Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: CnrLARjr9qs7h7zL2KDAEFiKSYDBw5VVAmoaieCLUqc=
Subject key identifier: 6A:18:E2:5F:17:88:D8:5C:DE:8C:74:53:6C:68:53:0C:CB:8F:4C:94
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 019858DAB0EFA8CCE6A4D7AC43C97781D3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 1081
Signing time: Wed 30 Jul 2025 01:03:03 +0000
Manifest this update: Wed 30 Jul 2025 01:03:03 +0000
Manifest next update: Thu 31 Jul 2025 01:03:03 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: KAB8IUd8jp11KI+PnE5gT5s8Sf9GmNPFyk96ETpQ9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:b0:ef:a8:cc:e6:a4:d7:ac:43:c9:77:81:d3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Jul 30 01:03:03 2025 GMT
Not After : Jul 31 01:03:03 2025 GMT
Subject: CN=6a18e25f1788d85cde8c74536c68530ccb8f4c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:f2:1a:8f:c7:9b:78:ef:42:1f:c2:ea:87:
50:57:21:d4:d4:8f:04:46:c4:c7:f1:c8:7d:2d:f6:
b3:66:82:b4:fd:2d:5b:ca:65:04:48:4a:01:ef:f6:
22:30:92:3a:8b:08:fd:ae:b7:87:92:65:6b:30:3f:
08:db:eb:8d:1b:09:f0:32:00:84:b2:dd:4d:f6:ec:
ba:f4:bc:2e:09:7e:f1:a9:dc:3b:f3:56:f1:4a:58:
52:ee:4f:c2:3e:77:f9:70:16:09:c2:bc:aa:e0:56:
54:10:41:47:3d:ea:96:d7:d3:30:e9:7a:4a:99:99:
12:5f:af:b8:55:68:2e:16:61:ec:d0:db:a3:8c:7c:
f8:14:42:d0:bb:17:78:7b:24:48:f0:41:2a:90:43:
30:4a:0e:75:9c:f3:5d:62:f2:66:7f:76:1c:2c:14:
2d:01:a2:01:77:af:c9:54:09:8b:4f:86:1c:e9:b2:
80:b9:62:b1:ec:a0:be:d4:0b:cb:34:eb:d9:4e:4f:
3e:a6:d5:44:9d:8c:74:e5:49:87:d0:30:50:05:89:
f6:4f:22:58:d8:a6:e4:a4:44:9d:cf:dd:23:d9:99:
e9:d5:05:2f:c1:c4:f1:85:f0:7a:09:97:8d:a1:c4:
ca:ac:cc:ca:6b:4d:89:35:6c:f5:e7:2e:21:99:8a:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:E2:5F:17:88:D8:5C:DE:8C:74:53:6C:68:53:0C:CB:8F:4C:94
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:c8:69:b8:81:97:6f:c8:cb:43:bc:24:8f:e3:e1:13:e4:
19:58:68:1d:d9:96:9e:7b:57:31:0d:72:18:f8:23:dd:7f:7e:
f7:f1:73:da:3d:09:00:45:64:16:6f:93:17:dc:08:c6:c2:3e:
b8:78:5a:7a:a0:67:0e:4e:57:c1:7a:34:9c:37:73:b0:7c:77:
c8:d1:70:bf:b4:3b:33:84:3e:7c:3c:14:de:b2:d3:68:14:07:
f0:26:e0:37:e0:36:45:a4:e7:1b:fe:d1:c3:00:9d:b7:70:47:
6c:0b:b0:71:ea:89:d9:56:b4:00:f3:8d:ab:4e:ea:13:a4:87:
a7:a2:ac:73:fc:68:41:28:87:70:2b:8c:e8:ea:3f:c7:a5:42:
d2:18:10:0f:ba:bd:af:da:c6:6f:b0:6f:95:e2:dc:62:5b:a5:
76:90:1b:e1:e4:6d:6a:4d:69:8a:15:f3:c7:8e:96:fb:7a:08:
3d:b5:72:b6:77:35:0c:25:05:20:6b:4c:37:61:88:2a:37:1e:
e9:3a:3e:8f:b8:67:c8:54:1b:96:92:7d:e0:89:bb:5e:54:40:
df:35:b6:55:f9:a9:8a:34:53:88:1d:3d:22:6c:b8:ef:0c:73:
66:14:82:fc:ed:56:96:87:fd:44:25:ae:a9:99:d3:cc:15:e8:
e8:1d:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:15:52 2025 by rpki-client