Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: U6pE8qYiWISyULGHB/nilp1UMN3L8lZC99smORSxOW8=
Subject key identifier: 6B:F8:CD:2F:AC:E9:C1:83:82:8A:E5:80:2A:5A:1F:AA:C7:4E:52:B1
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0198835578001446B5F23F59736EDA8B8BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 07:01:13 +0000
Manifest this update: Thu 07 Aug 2025 07:01:13 +0000
Manifest next update: Fri 08 Aug 2025 07:01:13 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: yU1CoWOH/1xOfO37mH8jkKjjVBigbjQ3dAXMrL2wfV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:78:00:14:46:b5:f2:3f:59:73:6e:da:8b:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Aug 7 07:01:13 2025 GMT
Not After : Aug 8 07:01:13 2025 GMT
Subject: CN=6bf8cd2face9c183828ae5802a5a1faac74e52b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:31:3a:ee:f0:17:b1:bc:e5:e3:81:49:5f:
6c:06:83:a4:aa:63:7e:97:78:ad:06:15:75:3f:0d:
6b:96:62:e8:5e:cb:81:70:ca:23:80:05:67:e6:37:
60:4b:c7:86:11:93:7f:25:16:5b:bd:1f:76:63:59:
c8:b6:83:c3:a2:a5:eb:01:d7:89:fe:b5:d3:37:24:
3d:23:0f:cb:bb:10:5d:66:e4:05:09:5a:01:8f:08:
52:a0:c9:69:09:18:70:a3:e6:80:e7:f7:e9:44:32:
2d:fd:a2:62:8d:98:6c:6e:ad:50:f8:b6:b0:42:b1:
a5:ba:4f:7d:7a:6e:6b:ac:89:00:d5:45:14:10:2b:
d9:a0:d0:ed:d0:89:d7:93:80:0e:41:95:cd:f1:e3:
fd:4a:a8:2b:cf:6f:54:df:18:47:43:48:62:48:de:
6a:1e:cf:17:6f:01:f4:1f:37:1f:f5:11:ba:27:31:
36:f9:32:a9:be:d4:fc:79:d9:34:92:a5:fb:cf:a3:
5b:91:d1:5f:2e:37:fd:9b:70:f0:06:bf:96:44:6d:
a5:13:b8:93:58:00:16:51:93:40:ca:cd:74:ab:6f:
09:2a:b4:1e:41:4e:3e:91:d5:9a:1f:5b:44:d6:8c:
9b:8f:c1:7b:16:e4:a6:93:68:93:fe:a7:a8:8f:f9:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:CD:2F:AC:E9:C1:83:82:8A:E5:80:2A:5A:1F:AA:C7:4E:52:B1
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:54:ec:42:4a:48:cd:7a:a6:ac:36:e0:42:b9:af:e1:12:
6b:e0:7a:38:0f:21:6c:53:15:56:99:b7:05:5f:9d:a3:38:26:
15:6f:b6:81:8f:30:25:e1:24:89:91:69:55:07:36:74:e2:ce:
4f:8c:25:10:a7:24:f1:c2:b0:76:73:31:9a:a7:a6:16:cb:c9:
87:cd:43:9d:be:62:ae:92:31:fd:3b:43:5c:99:d3:06:1c:7d:
36:aa:33:d7:33:af:34:05:e2:ed:e4:b1:bc:a3:b0:d6:f4:d3:
cd:0b:31:0a:50:f8:ba:a3:4c:4f:4b:80:3e:33:5a:fb:e6:82:
25:80:ff:43:4f:9d:d0:0b:82:ff:f3:0a:d2:88:fc:1f:3e:0f:
c8:24:ab:e2:4d:3a:8a:a8:a5:21:fc:50:76:e2:4f:d4:67:53:
06:b9:4f:43:06:6d:91:2f:b1:e2:e3:02:f9:07:18:96:34:05:
38:6c:f4:d3:1e:ec:3b:71:ea:03:73:7e:0e:fc:6f:db:37:82:
20:1c:3a:96:89:b0:50:f9:48:c2:44:d5:30:13:57:38:c1:34:
d8:22:36:e0:b8:65:13:bb:28:c8:be:1a:5c:1e:80:e2:19:2a:
35:21:c4:f2:d4:85:5a:bc:e9:7a:bb:be:65:e0:1d:35:91:86:
3d:8f:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:12 2025 by rpki-client