
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: 6XbEXY5MSipRUMyjl6cxELFhqqJ2IEcmOmVEW63gyVc=
Subject key identifier: 65:08:4E:41:4A:06:FD:8C:7B:8A:8F:99:C2:37:0A:C8:8D:4E:00:B8
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 01984965821A04AE81877A87891E439AE44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 030E
Signing time: Sun 27 Jul 2025 01:00:45 +0000
Manifest this update: Sun 27 Jul 2025 01:00:45 +0000
Manifest next update: Mon 28 Jul 2025 01:00:45 +0000
Files and hashes: 1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: LF+ux1ZwxUjuMqXXK3AB3lOLlINYIh+xCbVA0fXxmXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:82:1a:04:ae:81:87:7a:87:89:1e:43:9a:e4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Jul 27 01:00:45 2025 GMT
Not After : Jul 28 01:00:45 2025 GMT
Subject: CN=65084e414a06fd8c7b8a8f99c2370ac88d4e00b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:f1:f8:70:2d:9f:74:74:4a:95:82:7b:99:
a3:94:cd:e5:83:74:e2:42:23:54:ff:93:f9:ed:17:
e3:ef:3e:41:a4:b0:d0:b8:4b:f1:41:8c:56:aa:d0:
48:d1:c9:06:4e:ac:0b:24:64:37:14:e6:39:94:8b:
21:39:52:3c:ed:52:ab:dc:bd:8b:a0:50:1e:62:55:
69:53:f6:bb:20:16:a1:f3:52:9b:dc:c5:8e:f1:08:
14:f7:28:af:d7:94:cd:6d:41:b3:4b:1d:c4:79:a5:
5a:e4:d6:7a:12:f6:24:47:fc:ee:ed:ef:bc:7e:aa:
b5:7b:ba:1c:d6:07:44:97:a6:34:9b:fe:53:7b:cd:
8c:fe:42:b5:52:73:05:45:5c:0b:5c:18:b1:00:43:
85:f5:f7:34:b7:04:c7:ed:96:5b:c1:b1:45:24:5f:
bb:1d:27:52:b5:4a:5f:21:ff:26:0f:87:0b:5c:fc:
de:8d:69:97:b8:bc:4c:21:5f:65:6e:f5:c5:f6:78:
68:98:48:28:98:e6:f9:f4:25:39:95:81:c9:5f:44:
2b:2a:d0:fe:f8:a9:b1:63:3b:49:a9:c7:a0:60:3d:
bd:81:0b:e8:88:af:2a:59:06:e5:7b:bf:71:a6:2f:
05:ef:7a:07:ed:6b:10:ca:78:e1:96:e2:4b:96:d6:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:4E:41:4A:06:FD:8C:7B:8A:8F:99:C2:37:0A:C8:8D:4E:00:B8
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b4:bb:18:e4:6f:00:ba:bc:d2:c5:21:a2:c4:3e:51:80:6f:
b6:6c:ad:0c:ac:e1:91:2d:f8:59:bc:71:25:19:bd:26:34:7f:
f4:91:df:67:38:ee:cd:16:77:a5:b6:c6:c0:d2:d5:7f:fd:03:
c5:a1:32:90:db:0c:41:19:86:5a:c3:d6:4e:2a:cd:cd:18:a7:
41:26:bb:10:51:e3:e0:84:36:b1:94:57:75:74:0a:82:65:19:
28:7c:33:48:b7:3b:7c:8a:f2:43:22:ba:ba:a9:28:3a:d1:7e:
0c:a9:25:83:cc:50:38:bb:b8:24:8e:0a:10:41:9f:72:ee:8e:
a8:f9:a8:cb:99:ca:18:18:ee:02:7b:1e:59:c3:37:6d:5b:57:
84:2c:1e:24:ff:1a:96:3d:05:2b:35:88:0d:41:d8:72:be:a9:
2e:45:ce:0f:02:60:d1:c9:e3:96:e1:76:73:55:aa:cb:68:55:
d3:d8:1d:41:28:e6:5a:da:85:79:5f:35:25:18:9b:5a:85:21:
0a:64:1c:95:eb:00:04:67:8d:ad:94:13:50:7c:c4:e6:5c:52:
0d:9d:f4:1c:49:5b:9f:26:6a:36:52:ae:aa:55:19:bf:46:bc:
70:ad:3b:fe:f8:61:61:7d:97:e3:b7:08:55:b3:d1:90:d1:d2:
ae:97:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:56 2025 by rpki-client