
Subject key identifier: 92:DD:5B:42:48:83:EF:34:E5:90:89:B6:68:60:02:25:A7:94:6B:EA
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01987DF7BEAA95FA1FE06DCEA9FB1B3B8670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 04C3
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: qrwmYDbCB9v/MYvaKErdsGuAKbLftQD6i1MSkdnHYKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:be:aa:95:fa:1f:e0:6d:ce:a9:fb:1b:3b:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=92dd5b424883ef34e59089b668600225a7946bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:bc:6f:20:6d:7c:05:82:08:36:38:de:8b:
3d:6d:5d:bf:48:a3:2e:44:16:08:ca:fe:6c:40:c2:
da:78:53:23:d4:b4:af:25:7e:7f:9b:af:70:02:eb:
11:48:e1:0a:6c:a2:90:b2:46:24:65:56:e9:3e:59:
96:e8:43:c4:22:39:97:65:f9:0f:de:58:7f:18:23:
24:00:2a:49:88:1c:78:37:9c:cb:fd:37:42:0d:cd:
a6:dd:dc:8e:1d:13:6b:58:76:62:05:00:8d:12:03:
a7:1d:bc:72:b6:28:0e:3a:27:ce:b2:3e:53:f7:9e:
2e:23:1b:74:30:e2:6d:d0:5e:54:9d:0d:4b:7a:ff:
c3:eb:1e:2d:dc:8f:b0:f9:91:78:f4:b5:12:72:27:
9b:bf:80:8d:71:05:ee:6f:b0:94:2c:07:07:db:81:
07:12:6f:7a:2a:cf:76:be:6a:0e:60:86:6a:59:3e:
1a:d3:50:86:08:4b:f9:8f:fb:8b:9f:30:c7:98:2a:
90:b9:51:ce:95:7a:58:13:5d:6f:e0:3b:0b:53:c3:
68:8b:20:20:21:71:97:73:74:34:04:f0:13:d0:ab:
40:fd:ef:11:2d:d3:a3:5d:4d:c7:65:1b:f2:7f:1b:
2d:3f:00:a7:29:74:df:b3:85:1d:39:93:3a:32:ea:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:5B:42:48:83:EF:34:E5:90:89:B6:68:60:02:25:A7:94:6B:EA
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:3b:6d:95:f1:71:8c:96:8d:20:59:67:92:8b:9f:76:de:
d1:2f:2d:3f:37:ce:3d:8f:92:ee:da:37:ef:40:4a:59:a0:9a:
44:58:7c:31:d1:fc:85:1a:86:3b:8c:fe:e4:6f:9a:72:98:09:
88:39:39:0e:1b:14:40:b6:d7:30:86:5f:fa:6e:d3:07:b4:e4:
5e:2c:9a:e0:43:e0:28:62:47:8a:0d:00:f1:57:d6:e7:04:1d:
29:50:e2:11:f4:07:c3:ed:65:a0:e3:80:d7:d2:89:4d:a1:ac:
12:23:0f:6a:09:32:b1:d6:cf:2f:d9:c7:58:b1:48:00:9f:d7:
50:25:a1:8f:63:00:3a:da:5f:6d:d7:a9:a5:64:d1:8b:2e:09:
40:5c:dc:7d:54:a6:34:bb:9f:dc:a1:c7:6d:be:3b:44:e6:28:
fa:95:00:ad:3a:02:c4:b0:50:00:a8:bc:d9:ea:34:ea:24:b0:
70:28:6e:d6:ec:98:df:a4:e0:a0:cd:24:ed:a6:fb:ba:99:cc:
60:13:a0:37:00:62:e1:c2:46:6d:2f:aa:94:b4:65:2a:dc:ea:
45:10:55:ed:0f:46:26:48:a9:8d:9e:84:d3:73:3a:32:a0:e5:
40:0d:8a:09:ee:0f:7a:45:a4:8d:d8:a2:3a:27:1c:f2:15:08:
4c:5e:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:19 2025 by rpki-client