Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: EA1m/frhCZsAvUpbacZM5V2sbvz4uUATnCMN9wunppY=
Subject key identifier: BB:6E:6B:F6:7F:82:7B:A5:22:49:9C:6D:B2:C6:89:E1:4F:E0:EF:43
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019893A3F513A8E90BC44A460778CF9DC7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 11:00:52 +0000
Manifest this update: Sun 10 Aug 2025 11:00:52 +0000
Manifest next update: Mon 11 Aug 2025 11:00:52 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: yZkVw6tJywWiYU4C7HitjRR6e/+i68Rgv/D4tWrDNMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:f5:13:a8:e9:0b:c4:4a:46:07:78:cf:9d:c7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Aug 10 11:00:52 2025 GMT
Not After : Aug 11 11:00:52 2025 GMT
Subject: CN=bb6e6bf67f827ba522499c6db2c689e14fe0ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:98:c7:52:96:05:62:a0:5a:47:1d:7f:aa:
76:c0:c1:05:32:20:d9:b7:43:c8:e1:a2:2d:3b:cc:
27:5b:0a:7a:00:14:de:5e:c3:84:35:e3:30:9c:41:
a7:62:a3:22:87:4d:1b:68:c3:28:bf:30:e1:99:10:
c0:1f:c5:68:ca:f6:68:b8:ca:9c:19:86:95:f8:35:
f2:0f:06:8e:a6:16:49:64:7d:39:3d:ce:7e:28:39:
5c:b2:4f:8a:1e:32:34:a2:9e:17:d8:60:48:5d:98:
9b:38:09:87:82:19:f4:84:f8:f8:b5:e4:ad:58:40:
36:ba:53:a3:3c:3e:9d:11:e4:9f:af:bc:21:1d:04:
0e:3a:ff:3c:98:3e:95:97:ac:7b:ec:9e:da:f7:b1:
fc:f8:08:6a:e1:b0:4f:f8:85:87:1a:8e:42:22:cd:
dd:fe:2e:ec:b2:cf:6f:c7:3c:5c:61:f5:64:e0:6b:
f7:b7:60:b4:2b:e3:9b:db:15:6a:7b:27:54:9a:e9:
f5:16:75:ee:61:2e:89:c8:f9:91:9d:c8:13:db:19:
59:17:5f:9a:17:9a:11:ad:08:1c:f7:8b:bc:97:4e:
0f:2f:9a:85:b9:5f:68:5b:1a:20:2a:d7:95:4e:dd:
2b:70:99:5f:8d:e1:a1:82:da:bc:44:32:7e:46:d7:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:6B:F6:7F:82:7B:A5:22:49:9C:6D:B2:C6:89:E1:4F:E0:EF:43
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8c:9a:a2:39:76:44:fd:56:b9:84:0c:a0:a2:7a:0f:90:5c:
0f:b4:97:30:dd:6a:3f:30:40:2f:13:95:6e:70:13:e0:b0:3a:
c9:37:32:ad:b0:3d:15:9b:b4:29:cf:11:91:c9:63:4b:84:c3:
a5:bc:3f:84:1d:a0:1e:1d:bb:24:86:d6:b7:35:70:53:ac:d9:
d8:60:aa:2e:7c:49:cc:01:26:d4:ff:df:05:4c:5f:7b:d7:9a:
e6:be:cc:b0:48:8c:69:04:77:31:b5:f6:7c:57:b8:9d:37:bf:
d1:1a:ad:b2:2a:96:22:f5:50:06:df:c8:e6:4b:6e:b7:a0:3a:
3f:80:a0:89:16:87:d5:15:e5:c7:17:b6:af:66:77:bf:6f:c9:
7d:ce:71:70:a5:4f:d3:1c:f6:0d:89:fb:da:7f:89:aa:0f:85:
a2:85:47:a4:cd:16:63:2c:29:31:04:87:0d:63:67:bb:e1:e0:
d8:da:34:29:a5:26:44:6a:a3:94:ae:98:cf:fa:67:b3:bc:24:
48:b3:d8:22:c0:05:ba:49:4e:70:39:88:46:a6:41:96:26:3a:
37:af:47:9d:31:65:da:82:ae:f8:28:7e:95:d8:60:33:ed:84:
cd:b8:a7:df:2d:3a:f4:c5:5f:98:91:12:e4:6e:aa:b6:d4:94:
07:28:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:15:51 2025 by rpki-client