Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: XPQspMIZq/Qj4p3vlvoIruVEHTXiWbm7/BwUu6jTQ10=
Subject key identifier: 8F:84:E2:31:DF:EA:E0:07:0E:38:D5:59:91:97:50:27:34:3A:8C:D8
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 0198820B7891C8A3034EC0355B542746CAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 132F
Signing time: Thu 07 Aug 2025 01:00:46 +0000
Manifest this update: Thu 07 Aug 2025 01:00:46 +0000
Manifest next update: Fri 08 Aug 2025 01:00:46 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: ibpcnK4xPrvugSQlkFoK25hmZ+qxIh8ttVYs6Z0IzdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:78:91:c8:a3:03:4e:c0:35:5b:54:27:46:ca:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Aug 7 01:00:46 2025 GMT
Not After : Aug 8 01:00:46 2025 GMT
Subject: CN=8f84e231dfeae0070e38d55991975027343a8cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:51:63:38:52:84:d8:08:16:b4:fa:01:b7:
b1:a1:6b:92:cb:c3:c4:b0:ce:1c:68:67:44:94:e6:
0b:70:f4:00:3d:dc:c3:a9:ea:d5:88:6f:88:46:65:
84:99:c5:38:1a:97:9e:16:d3:3d:09:77:1e:6e:70:
22:8b:cd:15:64:a7:1a:9c:55:91:d6:32:c9:9d:1b:
b2:d0:8e:9d:72:1d:b4:af:76:d1:51:b4:8b:8b:0c:
6d:81:70:7e:72:24:7e:12:ac:2e:0d:9d:e6:09:9f:
10:24:69:67:de:c0:d5:c1:40:c0:f6:4b:fd:a1:44:
ac:d4:80:bf:79:c1:d5:f0:da:e0:67:48:d9:ca:de:
39:06:ae:7b:dd:1b:17:3d:66:63:bc:7b:3f:6a:1b:
c3:74:6f:77:6b:0e:70:dc:f3:88:31:36:b0:e4:98:
f7:39:f3:5e:63:69:00:b3:fd:b2:29:c5:d6:aa:aa:
76:0a:75:01:ee:05:07:eb:c9:41:16:17:10:7a:e2:
6b:2b:e5:77:bf:59:ec:be:59:54:24:96:e7:f9:33:
48:53:4a:22:5d:8f:2f:2a:01:a8:f9:a2:cd:3d:80:
31:90:de:e1:0c:1c:0c:fa:99:88:fd:cd:d6:3d:35:
7f:43:41:d2:6d:1f:1f:5e:b1:88:4a:dc:04:b3:64:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:E2:31:DF:EA:E0:07:0E:38:D5:59:91:97:50:27:34:3A:8C:D8
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:1a:ba:07:32:5b:ef:05:76:93:d4:44:54:8b:b6:34:6f:
45:0f:79:85:ca:02:b7:8b:ab:3a:0f:76:2b:1d:9c:c4:5d:9d:
71:b0:da:b8:75:41:ab:c4:2f:09:05:63:da:9d:3e:56:c5:35:
95:18:f4:5f:52:5b:d6:c8:05:54:1d:1e:31:0d:a4:cb:42:4c:
39:32:75:0d:80:4d:eb:54:88:5d:c5:c2:00:3a:dc:90:d0:bf:
54:3e:ee:90:5b:0d:82:f6:87:5e:9b:bf:04:ce:d9:6c:26:0c:
4e:a5:c7:19:b5:bf:1a:66:07:04:63:73:7f:05:23:81:53:b8:
46:ec:20:2a:a1:59:27:67:51:df:14:7b:c0:d2:36:90:93:49:
db:ad:ce:1f:78:6a:02:b4:0f:c8:83:7a:da:20:6d:9c:27:29:
e0:19:9a:d0:43:da:a7:2d:3c:bc:68:03:4b:a4:36:2d:e2:b3:
e4:6e:bb:ea:5d:f7:4a:bc:d0:40:d9:70:fa:76:5c:8d:1e:26:
78:dc:e3:6a:77:ba:04:b8:fe:42:1a:45:d1:49:35:e3:88:8f:
59:9f:b9:1f:15:24:06:c4:96:c5:ec:dd:5b:66:2d:9e:01:04:
31:49:21:30:5a:70:f4:9a:ac:8e:d0:e7:66:80:bb:ca:8f:bb:
a0:1e:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:25 2025 by rpki-client