Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: QFvUYCgsTBZv/vnjQqiwlYQbwv3fB7XD/d4Y7Z7D/BQ=
Subject key identifier: 46:C4:68:EF:E6:A1:DF:D8:88:FA:94:6B:A4:AB:8A:EC:EF:71:71:BF
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0198530E6B878B728D0F8056D4CB8BE1CD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0BA9
Signing time: Mon 28 Jul 2025 22:01:50 +0000
Manifest this update: Mon 28 Jul 2025 22:01:50 +0000
Manifest next update: Tue 29 Jul 2025 22:01:50 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: rhkSGMBb8sXtty+MnwmKNid7PpoV0gs6uwfV9mbup70=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:6b:87:8b:72:8d:0f:80:56:d4:cb:8b:e1:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Jul 28 22:01:50 2025 GMT
Not After : Jul 29 22:01:50 2025 GMT
Subject: CN=46c468efe6a1dfd888fa946ba4ab8aecef7171bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:8b:97:c6:84:6d:67:44:12:da:61:a5:2a:
56:e6:59:0a:6c:9e:9e:8a:fb:ec:e5:e6:11:a9:97:
e1:50:13:77:44:82:6a:3b:d7:ab:e8:c6:d2:4a:b4:
6b:1a:05:4b:39:04:59:6a:28:67:7e:cb:ad:8d:a6:
46:eb:e0:f5:e9:db:fb:43:e7:b0:31:09:32:2e:01:
b7:72:94:96:3d:2a:f6:20:48:b8:7e:ff:ee:e0:66:
4b:f6:0c:d4:45:a8:79:c6:74:06:ce:b7:ff:13:46:
c0:cd:84:87:ab:71:d0:e0:4a:12:45:b4:eb:e5:6a:
9c:6a:1a:ee:c4:26:9d:f9:39:c5:5b:5b:2a:9a:4f:
00:3d:87:24:45:3a:db:ad:86:c5:18:e6:f6:f7:01:
6e:68:25:47:05:47:b5:db:e8:14:ed:be:60:7a:52:
2c:fc:eb:6a:72:9f:f5:b5:48:f2:b4:43:74:88:fb:
be:ab:01:95:54:b2:34:ce:3e:0d:91:e0:25:28:a6:
95:83:19:53:9d:b7:00:14:58:b9:7a:3e:cb:ed:56:
e0:e3:35:4b:47:e8:b3:97:88:62:1b:ad:c8:74:95:
6a:e5:0e:9b:4d:b5:01:14:68:b5:56:dc:16:e9:6c:
c0:35:05:d8:cc:03:a3:3a:ff:91:54:ad:54:e4:7b:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:68:EF:E6:A1:DF:D8:88:FA:94:6B:A4:AB:8A:EC:EF:71:71:BF
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:59:15:95:fb:00:fe:3e:a8:ab:f0:a8:52:0e:4d:2d:b2:
52:dd:5b:f9:eb:0f:f3:47:68:50:13:3e:12:c9:05:f5:91:30:
64:fa:78:5f:77:59:04:c8:9f:a3:de:93:e5:8a:cc:a7:f7:b0:
58:3b:ca:10:61:b4:22:82:cf:fb:04:90:dd:8d:56:68:b9:82:
00:cf:c9:8e:fc:27:d1:44:6c:79:56:33:48:73:93:d3:80:80:
33:48:84:70:13:25:f4:e4:0f:fd:92:38:c1:f6:00:ce:64:fc:
b5:2e:64:98:b0:51:55:9f:ca:6d:64:c0:3e:33:c2:99:04:76:
af:f0:10:ad:27:95:1f:a9:10:ce:90:6b:a8:7f:1b:da:f5:12:
2a:fc:61:18:26:1c:57:b3:1d:64:b0:74:33:a5:bb:4c:e4:43:
0b:c8:e3:fc:9f:9a:e9:d6:2d:de:9d:19:44:7c:a7:1c:fe:f3:
cb:0b:c5:0c:0f:58:8e:dd:87:20:94:42:0e:da:98:f6:1d:23:
2e:09:71:fe:69:68:5d:9b:cc:6b:7b:ec:4c:1e:bc:cd:01:f1:
d1:1e:d7:7c:91:09:55:d1:f1:bc:ae:4b:6f:79:da:9e:7e:74:
0a:f6:aa:da:1f:32:35:20:25:95:cd:b9:b9:03:db:da:4d:8c:
94:49:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:05 2025 by rpki-client