Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 4k2FKO0C/D3PuizFpDtm05Uk2yfNmC3KAC6X4YHDQlc=
Subject key identifier: 35:A0:E8:CE:42:02:9B:9A:24:E1:32:C2:E0:9C:8F:32:14:09:B4:DC
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 01987C406DAB8133BE59048952D91BE1D765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0276
Signing time: Tue 05 Aug 2025 22:00:53 +0000
Manifest this update: Tue 05 Aug 2025 22:00:53 +0000
Manifest next update: Wed 06 Aug 2025 22:00:53 +0000
Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: N5TuvcpN5w8EnvVnUBd07WjpJAgX/akTRNcVM5cJYCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:6d:ab:81:33:be:59:04:89:52:d9:1b:e1:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Aug 5 22:00:53 2025 GMT
Not After : Aug 6 22:00:53 2025 GMT
Subject: CN=35a0e8ce42029b9a24e132c2e09c8f321409b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:84:0e:97:0f:15:6d:2c:bb:1b:3a:f9:61:
5e:3c:bb:e8:a9:9f:b0:fd:a2:8b:58:e0:39:4a:32:
b2:b6:c0:e3:43:64:22:8e:25:b3:11:43:4e:cd:0a:
d6:02:48:12:1d:57:e6:14:a0:63:38:47:1d:7d:4d:
8d:5c:f8:e7:f4:56:1a:8b:31:8d:e0:0d:75:df:0e:
83:b0:b3:0a:5c:66:fb:3d:01:6a:a9:a7:38:7c:a8:
3c:44:79:a2:e2:61:f9:38:5a:4c:09:9b:83:13:41:
0a:d3:09:e6:77:8a:b8:a3:f4:6e:72:ea:f2:b5:75:
03:78:41:08:0b:7a:82:68:93:82:e5:ec:2c:c5:41:
38:c5:f5:0c:e8:1a:59:5b:61:d3:06:88:93:88:f3:
bd:f0:4c:66:cd:a0:b2:78:c0:64:0d:35:0a:66:3b:
fb:0a:44:69:ec:06:2b:7b:ed:69:86:4a:21:a1:22:
fa:90:3d:3f:c7:d3:40:11:15:26:f2:8c:6a:74:17:
5c:c6:18:c1:4f:5e:1b:f6:31:4e:ac:a9:5d:1a:cf:
3b:de:29:36:e1:65:90:64:cd:3b:69:e7:5a:47:bb:
31:71:d6:c7:ff:14:a7:69:60:80:ff:6c:37:ac:a1:
0b:f3:d9:8f:cd:04:65:79:e8:f7:f5:1f:e3:fc:e9:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:E8:CE:42:02:9B:9A:24:E1:32:C2:E0:9C:8F:32:14:09:B4:DC
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:5c:0a:ea:2b:eb:87:44:11:7c:b4:ce:d4:da:34:99:24:
72:c1:1d:70:93:a1:aa:c1:1f:58:b8:1a:52:48:91:1a:e2:ae:
89:5c:38:8c:cd:6c:e8:d4:9c:35:c8:bc:2c:1e:97:57:0b:75:
f4:06:1b:66:b2:bd:ec:c8:b7:bf:e1:01:79:42:35:f5:6e:4f:
5d:16:b7:44:09:97:51:84:0e:6e:0b:0d:4e:a9:12:3d:27:4e:
c7:0e:d7:43:5c:bb:8d:f0:2f:79:a0:cf:20:fb:7f:a7:65:61:
d7:11:18:c9:ec:cb:23:02:a4:90:78:88:a1:a5:b7:78:03:de:
ee:f9:e4:55:e6:7a:da:eb:7f:1d:aa:d2:0a:2e:ff:05:d9:80:
1d:e9:2e:85:bd:c7:b8:f8:8e:3e:82:db:d7:86:58:55:e7:38:
e6:60:c4:db:c9:19:ab:29:7d:3a:ce:8e:17:f5:b2:3d:77:8e:
19:b3:86:a0:62:bf:75:24:b7:19:2a:57:5e:cb:3d:82:e3:41:
9e:d8:0d:e5:cc:ec:05:61:e0:87:5b:16:dd:60:0a:7f:48:2a:
67:a5:b7:17:1f:f8:a2:08:a8:c3:83:56:fd:77:b7:ab:70:3e:
e9:56:da:11:08:7a:3e:ef:af:b4:f7:50:aa:7a:70:88:ff:43:
47:47:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:10 2025 by rpki-client