Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: OM9kiucc6GQIk5A6LLP4i4XFd66AlwWFJ3+OolYpBs8=
Subject key identifier: 20:F8:90:4D:82:07:2F:F1:57:BF:9B:59:DD:9E:21:C3:62:66:C1:4B
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 019891ECB46932C1794CF672BC760D7F3616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 03:01:05 +0000
Manifest this update: Sun 10 Aug 2025 03:01:05 +0000
Manifest next update: Mon 11 Aug 2025 03:01:05 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: mwk6LkC48I0UJCBD1K3rFjbEbI1ZfZ1h7E+R2VL1qi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:b4:69:32:c1:79:4c:f6:72:bc:76:0d:7f:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Aug 10 03:01:05 2025 GMT
Not After : Aug 11 03:01:05 2025 GMT
Subject: CN=20f8904d82072ff157bf9b59dd9e21c36266c14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:a2:48:2d:5b:04:76:b7:03:a4:39:1c:15:
77:19:88:dc:3d:23:79:51:6e:26:88:ae:1b:13:34:
15:8d:cf:d3:ca:70:78:2e:7a:9d:31:db:b6:65:ae:
73:09:a2:d7:4a:ab:20:33:fe:d3:8e:47:f3:7e:5a:
54:7e:73:b2:08:6c:94:01:ee:be:12:46:4c:83:a0:
fb:34:76:03:98:ee:25:90:d2:f5:81:70:f4:e5:52:
70:69:3f:84:53:46:8d:03:f0:d3:d5:e0:b7:f9:26:
25:ad:7c:7a:24:85:ed:b5:bc:81:f8:cf:7d:44:32:
a5:f2:00:f6:22:71:a3:eb:c5:d5:2a:44:c9:11:f2:
e8:89:cf:00:f0:5a:13:1d:e0:05:84:3e:a4:01:3b:
76:60:a7:c6:71:4d:c7:73:09:59:4c:3d:0e:26:56:
dc:b9:2e:6b:ee:0d:1b:e6:61:21:13:32:0f:c5:be:
8c:95:f2:0c:2c:73:a1:ea:b9:c9:9d:8d:a6:22:f6:
dd:99:90:f2:3f:93:a8:3f:e2:2a:82:6d:e8:0a:1a:
d4:69:cc:bb:5c:b3:b3:0d:c5:13:f2:c3:50:cc:6f:
ce:13:4b:06:15:b4:d6:b3:a9:70:5e:cf:7e:60:c7:
03:22:75:f2:8a:55:bf:7a:b2:d3:3d:cd:0a:72:97:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:90:4D:82:07:2F:F1:57:BF:9B:59:DD:9E:21:C3:62:66:C1:4B
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:73:5d:27:1d:98:8f:7c:8e:15:25:84:33:d9:ba:9d:f2:28:
32:16:35:7d:b7:ef:42:86:4e:8f:42:12:12:4f:5e:b1:f1:20:
07:8a:c8:a7:53:5b:7c:c4:de:09:42:9b:6f:98:33:10:dd:c6:
24:93:51:5e:e8:24:1e:f6:e9:be:6b:95:c9:6e:e6:c9:37:0b:
0e:75:a6:18:25:c9:06:d2:7f:34:f5:4c:b0:05:da:8f:42:3a:
1b:be:c8:4c:40:3a:c2:53:f0:98:e9:ff:ee:1a:69:d7:a3:f4:
6f:e1:df:47:22:df:a3:73:b5:b1:15:04:2f:45:ba:08:ed:dc:
69:77:c9:91:8f:f1:8f:2f:92:bb:b5:b6:8e:e6:7c:01:ca:9d:
a6:22:65:20:8d:b4:f9:50:33:b3:d5:43:c8:18:6e:a5:a3:66:
57:6e:c7:4f:ee:ea:20:9d:1d:ee:ff:bb:f0:9e:ed:da:76:06:
94:0d:2d:4f:0c:3d:bc:45:c6:38:84:b7:fb:c9:05:d3:27:4d:
1f:53:a6:55:20:94:39:b5:b1:03:b0:db:2c:29:dc:08:a6:38:
5b:0f:da:ca:ec:8b:b4:ef:70:eb:33:d6:28:d7:b9:f5:86:58:
79:9c:40:70:77:dc:60:81:b1:75:c7:4b:da:1d:18:73:1f:22:
6b:b2:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:45 2025 by rpki-client