Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: AsSSqoEkk/F3ob2gB7v8tmXY3VrK5HUn2xNvSzXUgWk=
Subject key identifier: 2E:9A:A0:02:65:99:60:B6:A5:62:09:A0:0F:F9:A5:61:CB:91:57:75
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 01984B54EC56E4CAA644380BC1E280ACC103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:01:53 +0000
Manifest this update: Sun 27 Jul 2025 10:01:53 +0000
Manifest next update: Mon 28 Jul 2025 10:01:53 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: 7//vXHD5cyDG1zL5em8tQ0Io2hDwb1Vnp154k6kMflc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ec:56:e4:ca:a6:44:38:0b:c1:e2:80:ac:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Jul 27 10:01:53 2025 GMT
Not After : Jul 28 10:01:53 2025 GMT
Subject: CN=2e9aa002659960b6a56209a00ff9a561cb915775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:f7:e6:07:7e:35:84:5e:37:aa:27:e8:c7:
f0:50:81:ac:64:ba:be:82:e8:2b:62:2b:9b:a6:6a:
ea:19:e5:4d:9f:ed:c7:39:83:aa:a1:10:a2:7c:ac:
fd:aa:0e:86:b1:e6:5c:36:68:bd:99:bf:c2:bf:36:
ae:64:1f:86:d1:1d:cb:a1:32:3f:29:87:6a:96:aa:
43:50:fb:78:82:88:ca:1c:04:68:17:ea:96:ee:13:
69:63:17:4a:0d:90:e2:1c:ec:ab:cd:72:df:0b:6d:
04:f5:d9:34:fe:d9:cc:27:94:18:59:4f:21:f9:3d:
cf:79:b6:d3:83:51:dc:07:a5:af:2d:ed:8c:97:a3:
e7:ce:d1:97:8d:24:21:ec:9e:e9:bc:15:33:9e:81:
8f:40:ca:d8:33:73:03:00:72:90:11:82:5c:20:d1:
25:2f:7d:58:f3:a4:b6:22:f5:82:8a:60:68:ae:56:
9b:84:51:2b:74:eb:76:c6:ae:32:73:e4:22:28:00:
7a:b5:e5:c9:a9:4d:61:d6:2c:7f:ac:06:95:4a:98:
9f:2c:0d:7b:0e:86:5d:00:96:d7:50:95:66:67:e1:
e4:5d:74:37:05:b9:f8:3e:e5:5c:94:62:08:f1:5c:
02:a7:78:7d:16:fb:1f:42:bb:a3:0b:43:aa:c7:91:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:A0:02:65:99:60:B6:A5:62:09:A0:0F:F9:A5:61:CB:91:57:75
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:29:eb:09:57:a2:cf:34:f0:50:7d:2d:5c:74:97:72:3d:
38:a6:15:1d:74:ba:01:00:b2:3d:ec:c8:90:5a:6f:16:8d:f6:
e9:da:8c:cd:92:a6:97:8c:89:3d:dd:cb:82:93:da:9f:f7:eb:
db:fc:6a:0a:33:50:19:47:01:18:f4:49:0d:ec:5c:ae:3a:32:
00:f0:c0:43:7f:96:a1:ba:1f:74:f6:14:31:0a:3d:71:29:5b:
d0:16:f3:10:4b:87:97:6d:cd:01:77:c1:2f:41:fa:c0:43:b7:
93:56:62:84:cb:cf:e8:1b:5c:65:28:36:96:1f:4b:14:86:53:
44:a6:de:54:10:b0:9e:ed:ec:07:9a:e8:21:6e:07:29:39:4f:
b7:0f:8a:65:0c:e8:2a:10:1b:be:4b:a5:ba:04:0f:7a:5e:d9:
ef:58:d1:c5:92:e8:98:ba:cb:71:85:61:69:fc:44:d0:0d:7d:
6f:2f:14:95:74:cf:e2:39:26:d3:8a:db:b4:20:ff:9b:6c:4b:
b2:7f:c8:5c:1f:6b:70:bb:f2:b7:dd:26:a6:65:cd:43:08:e3:
72:d9:d7:b9:a8:b2:9e:1e:94:68:34:95:4b:f0:84:4e:d1:4b:
ad:f1:df:82:d8:44:cc:45:8c:c5:66:6d:17:ea:79:b8:97:0c:
4a:e6:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:22 2025 by rpki-client