Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: Zc4ORhWEF1gqfQWlEu3WMclXUKTMZQY0gfgNLNMgJWs=
Subject key identifier: 30:B0:B3:8F:27:1F:AD:F9:22:19:AA:DA:B1:D1:6C:6D:02:91:9D:18
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019872623210FC3D9189E8990AA035B8B655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0F0C
Signing time: Mon 04 Aug 2025 00:01:34 +0000
Manifest this update: Mon 04 Aug 2025 00:01:34 +0000
Manifest next update: Tue 05 Aug 2025 00:01:34 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: MYiFFvmld51p11XqtnHuxLj7QEQtklnZFE7MfxNomB0=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:32:10:fc:3d:91:89:e8:99:0a:a0:35:b8:b6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Aug 4 00:01:34 2025 GMT
Not After : Aug 5 00:01:34 2025 GMT
Subject: CN=30b0b38f271fadf92219aadab1d16c6d02919d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:2f:55:c9:0c:af:e0:80:91:48:a9:83:35:
3d:34:d2:ef:c3:e7:54:8a:40:db:e8:42:79:e7:18:
f2:ec:c9:da:9c:bf:80:21:2c:d6:06:8c:27:b8:aa:
77:18:db:39:e6:8c:4b:7b:9a:85:71:a5:de:59:cc:
a4:2a:89:2c:30:38:25:f6:a2:f3:bf:39:8e:ff:f9:
8c:29:55:c2:be:7b:b0:89:2d:a9:e9:e4:0e:a2:1e:
f1:f2:34:fd:f3:d4:67:cf:f7:f7:5a:f9:9a:0f:5e:
50:e0:ea:a7:a0:77:3b:b2:3d:6e:7d:a5:ab:50:a7:
ee:9d:d6:b4:2d:b0:f5:d7:ef:4e:d7:9f:22:31:e7:
0a:c5:42:a7:21:8b:fb:50:6f:f9:f2:8b:a5:c4:40:
87:f7:de:25:a0:73:01:7b:5a:33:82:cb:07:fd:0f:
ae:0f:fd:9a:95:a3:ba:54:17:45:35:f1:2a:fb:ac:
48:9f:7b:c8:e9:90:b4:a7:8b:5f:57:4d:d8:5b:b2:
2c:98:77:62:7c:86:58:2e:52:7f:06:bb:87:7b:d3:
27:c6:02:05:6f:f8:c0:39:12:b1:f5:73:87:33:db:
87:cf:3e:80:23:2c:9b:c7:a8:8d:70:62:de:ca:13:
5c:97:e9:6c:16:20:38:5d:91:27:59:0d:45:b4:0c:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:B3:8F:27:1F:AD:F9:22:19:AA:DA:B1:D1:6C:6D:02:91:9D:18
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:87:b8:b4:50:ab:60:80:9d:3c:9f:dd:5d:7b:9b:93:db:50:
f1:74:90:fc:c6:72:70:67:87:83:db:f6:e8:83:50:e7:0f:d4:
ce:4c:ca:54:2c:5c:4a:22:c2:81:91:c8:b7:be:f2:ba:71:a7:
33:1b:3e:59:9c:26:97:de:b2:1c:ba:a4:d1:f3:c5:75:a4:ae:
57:21:86:a8:f1:fa:6f:96:37:9f:10:eb:f2:d9:52:93:f7:5a:
71:86:f8:c9:97:96:0f:43:48:31:df:b5:31:b2:b7:30:af:ca:
3d:c6:80:b5:e4:fb:6e:17:c2:2b:3d:44:81:54:bc:c1:5d:56:
9b:69:dd:63:8b:43:9f:53:97:5f:fc:78:c6:11:c7:46:fb:cf:
6f:73:27:66:7d:7e:c8:d9:f2:b8:e8:24:c8:37:59:af:d9:34:
72:a3:02:bf:b9:e2:55:28:23:74:61:ac:93:7c:df:a7:dd:4a:
c8:bb:a8:39:2a:39:25:8e:cb:70:60:ad:32:12:ac:b8:52:48:
95:76:67:06:e5:a9:b8:09:a6:69:6b:cd:64:eb:03:43:b9:d2:
32:6e:80:21:ba:b2:92:53:47:39:7b:28:8d:e0:ab:0a:86:f3:
8a:fc:82:f7:be:d4:f4:fc:4d:42:3f:c8:4c:05:3d:65:e9:b4:
6d:7c:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:47 2025 by rpki-client