Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: JAYvFKk5ve+5bZHQO82mjbHfw1VXkjnKZZvP/I3riWg=
Subject key identifier: A1:46:B8:10:8F:10:7A:8E:92:EE:82:ED:55:89:CC:51:25:E3:33:E6
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019880545ECBB7D5FDDF4BB4FE97C5AB124E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0BF9
Signing time: Wed 06 Aug 2025 17:01:09 +0000
Manifest this update: Wed 06 Aug 2025 17:01:09 +0000
Manifest next update: Thu 07 Aug 2025 17:01:09 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: hlJGiVjQwxKNzb/JPU4r6vrPj+2ZLNkumPr8PYywuUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:5e:cb:b7:d5:fd:df:4b:b4:fe:97:c5:ab:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Aug 6 17:01:09 2025 GMT
Not After : Aug 7 17:01:09 2025 GMT
Subject: CN=a146b8108f107a8e92ee82ed5589cc5125e333e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:f2:dd:54:82:5a:9f:f8:c7:93:8f:fd:bc:
9e:04:6d:2a:5a:66:ff:d5:a3:63:f0:80:e8:09:62:
b9:16:73:b4:8a:8d:1f:a2:b6:41:aa:23:f1:18:d4:
28:a1:50:5b:6e:f7:00:36:c7:c4:ad:7a:2e:8e:66:
41:89:6d:1a:b9:12:d3:f9:35:7d:04:57:0b:30:64:
25:39:32:84:d4:08:53:f1:04:34:03:0b:c6:40:d6:
0c:03:53:73:d8:14:db:75:d0:a9:bc:e2:74:fd:4a:
73:39:2a:d5:5c:8f:9b:cf:a7:12:6f:ff:2b:4c:32:
7a:be:c7:48:76:94:d2:cb:01:b2:95:1b:ed:07:83:
a0:67:96:53:64:dd:29:d0:cf:d1:90:13:c8:3b:7e:
e5:5b:ef:31:85:7f:81:2e:8b:51:4c:73:9b:c9:43:
40:06:96:7a:82:76:25:b2:dd:fc:30:d5:21:98:a2:
1a:e2:e6:cf:1c:ff:bf:91:c0:bd:c6:b1:8a:c2:47:
f8:f2:fb:36:e5:16:18:81:35:64:ae:df:f1:51:f7:
9d:c5:af:5c:83:7a:ca:89:86:61:23:82:91:ab:e2:
0d:c0:8b:09:b9:f3:35:90:8e:03:4c:d7:84:00:cc:
d5:2e:97:c8:31:f1:57:0f:d2:a8:70:36:8c:c7:69:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:46:B8:10:8F:10:7A:8E:92:EE:82:ED:55:89:CC:51:25:E3:33:E6
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:94:8c:f0:49:cb:27:49:e2:c1:73:53:5b:d8:60:13:1c:eb:
f5:48:78:01:d1:96:73:51:e9:1e:4c:fb:9e:75:32:f2:4c:b0:
6c:58:dd:e0:0f:80:46:8d:88:3e:57:d5:14:b4:ec:63:fc:e0:
a7:a2:c6:0c:6f:a5:43:60:01:a3:d3:65:78:ae:44:6d:e6:da:
e5:44:73:ae:e8:e0:28:c6:d0:81:e3:88:27:79:63:9c:cd:52:
62:92:3f:e5:65:c7:29:43:c4:6d:a4:ae:95:1a:f1:92:8d:e8:
56:69:09:4f:a5:11:a7:d4:25:6b:95:c8:fd:3a:bd:c3:b3:3b:
eb:0f:b4:1c:31:ae:72:e9:ab:f4:40:cc:21:78:9c:e5:54:68:
52:75:5c:d0:e9:6f:ff:46:df:88:93:03:bb:35:5e:04:11:ae:
94:76:de:d1:87:ed:e1:8a:a5:ba:79:80:e9:86:1e:94:eb:73:
60:b5:34:5f:d6:f4:80:da:dc:f4:a3:c5:bc:ab:f7:a8:f9:f8:
6f:8f:59:d3:95:68:0b:1c:ba:9f:c7:12:7a:bc:5f:fc:cd:fc:
f1:4d:27:bb:a6:d4:28:ce:87:c0:c5:3f:da:4e:83:ba:34:5e:
18:5d:01:6e:1d:cc:6b:45:d6:19:71:03:d4:c0:64:55:ee:22:
cc:eb:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:48 2025 by rpki-client