Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: wN4GlkaMkvV93zxLJtzF/DqbvXzoncBNTCrULL9aHiU=
Subject key identifier: B0:FE:9D:CC:5D:DB:EE:61:7F:D2:19:AE:47:4A:68:03:86:F0:8D:05
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 01989E601E63AB3F3EC1148AED39B3B3A23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 02FC
Signing time: Tue 12 Aug 2025 13:02:36 +0000
Manifest this update: Tue 12 Aug 2025 13:02:36 +0000
Manifest next update: Wed 13 Aug 2025 13:02:36 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: BSiiGZM4QNqikntBXrqPBWRbahoEWhDIA5S44FI4hrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:60:1e:63:ab:3f:3e:c1:14:8a:ed:39:b3:b3:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Aug 12 13:02:36 2025 GMT
Not After : Aug 13 13:02:36 2025 GMT
Subject: CN=b0fe9dcc5ddbee617fd219ae474a680386f08d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:e0:6e:22:32:1d:a8:8b:7c:b8:cd:ee:cd:
94:00:08:9d:3c:15:ee:03:50:0f:78:6b:c2:c9:a9:
2a:95:f7:60:90:2c:2f:9b:bb:5a:d7:9e:04:f5:50:
02:71:07:8a:42:ff:23:5e:01:03:4f:4d:c3:35:ba:
55:3a:51:9a:5a:2f:b4:66:a2:92:96:16:3d:62:a6:
a7:b4:34:76:03:93:cd:8d:b7:75:43:52:27:84:c7:
c8:9e:ba:aa:f5:a1:b4:ff:77:fb:bb:0a:11:bf:8c:
7f:4b:01:30:c8:da:17:60:18:c4:1d:22:a2:f8:68:
43:91:cc:9b:ec:e8:fd:0e:c6:8d:db:2e:e0:a3:77:
eb:a4:b1:8b:28:37:9b:9b:4a:24:3b:ee:63:2a:6d:
44:22:31:2a:7e:c5:33:c3:a3:e2:79:b2:79:6e:bb:
bf:a3:a3:7a:04:9b:ac:f1:61:c4:a6:fb:15:c8:41:
de:31:22:a8:e6:aa:cf:38:59:14:4b:96:92:b9:fd:
0e:7f:d7:33:26:ba:96:12:af:8b:ce:ac:91:69:f6:
f2:34:92:c8:e7:88:7b:88:43:b5:ac:20:28:62:c8:
c2:7d:db:7f:9b:67:0d:05:81:64:78:57:36:a6:8b:
f1:e1:3a:45:49:c0:ef:36:99:7c:9d:4e:0b:47:3e:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:9D:CC:5D:DB:EE:61:7F:D2:19:AE:47:4A:68:03:86:F0:8D:05
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ad:e2:95:61:61:c5:2a:56:85:6e:64:e4:d6:4d:87:8e:56:
98:11:be:4f:19:d7:01:ff:fc:b8:e7:36:b8:50:02:9e:18:86:
90:71:36:ed:3e:f1:99:d2:58:00:9d:20:5e:b6:8b:23:ac:9c:
8f:d9:d5:ba:4c:bb:22:c3:82:51:fa:ae:fc:42:53:c3:a9:15:
e7:40:cd:b9:ab:df:fa:47:e3:ae:25:36:32:cf:c7:78:6f:ba:
ff:36:39:dd:6a:d1:7e:d3:aa:50:1e:fd:4b:93:6f:8d:c1:3c:
65:39:c5:52:76:87:2e:94:af:72:a1:6a:66:f7:7e:02:13:bd:
26:f5:a2:12:db:b2:6c:c0:10:c9:1f:94:cc:15:c7:45:b5:fa:
3a:8f:b9:c7:d2:c7:74:bc:0d:7a:e9:69:48:ce:db:1b:87:61:
2c:59:cf:57:3c:2a:87:90:fd:83:05:7e:68:8d:ad:32:89:7c:
3b:6e:e0:7a:e2:f2:72:eb:1f:aa:f1:00:dd:fb:b7:b7:09:bc:
b1:00:45:81:f1:e6:87:5c:e3:0f:a5:e5:e3:dc:a6:cc:80:2b:
b5:c8:57:ae:e4:c8:d0:90:5b:c1:b5:b0:f7:24:79:ae:54:ad:
e2:3f:b4:6c:17:af:21:0a:ff:9b:3a:fc:a0:40:b1:d7:3d:49:
1c:2f:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:39 2025 by rpki-client