
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File: eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier: c7OG4kllFolozLkMaBYV97RdslemdzTCp71OG7KsdVg=
Subject key identifier: 55:3B:F6:0C:9C:82:54:8F:94:B6:F8:97:19:D3:BB:E7:5C:82:E9:8E
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer: /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial: 019891B5C2DD080BF81929D3AF49EF8ED43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 02:01:04 +0000
Manifest this update: Sun 10 Aug 2025 02:01:04 +0000
Manifest next update: Mon 11 Aug 2025 02:01:04 +0000
Files and hashes: 1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: z+sFR2vOCsK45eR7rmZIT5xQhPPMfu7KY3Zg+hy/0SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:c2:dd:08:0b:f8:19:29:d3:af:49:ef:8e:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Validity
Not Before: Aug 10 02:01:04 2025 GMT
Not After : Aug 11 02:01:04 2025 GMT
Subject: CN=553bf60c9c82548f94b6f89719d3bbe75c82e98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:02:42:9f:cd:02:f7:37:33:21:18:f6:39:b7:
15:37:2c:a5:89:0c:50:44:6e:71:ba:f3:5b:1f:27:
57:ba:62:fd:b0:d2:90:2a:0b:f6:00:fb:17:51:2b:
72:ed:b4:11:55:b4:f7:eb:35:25:b7:90:1c:b1:0a:
ce:a5:91:29:d8:e8:4e:e2:0d:e7:b7:31:e3:cf:67:
39:9f:de:2c:8a:ca:d6:f5:58:78:7f:15:e3:0d:f7:
ff:7d:3b:93:a3:69:79:82:9b:33:6a:54:fd:f2:1a:
a7:35:e6:d9:da:a2:8f:6a:0a:8d:32:fa:b9:35:b1:
5c:f1:ad:6d:f9:a7:21:a0:44:86:a1:09:f7:fd:94:
db:c9:5a:bc:96:fc:81:d0:e8:59:da:53:22:a3:7e:
29:97:9c:95:d1:39:7c:28:ae:7e:c4:6f:7e:43:20:
db:8f:2d:f6:d8:f0:09:56:c6:ed:8d:1f:3b:a2:e5:
a1:7e:39:ac:f3:79:bb:40:15:ba:d4:03:a2:53:d7:
62:39:05:aa:e5:15:32:48:e7:19:87:5e:5d:1d:07:
2e:78:c5:80:5e:0f:44:41:c8:8d:0b:dc:8d:7e:61:
e8:80:1b:c9:f8:a3:78:51:82:c7:21:f9:f1:0c:12:
08:a5:da:3c:c7:c7:ca:b4:46:ac:86:ac:de:73:20:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:F6:0C:9C:82:54:8F:94:B6:F8:97:19:D3:BB:E7:5C:82:E9:8E
X509v3 Authority Key Identifier:
keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c3:81:c0:a9:7b:38:26:19:23:8e:8d:ea:c4:de:80:ef:e6:
bf:6e:72:b5:e1:ea:6b:49:fa:dc:7a:bf:21:e9:39:47:2c:cb:
69:fa:46:3c:86:3a:3a:c5:25:f4:33:bb:d9:22:28:79:ea:91:
f3:b4:75:b4:c3:4d:da:f2:89:fd:ef:c7:79:a9:36:e8:b7:c2:
04:6c:81:fd:d2:19:6f:87:45:ca:84:24:ed:62:d6:07:2b:df:
70:05:fb:44:49:e6:5e:ab:fb:f4:90:fc:f5:da:09:da:2b:22:
3c:bd:85:1d:df:f3:f9:12:b6:e7:a8:38:a6:53:b3:e2:ba:03:
f2:6d:0b:29:ba:72:f1:93:0d:84:c2:85:22:3e:af:32:d9:8f:
f5:02:e6:a2:da:e1:a1:c5:cc:36:23:0e:26:08:76:37:25:ad:
a0:5b:2f:f4:e3:9e:e4:22:b3:b7:ad:ee:2e:09:ac:78:66:3d:
24:5c:38:9d:39:f2:a4:55:e1:24:91:29:06:1f:b9:04:35:90:
89:cb:7d:05:aa:f2:0c:4f:36:42:8d:77:e0:52:64:32:30:c8:
4c:44:bb:d9:19:4d:ee:63:18:01:87:12:8f:95:39:d7:cd:db:
d8:a4:7f:17:4e:82:5b:a0:2d:cd:46:1f:3a:57:4d:d3:6c:40:
fa:8e:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:22 2025 by rpki-client