
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File: eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier: dpcDANGsZhOh8r8/Rtq90vktL3840S6lTaA/GmwLKmc=
Subject key identifier: 1C:C3:34:2A:CE:55:32:BD:A9:9F:06:E4:57:7D:84:CC:45:14:E3:08
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 01987C09A1DEA705F8241372DFE0E8C0D365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 21:01:02 +0000
Manifest this update: Tue 05 Aug 2025 21:01:02 +0000
Manifest next update: Wed 06 Aug 2025 21:01:02 +0000
Files and hashes: 1: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (hash: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=)
2: XrmbTB36f6No7HgE2Qb2I31Dcv8.roa (hash: HGfAozR7O/ZB1GS1OfPuLa6dsGtZ660AMEUXLcdHqKM=)
3: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: YkZe8rl49o+UlcR7iHgmsuVP3xBrTRSP8DhmcHmp79E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:a1:de:a7:05:f8:24:13:72:df:e0:e8:c0:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Aug 5 21:01:02 2025 GMT
Not After : Aug 6 21:01:02 2025 GMT
Subject: CN=1cc3342ace5532bda99f06e4577d84cc4514e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:42:60:73:b0:0c:f6:cf:b9:a1:22:38:4b:
3c:82:65:80:9e:db:15:af:f4:17:7b:41:91:e9:25:
aa:0d:13:2a:76:dd:5d:3e:57:28:62:f2:1b:88:5f:
05:da:0a:da:8e:cc:3e:e3:b1:a0:55:a0:ad:54:f0:
d5:84:fd:50:af:94:5f:c0:6b:bb:b6:cd:57:da:a1:
b2:c1:41:dd:b4:2e:e6:16:b5:43:be:ed:4f:fd:f4:
4c:e1:c7:13:d8:60:7e:a3:03:52:90:bc:35:36:93:
66:ad:d6:42:0a:f6:04:d1:f5:e0:53:b7:f6:e9:9a:
99:5e:c0:f8:94:bc:49:93:b1:8f:ae:c5:e6:a5:0c:
f9:ba:3f:64:ef:cb:0e:06:40:7b:1e:2f:99:9a:63:
dc:3b:04:67:e4:0b:7b:d5:68:32:95:8e:75:b4:b0:
2a:4a:1b:db:95:ee:6a:9a:e4:cc:50:6a:95:0e:10:
b1:2e:c2:5e:71:51:e7:f9:52:c7:64:1d:6b:83:81:
08:4a:a4:67:70:60:50:4a:fe:3e:1b:1e:5f:9c:1c:
cc:16:47:07:79:d8:ec:73:32:82:02:37:a1:97:4e:
70:0f:25:50:04:27:73:e8:01:cd:63:b8:25:54:6c:
8b:c9:4e:e4:cf:d6:1e:79:87:0b:71:b6:57:3c:91:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:34:2A:CE:55:32:BD:A9:9F:06:E4:57:7D:84:CC:45:14:E3:08
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:f8:9e:a0:52:a7:fa:56:36:b6:c0:35:25:a4:0d:df:f7:
34:6d:e6:1a:48:db:92:ed:e1:ac:57:6a:44:5e:c3:19:6e:a5:
0a:02:1d:b0:95:fc:57:86:d5:50:c5:99:43:2f:33:66:a8:25:
47:32:01:ac:92:57:d3:aa:f5:db:a0:e5:2c:42:59:e0:8b:20:
30:ab:7e:af:95:c3:85:57:80:54:23:ab:36:59:38:41:bf:0e:
0c:3a:28:99:b6:e6:22:87:32:f3:68:7c:17:01:71:92:0b:59:
c5:23:27:eb:36:99:7f:90:a9:2f:4c:f7:db:fa:b8:03:df:2f:
e4:8b:68:e9:54:fe:b3:7c:64:ee:a0:ac:02:f1:c1:48:e6:c8:
44:fc:af:9e:a4:9a:9e:cb:01:a7:63:48:b7:c2:79:85:4d:02:
33:d3:28:5a:5d:af:70:30:43:ac:cf:02:28:e1:5b:82:52:03:
d3:7c:b4:eb:11:4c:6a:61:ff:38:47:9e:51:15:6c:e6:f7:40:
b1:e3:84:27:37:04:78:ab:9e:82:96:7a:78:79:29:49:7a:08:
e1:db:89:d5:9b:92:51:c7:b0:20:af:84:55:4e:f7:20:c0:4e:
87:29:21:93:d0:47:6f:f6:21:60:b1:e9:c7:f8:6c:29:de:52:
f6:e0:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:54 2025 by rpki-client