Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: N/SyGOsyvpQRSWFui0f9cTnGYwdlcuyYFzkXfGqlRQU=
Subject key identifier: CB:B4:A6:68:F6:FD:35:9C:85:2A:97:0F:9B:00:4F:1E:93:DF:F4:F2
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 01987AC00462F19BC865B8F691B7B44805D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 1621
Signing time: Tue 05 Aug 2025 15:01:00 +0000
Manifest this update: Tue 05 Aug 2025 15:01:00 +0000
Manifest next update: Wed 06 Aug 2025 15:01:00 +0000
Files and hashes: 1: 16vis8mKCMw0Lqb7iG4NH7TCbeU.roa (hash: 7jQbnk7QOCJ8ZAWzucJtV6/4pdB8lxfRJErUH5wxQnk=)
2: WmLDow5KPtPm7R4XsODNb3nK6Og.roa (hash: 4GYJeuCBXCBDgFT4ZnecJgi27g3BGxeNgDA7fyyOWHA=)
3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: ftNSby2fY9bfjRVz+RBwHhTr7RPNJ8c06UvtEEH36Xo=)
4: sKFV1IZJE6PHOD4OWD9PuwV-r0c.roa (hash: FEZExqLNwEb0ZHJP/qaT8YTmmptHTZovCZeuHCrrdBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:04:62:f1:9b:c8:65:b8:f6:91:b7:b4:48:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Aug 5 15:01:00 2025 GMT
Not After : Aug 6 15:01:00 2025 GMT
Subject: CN=cbb4a668f6fd359c852a970f9b004f1e93dff4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:73:65:53:45:7a:74:15:a9:21:6b:34:73:
c8:28:c4:1a:70:69:2f:4b:7d:3f:35:e9:91:ae:e9:
be:80:4d:b0:85:9c:bd:79:2d:14:51:96:30:31:3c:
d4:59:0e:1e:55:ee:f0:ef:9b:2d:25:18:f8:90:5e:
40:b0:51:49:80:84:d4:f0:df:9e:29:f9:75:89:7c:
1d:b1:36:6b:38:28:f3:ad:cd:29:06:d8:13:1d:98:
49:4e:2e:03:54:be:df:f9:be:0b:e6:e7:e0:e5:3e:
fa:c2:84:cc:e7:45:48:24:c1:22:3b:40:1d:38:c5:
0f:80:ab:9a:d9:03:71:eb:56:11:55:4a:7b:4d:5f:
08:67:e3:48:85:08:f2:4b:c5:bf:2d:8c:d5:96:16:
8d:02:b8:3e:8c:7b:74:82:1d:9a:61:8f:82:b8:3d:
60:db:e6:16:14:c1:9a:a9:18:be:8a:15:ba:89:7a:
c3:34:63:4a:0c:a8:ff:00:91:66:27:eb:d3:af:db:
fc:46:f9:27:db:fb:aa:4a:8f:c8:c6:11:25:c4:f2:
aa:93:69:af:69:9c:21:67:90:48:fd:c0:79:70:47:
73:eb:ae:9d:07:25:e1:94:7d:30:0a:67:26:92:e7:
da:bd:1a:89:82:fd:6f:f4:20:41:ab:21:a9:bf:d3:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:A6:68:F6:FD:35:9C:85:2A:97:0F:9B:00:4F:1E:93:DF:F4:F2
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:91:e9:2a:eb:79:42:ef:c1:c3:2a:10:30:04:ab:73:ae:d1:
b1:0b:ee:a1:c3:9a:bf:30:83:b5:92:53:30:c6:89:27:1a:8a:
19:c0:8d:69:6a:84:0c:4f:75:72:55:aa:6b:9b:52:97:08:46:
26:10:67:9d:5c:12:d8:2c:89:2e:5d:67:f9:31:f4:3d:0e:d6:
37:42:43:4c:d0:92:96:15:44:0c:72:06:93:8c:ae:e0:a6:82:
f7:b8:0e:ec:c4:14:fa:ff:42:99:65:1e:20:af:55:51:bb:ab:
56:2d:0b:ce:6e:6c:8a:40:24:48:89:80:94:4f:da:72:98:fd:
0a:26:c8:01:cb:ad:b7:e3:03:96:58:78:5b:0d:30:04:b5:db:
9f:08:87:a2:7e:75:b1:8b:5c:c2:22:f3:a7:11:35:7f:ff:72:
db:08:16:bd:69:80:0b:3d:4f:1a:74:98:95:0e:9a:8b:22:af:
f3:ed:be:06:5a:7b:0c:f7:b6:ec:9e:b5:04:2b:b2:fc:85:23:
de:cf:63:52:2e:3b:0a:ef:bc:77:f8:2e:67:17:2b:dd:33:6f:
4c:eb:fa:ea:7d:bb:bc:15:bb:20:06:40:a6:7b:ae:aa:42:ce:
b1:0d:1b:e1:f1:e6:24:62:55:24:22:c2:e9:e9:f7:30:a0:5f:
c2:c1:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:17 2025 by rpki-client