Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier: +f5CISd0cEcHSvEIyEkfTlJgSWtff0KHDtk8DXEuJ0M=
Subject key identifier: 62:42:07:8D:03:3C:68:14:13:80:B5:C3:B5:88:42:AC:AC:04:35:BE
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 01987E2F45E866AB1F8C5859B63F0F7CB11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number: 080A
Signing time: Wed 06 Aug 2025 07:01:23 +0000
Manifest this update: Wed 06 Aug 2025 07:01:23 +0000
Manifest next update: Thu 07 Aug 2025 07:01:23 +0000
Files and hashes: 1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: P/bUIZASSpvpDqOvw1gSbEOEvGcKZYmt31tmWOszOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:45:e8:66:ab:1f:8c:58:59:b6:3f:0f:7c:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Aug 6 07:01:23 2025 GMT
Not After : Aug 7 07:01:23 2025 GMT
Subject: CN=6242078d033c68141380b5c3b58842acac0435be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:f6:18:ea:49:44:71:89:44:e7:fb:38:b6:
b7:f9:f8:78:bf:d5:00:e9:3a:3a:67:44:39:c5:14:
3e:d5:9d:1f:80:82:b5:56:89:9a:7e:71:60:04:4f:
89:fe:e8:2f:95:dd:df:4a:e1:93:04:06:68:b5:50:
df:85:59:cf:28:41:3c:e8:38:ef:45:ee:f1:e1:a5:
60:79:2a:1f:73:89:ee:8b:8c:32:8d:32:2c:0b:e1:
34:61:66:1c:6f:d4:a3:af:d7:83:8c:c6:73:68:d9:
64:59:52:17:60:9c:93:5e:1c:03:0d:18:d5:24:78:
a9:77:05:6b:96:46:3e:f7:6f:54:4a:c0:69:90:72:
93:61:73:86:5e:d3:d8:5c:0c:c8:dd:b9:fe:b3:cf:
7b:90:7c:f3:01:ef:29:0b:55:15:8c:9f:56:d6:9f:
88:c2:59:a2:e1:95:9c:06:50:41:89:a7:ee:e1:1f:
d5:15:ef:ce:9c:6a:35:88:e6:e5:01:68:df:06:6f:
7d:7f:6a:85:03:4d:bb:07:d7:ee:37:05:ae:61:1f:
d0:51:0f:75:74:27:9e:a4:4f:a9:3f:d2:86:e6:8e:
23:81:7d:52:d6:6e:fd:60:7d:6c:4d:8b:f5:ca:75:
be:18:e1:d8:65:89:f2:1b:3d:c4:07:41:70:50:b2:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:07:8D:03:3C:68:14:13:80:B5:C3:B5:88:42:AC:AC:04:35:BE
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a3:28:35:37:60:e7:48:b9:65:c4:17:eb:7b:da:d3:18:6a:
f8:64:77:03:98:45:87:cc:03:10:6b:71:fc:22:3c:7f:ed:06:
04:33:3b:49:7a:78:b8:ac:1b:1f:5f:03:4c:ad:3a:9c:0d:40:
32:6d:8f:9b:df:48:cc:06:29:64:93:94:1a:62:e6:60:ef:21:
7e:f2:e5:e3:35:71:ed:d4:b1:6b:f1:90:67:4a:7e:3f:9d:30:
29:c1:16:10:13:cb:0b:c9:ac:45:56:25:0d:a9:de:95:8f:ca:
82:0e:49:67:a0:10:bb:11:e9:99:c2:45:93:76:2d:22:d9:5e:
00:20:09:d8:d1:8c:a3:c2:83:a2:43:15:38:f3:62:33:a4:4b:
f7:11:e2:0d:26:a8:bf:3e:b6:41:0f:d6:f5:48:b7:df:f3:6a:
80:38:96:3d:ec:a2:fa:fb:07:11:f1:aa:6c:07:07:fc:1b:b1:
45:be:25:ba:90:90:39:15:3e:6e:d6:53:65:52:94:78:0c:03:
d9:a8:1c:c7:60:5f:20:49:3c:bd:0c:2f:f9:14:04:41:8f:d7:
e9:fb:2b:3e:ec:35:57:e6:77:49:1d:37:65:ad:5b:c8:11:16:
4a:a2:2d:85:db:1a:16:53:f8:7a:79:59:17:40:f0:87:00:3b:
c4:4f:8d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+L0XoZqsfjFhZtj8PfLEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1
ZmM4YzMwHhcNMjUwODA2MDcwMTIzWhcNMjUwODA3MDcwMTIzWjAzMTEwLwYDVQQD
Eyg2MjQyMDc4ZDAzM2M2ODE0MTM4MGI1YzNiNTg4NDJhY2FjMDQzNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQj2GOpJRHGJROf7OLa3+fh4v9UA
6To6Z0Q5xRQ+1Z0fgIK1VomafnFgBE+J/ugvld3fSuGTBAZotVDfhVnPKEE86Djv
Re7x4aVgeSofc4nui4wyjTIsC+E0YWYcb9Sjr9eDjMZzaNlkWVIXYJyTXhwDDRjV
JHipdwVrlkY+929USsBpkHKTYXOGXtPYXAzI3bn+s897kHzzAe8pC1UVjJ9W1p+I
wlmi4ZWcBlBBiafu4R/VFe/OnGo1iOblAWjfBm99f2qFA027B9fuNwWuYR/QUQ91
dCeepE+pP9KG5o4jgX1S1m79YH1sTYv1ynW+GOHYZYnyGz3EB0FwULIePQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJCB40DPGgUE4C1w7WIQqysBDW+MB8GA1UdIwQY
MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt
Yzg2YzJmYzZjNjFiLzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi
LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKMoNTdg
50i5ZcQX63va0xhq+GR3A5hFh8wDEGtx/CI8f+0GBDM7SXp4uKwbH18DTK06nA1A
Mm2Pm99IzAYpZJOUGmLmYO8hfvLl4zVx7dSxa/GQZ0p+P50wKcEWEBPLC8msRVYl
DanelY/Kgg5JZ6AQuxHpmcJFk3YtItleACAJ2NGMo8KDokMVOPNiM6RL9xHiDSao
vz62QQ/W9Ui33/NqgDiWPeyi+vsHEfGqbAcH/BuxRb4lupCQORU+btZTZVKUeAwD
2agcx2BfIEk8vQwv+RQEQY/X6fsrPuw1V+Z3SR03Za1byBEWSqIthdsaFlP4enlZ
F0DwhwA7xE+NEQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:12 2025 by rpki-client