Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: 7bpmIlKwVzSHsj3AtZHIixYM/gZtpG6TReZZtCxkM70=
Subject key identifier: 83:7D:01:5E:A0:97:1F:91:00:FD:4E:9D:E2:C7:72:E1:DB:7B:2E:0B
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019881D504AD4138B56CA65DF8E3396292A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 00:01:17 +0000
Manifest this update: Thu 07 Aug 2025 00:01:17 +0000
Manifest next update: Fri 08 Aug 2025 00:01:17 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: en3njJYqoEaDGLUedKLpnl9m9QY+ImHL+EdumgKy9qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:04:ad:41:38:b5:6c:a6:5d:f8:e3:39:62:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Aug 7 00:01:17 2025 GMT
Not After : Aug 8 00:01:17 2025 GMT
Subject: CN=837d015ea0971f9100fd4e9de2c772e1db7b2e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:f5:01:09:97:be:0a:f8:d2:ef:07:66:67:
be:b5:57:ba:35:22:9f:a2:7b:c7:15:14:cf:3c:55:
14:ee:47:a5:31:c3:38:c0:91:04:ad:2a:16:92:bc:
6b:81:04:3a:37:a0:f2:9b:66:08:5d:6a:de:4d:f0:
96:e5:66:ef:0b:22:6e:fd:29:07:ac:e7:86:12:b7:
f6:e1:21:b0:ea:84:1b:52:a5:2c:e6:ed:7d:3e:ab:
c1:79:ac:d4:20:32:71:e0:07:89:d1:93:9f:90:29:
19:25:d9:a8:e6:de:4c:c2:f5:de:35:5c:f2:d8:3d:
b2:5d:be:1f:9e:e9:41:13:28:82:a5:f8:ff:53:53:
d9:46:75:a3:e9:d4:cf:81:29:24:c8:66:76:68:31:
35:e9:ca:aa:92:62:36:d0:9c:1e:fb:b9:84:33:de:
54:88:ba:74:e9:8a:89:ef:23:cc:cb:c5:f6:1f:58:
89:dd:d8:1b:1e:46:21:12:6c:fa:d6:22:5d:11:ec:
f1:62:a6:5e:d9:80:2e:68:54:2b:b0:4e:20:22:93:
1c:c4:99:32:2a:a2:bf:c1:37:50:64:b2:47:bf:ec:
78:05:dc:04:7d:91:de:ce:d4:f8:e0:35:13:fc:44:
98:96:0d:23:1b:82:55:f2:35:b0:26:8c:b6:a6:55:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:01:5E:A0:97:1F:91:00:FD:4E:9D:E2:C7:72:E1:DB:7B:2E:0B
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:1c:ff:9a:6a:40:3d:9a:9a:32:9a:ba:37:54:4c:71:f6:
e5:f4:4a:ea:93:d2:a3:1f:c8:2b:8e:cc:ae:bc:8b:2f:36:89:
5a:fa:7d:5c:31:59:48:19:d1:26:67:af:e3:dc:cc:ea:5d:25:
c3:92:ce:fa:b1:df:75:35:18:b0:6a:d9:56:0d:5e:d2:70:dc:
9f:4b:1a:0e:f5:a6:de:ab:51:11:71:83:c5:e5:97:e2:93:9d:
03:7f:60:44:3d:4f:d6:f3:b6:1d:30:18:46:90:6a:97:84:53:
af:2e:f2:33:77:63:0d:72:c2:c0:b4:83:15:fe:bd:2a:97:62:
b9:46:c5:22:d6:ca:12:6b:bc:68:49:15:5f:b6:64:95:c4:19:
d9:c4:06:1c:64:fd:65:16:d1:bf:ee:8e:5e:46:41:4c:9a:f7:
e3:6e:2f:99:87:16:0e:38:af:89:46:b6:e4:f9:c1:60:8c:ac:
36:83:10:62:ff:66:27:8c:4f:16:92:31:d9:0c:ea:fb:0f:c4:
ed:51:7e:8c:71:b4:27:d1:d0:79:96:94:ac:62:81:42:9d:52:
7e:66:26:cc:36:4a:9d:e4:dc:cc:f0:80:1d:03:0d:b8:43:4d:
3b:83:d2:89:c4:e7:87:b0:29:39:07:3b:6f:1e:ce:98:ed:cd:
81:83:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:22 2025 by rpki-client