Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: D4NOeC5v1Lpywmk5NfrRf+9RABM9402wyQMMcQEs73A=
Subject key identifier: ED:AE:5F:69:2E:28:C5:33:23:52:D8:67:E8:98:A1:88:91:E1:1D:A6
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 019873E412E75C1885EBBB1F82A0F5E253C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 042B
Signing time: Mon 04 Aug 2025 07:03:03 +0000
Manifest this update: Mon 04 Aug 2025 07:03:03 +0000
Manifest next update: Tue 05 Aug 2025 07:03:03 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: j7ifao+u93L/yloOp7BhGiWhwePae0poDbnYUUl0e7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:12:e7:5c:18:85:eb:bb:1f:82:a0:f5:e2:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Aug 4 07:03:03 2025 GMT
Not After : Aug 5 07:03:03 2025 GMT
Subject: CN=edae5f692e28c5332352d867e898a18891e11da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:9e:63:ec:5d:31:20:08:30:68:a2:e5:c3:
a4:7c:85:00:02:c3:5b:03:85:fb:59:24:b7:3c:67:
00:98:a5:ce:7f:7a:46:73:be:c1:37:10:f9:fd:77:
b5:46:e8:6b:9a:01:37:10:50:cf:6d:8c:62:bb:b8:
69:4f:86:e6:54:3d:56:51:ac:29:66:ae:24:bf:c5:
96:fb:82:62:8c:53:f9:90:a3:54:a1:db:b0:1a:e4:
eb:3c:cc:f0:06:a0:ee:1e:7a:ad:53:ab:3b:03:4f:
7b:ae:23:fb:c6:a4:cd:6f:50:35:b6:14:31:df:13:
64:26:44:5f:1e:b4:41:e6:6f:16:71:a3:9a:06:d3:
f3:14:19:c0:84:60:f5:7f:f4:fb:70:12:ae:a7:4f:
5d:cd:13:a3:46:16:c0:2d:bb:48:fe:0d:fb:fe:c1:
5c:b6:1f:87:03:cf:be:9b:58:2a:b5:e3:d7:11:ba:
bc:ab:d5:a3:0b:91:b2:0f:92:39:f4:cd:01:b3:1a:
de:3d:c9:02:69:c2:6a:5a:80:0f:6c:83:04:74:c2:
f3:f6:d9:cc:a7:58:b8:90:dd:5b:0f:01:d2:94:e1:
57:49:ad:fe:43:a1:63:04:16:6a:3d:b5:7a:84:b7:
71:09:52:0f:f4:4e:55:fc:95:93:73:41:1e:af:c8:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:5F:69:2E:28:C5:33:23:52:D8:67:E8:98:A1:88:91:E1:1D:A6
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:fd:b0:87:28:08:b9:ba:a6:e6:72:46:8d:e1:0e:e3:8e:
47:fd:f8:b0:65:d1:72:5f:1f:2d:5c:54:ae:c6:4f:dd:77:fa:
09:b4:79:a8:6d:f9:4f:6d:48:33:77:bd:e7:62:3b:bd:94:2f:
8f:65:9d:53:77:bb:68:1f:45:66:f6:98:71:58:5e:61:af:59:
5e:3b:fa:fe:0a:c8:6d:1a:ea:d5:eb:e3:bb:0b:f1:71:7f:cf:
9a:b2:53:94:4d:6f:f7:d5:3f:16:0d:07:b2:8f:6a:d0:af:d6:
10:42:f0:01:c9:1f:0a:7a:d8:4f:f6:7f:00:90:56:1e:32:cd:
5b:e8:2d:99:c5:06:8e:3e:3d:4a:bf:ae:34:03:4b:fa:84:f5:
a1:84:77:91:32:20:c8:a1:49:44:a7:74:36:b8:9e:c8:10:66:
95:2d:0f:4a:4b:8f:f6:15:4e:19:41:3b:08:71:9f:ad:ed:3d:
a6:c9:02:2d:47:bf:7d:5f:bc:b0:ee:60:6a:56:41:59:a8:41:
52:be:3e:78:0c:ba:36:80:82:ae:a6:ce:26:6d:e1:b7:5c:18:
b1:2e:bb:a7:24:cf:2f:6a:9a:0e:2f:a4:34:fd:5d:a0:cb:33:
67:9d:ac:a5:60:77:45:02:15:6a:f7:56:97:80:98:92:eb:66:
d6:94:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:39 2025 by rpki-client