Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: pMz/U+92RZUXbDvYmEvfCfNHXaIN5DizX7++1AHwcSk=
Subject key identifier: FD:29:F0:46:1D:05:7C:D4:D8:03:99:92:08:65:26:A1:21:D3:16:A7
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019848529CCDF0C72B6EF324698F790229FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 0FC8
Signing time: Sat 26 Jul 2025 20:00:30 +0000
Manifest this update: Sat 26 Jul 2025 20:00:30 +0000
Manifest next update: Sun 27 Jul 2025 20:00:30 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: PN1kOrpUVTYZ6xhXPrqYZZiOqRlg45abfSwJZ6BboEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:9c:cd:f0:c7:2b:6e:f3:24:69:8f:79:02:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jul 26 20:00:30 2025 GMT
Not After : Jul 27 20:00:30 2025 GMT
Subject: CN=fd29f0461d057cd4d8039992086526a121d316a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:3c:4e:20:0b:e7:5b:48:72:61:a6:ef:5a:
e1:14:f7:28:eb:e6:af:db:8f:8f:98:06:01:a6:e6:
b6:13:01:fa:48:f1:88:d3:99:7b:06:7d:e0:2d:b7:
60:15:bf:8f:df:a0:b5:97:39:4e:45:5a:f7:19:15:
ac:b7:17:6d:5d:ea:9c:62:59:e8:d6:79:62:24:43:
1d:08:ae:ac:7a:21:2c:35:e3:57:0d:16:4e:9e:1c:
3b:41:6e:bd:24:f1:ee:d2:43:57:a8:65:98:64:a1:
f8:bd:27:c2:e4:7f:80:86:a2:be:32:4d:51:34:a6:
c1:33:0d:7b:65:37:3c:f4:8b:1a:c8:0f:09:75:ca:
3e:d5:4e:12:fc:54:50:6b:1d:e1:93:5b:84:78:2b:
43:4c:d1:cb:58:28:bd:ce:dd:15:77:ae:52:86:5a:
72:ce:d6:a2:2b:5f:78:78:2e:e8:dd:64:75:8a:2b:
97:1f:eb:40:ea:ed:96:d9:31:66:78:9b:3f:ea:7b:
b9:93:ed:0c:4e:1e:a3:2c:4b:6d:17:64:3c:77:45:
b8:08:4d:c0:43:40:c9:fe:44:dd:39:e1:54:b1:2e:
48:25:e2:06:d3:18:6f:5d:c4:31:4a:7f:2d:fc:56:
af:42:5d:dd:f1:93:23:27:eb:71:42:9a:bf:57:2a:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:F0:46:1D:05:7C:D4:D8:03:99:92:08:65:26:A1:21:D3:16:A7
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:be:5b:62:25:d2:ee:e6:46:df:69:dc:14:00:46:74:8d:
dc:ea:a9:05:92:09:21:57:f9:f9:32:79:11:dd:14:f1:38:ae:
c5:47:cb:00:a5:a5:f0:f8:44:17:4e:10:9b:34:03:07:26:98:
16:fc:d1:b0:fc:55:6a:73:74:8d:ac:5f:c5:5d:b3:de:21:7e:
74:a3:52:c0:01:83:4d:53:f8:e6:43:e6:8d:6d:8d:be:dc:f3:
24:c8:97:19:9e:14:6c:df:e1:af:0b:70:7e:40:0d:03:71:89:
55:f9:69:22:07:e0:16:0a:2b:2a:16:6c:c7:a8:85:b1:94:11:
b8:0c:01:fb:6c:04:90:52:34:11:e7:7f:e6:51:d7:66:75:bc:
5c:a7:5e:f8:ae:41:93:b7:c9:bb:a1:47:4d:b8:d7:01:82:f5:
a3:88:b2:2f:18:21:5b:e4:9f:ce:10:7f:77:cb:b0:48:d1:9e:
6b:d1:e1:45:a4:bf:ec:7f:2c:ca:11:db:21:09:57:7c:7b:b0:
29:9e:5a:f4:fb:57:27:e4:6a:e7:c8:3a:f9:df:44:1c:8a:3c:
e8:05:9d:1b:ea:91:7b:45:9c:e1:46:e3:65:2a:64:03:00:1c:
56:98:8d:5d:ba:14:fc:5e:de:4c:bd:f2:88:93:df:76:5c:d1:
be:3c:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:53:13 2025 by rpki-client