Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File: eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier: Y615KPmZXc5M97fb4CvbD2vqWBGjZhxTu31eQSWL/3c=
Subject key identifier: 32:74:68:03:7D:41:CD:1D:48:DA:20:3B:A0:C2:A6:77:13:CB:06:2C
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial: 01989E950E1789A9B3806B24D19F4BADDA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 14:00:25 +0000
Manifest this update: Tue 12 Aug 2025 14:00:25 +0000
Manifest next update: Wed 13 Aug 2025 14:00:25 +0000
Files and hashes: 1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=)
2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: LT3wamLGOl7tsJID8kxiT+LmBRCXF4hqi4e4XlZ1ZPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:0e:17:89:a9:b3:80:6b:24:d1:9f:4b:ad:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
Validity
Not Before: Aug 12 14:00:25 2025 GMT
Not After : Aug 13 14:00:25 2025 GMT
Subject: CN=327468037d41cd1d48da203ba0c2a67713cb062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:6d:e8:e2:82:b2:2e:42:40:01:68:bd:9a:
b4:46:93:e1:0b:34:e8:54:4f:26:c0:90:ca:fd:14:
e8:cb:83:ad:0e:cf:8d:d3:c8:92:50:a8:32:a0:da:
87:a3:9a:29:ce:eb:b3:33:b2:cf:76:9b:dd:c0:35:
2c:45:e5:50:74:20:85:6f:c7:df:af:f1:57:c5:a6:
5b:78:33:c9:96:ed:78:a0:a3:ed:04:d6:12:d2:1b:
67:94:c2:07:89:cf:41:0f:9d:88:4c:67:09:da:a7:
c9:fe:c2:e3:ab:1e:8d:20:62:b6:fb:eb:4e:49:0e:
dd:3f:d4:c8:a8:e7:f9:d2:d6:f0:66:69:06:fc:62:
94:8f:af:ee:8c:f5:c0:40:59:29:90:e3:8e:b3:92:
ea:75:32:90:bf:fb:80:16:26:7b:e0:7c:24:6d:7a:
dc:04:91:32:0e:15:e7:72:fc:93:46:c6:db:9c:49:
d0:12:6e:66:e0:a8:76:43:ea:50:9d:86:6b:bb:52:
6d:e4:d9:31:d1:a2:25:30:0f:43:5c:e5:b0:76:e5:
a0:ee:74:10:db:9e:9f:be:1a:5f:96:de:84:34:dc:
de:a0:db:25:1d:e9:02:ae:48:46:5f:c2:d2:d2:1f:
eb:be:f0:38:0f:ca:2c:26:6a:db:b9:13:4d:20:b0:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:68:03:7D:41:CD:1D:48:DA:20:3B:A0:C2:A6:77:13:CB:06:2C
X509v3 Authority Key Identifier:
keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:36:17:1d:c2:23:4e:f2:77:d4:0f:19:19:a4:89:a2:a1:c6:
3b:21:c1:14:04:22:55:e3:13:89:ae:81:46:24:9f:98:84:16:
1f:eb:e7:9c:1e:b4:69:9a:d3:7d:8d:17:a9:6b:48:19:c8:70:
6c:ca:ce:2d:5f:a6:a5:1a:99:05:29:8e:9e:af:47:a9:67:40:
2c:52:7b:3d:99:86:a8:d5:4b:9d:bb:41:71:5f:08:6f:1e:3e:
ed:43:50:43:6c:cd:c6:92:03:b2:c0:d7:1b:58:23:e3:17:be:
8f:e7:fa:c5:96:b5:9f:b0:08:41:cf:c6:9f:ac:82:94:e5:a6:
9c:a3:38:00:3e:30:87:b7:71:dd:ff:74:e1:a8:0e:43:af:35:
44:6e:36:e1:4d:f2:71:0a:51:61:9a:b7:b1:3e:a3:10:2c:50:
c7:94:e6:43:2d:3a:8c:09:06:69:1d:3c:95:ba:44:61:0a:6d:
50:8d:89:b0:ca:73:0a:32:c1:8d:2c:ad:23:eb:c9:32:cb:d3:
cb:18:00:19:63:af:68:bc:3f:3e:e7:ce:e6:c8:b6:4b:8f:44:
12:2c:1d:92:3b:da:c5:ef:65:77:3c:46:ff:73:c3:0e:96:af:
db:d4:d3:54:cc:46:23:f5:02:35:cd:17:dd:3b:57:1a:57:91:
ab:bf:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:56 2025 by rpki-client