Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File: eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier: WbkQl3+q47EULyTX43pObAaAPEUqBUMAUCklZmcZJ08=
Subject key identifier: 18:64:A6:23:74:6B:36:A7:D2:77:F1:A0:FF:7A:0A:D0:90:75:8E:EC
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 01984B54D345E75736A102BDBA23AD3518C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number: 1008
Signing time: Sun 27 Jul 2025 10:01:46 +0000
Manifest this update: Sun 27 Jul 2025 10:01:46 +0000
Manifest next update: Mon 28 Jul 2025 10:01:46 +0000
Files and hashes: 1: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (hash: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=)
2: 8ALCem6WNzZicaF6OTNthjeQfck.roa (hash: YpH6jIe+TynmU/8cQY6b28ehJOsvk8Ov/8Gxgmlkb/M=)
3: BOjqPIb3athrryYMVMll8dWYS_4.roa (hash: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=)
4: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (hash: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=)
5: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (hash: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=)
6: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (hash: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=)
7: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (hash: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=)
8: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: 3xD1FVplmRHoqbsD58hQuaVmVpNV0+z2bRC5UeMvGvg=)
9: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (hash: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d3:45:e7:57:36:a1:02:bd:ba:23:ad:35:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jul 27 10:01:46 2025 GMT
Not After : Jul 28 10:01:46 2025 GMT
Subject: CN=1864a623746b36a7d277f1a0ff7a0ad090758eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:94:3b:11:60:22:21:72:ef:07:06:6d:fd:
d4:ae:5e:9f:4e:71:0b:7b:43:88:e2:5a:8f:ba:01:
9d:b7:ca:cc:a6:78:b1:88:a1:f3:7c:9f:a9:2c:cd:
d5:f3:a2:f2:7a:15:f3:be:93:c3:51:01:52:02:4f:
7b:40:5b:86:f5:40:76:86:bc:27:13:11:bd:3f:77:
2f:4f:c9:8e:86:f7:6b:ff:9b:1f:49:26:18:ea:6d:
32:81:a3:0b:50:ff:db:10:dc:74:ef:ba:8b:2e:3c:
81:1c:79:a9:ab:c8:60:06:c2:c2:ef:76:5d:bf:41:
5d:0a:0a:43:09:88:90:29:b9:21:ce:a8:3a:a7:5f:
55:7a:66:d5:cf:8a:16:f3:1b:2b:9b:83:89:01:31:
49:e0:25:c2:f4:05:ec:c6:d7:3e:43:7a:2c:88:41:
87:9b:f7:ed:50:ed:92:1c:54:f2:b6:9e:80:6e:3a:
77:ab:42:11:1e:1d:da:87:5e:0e:5a:4f:80:66:86:
97:b5:86:2a:1f:aa:b4:2d:93:76:11:7a:3d:47:8e:
04:63:67:02:22:dd:c6:77:5c:69:10:d3:63:25:83:
33:d6:fc:de:cc:31:cc:29:fd:61:c7:55:a4:ec:fc:
fa:f0:b0:93:8e:6a:6f:4d:85:a6:66:f9:5c:16:15:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:A6:23:74:6B:36:A7:D2:77:F1:A0:FF:7A:0A:D0:90:75:8E:EC
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:75:37:e2:1c:b4:77:2e:3e:dd:89:de:07:8b:2e:5e:7c:
c3:46:4f:2b:be:24:f8:db:5a:41:24:69:02:a0:92:8d:3d:c1:
1b:1e:de:dc:13:3d:d0:25:38:f4:3e:37:04:0a:86:d2:6b:e6:
24:51:4a:e7:d2:9c:c8:fb:a1:57:39:0e:ea:5a:da:22:2c:90:
d8:08:a8:98:5e:2d:71:cc:79:dd:0a:20:fe:76:ee:0b:78:88:
a5:20:06:11:da:7e:a7:ae:bb:9a:01:71:09:30:e8:e8:25:f8:
67:95:08:77:25:80:75:ff:e0:8a:fc:e2:20:47:4b:4c:2e:18:
64:4e:84:2c:c9:50:50:62:85:d5:34:95:72:36:b2:59:9a:fb:
88:97:40:08:8f:ae:c6:da:e7:98:96:42:fc:06:12:f6:e4:06:
7a:2a:94:fc:97:c4:4c:c8:d8:55:5b:95:f2:02:ec:28:d0:d2:
c9:ac:35:7d:af:fe:34:b9:33:35:92:af:44:17:8a:34:4c:d3:
b8:99:9c:c4:56:2a:6e:f9:ab:e3:dc:ee:6e:19:d7:ee:c8:84:
08:1e:db:f6:58:2c:f0:84:ca:02:7b:ad:c7:33:26:4a:96:a7:
93:22:8a:79:dd:47:85:70:fd:7b:cc:58:6e:92:4a:b1:f1:20:
cc:88:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:17 2025 by rpki-client