Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: OXPK0YE3w2BH64ne04I8VJaW2DWYjKh0N0GwUwpc46o=
Subject key identifier: 1C:50:B4:A5:E0:54:E1:6B:4E:CE:88:AD:88:C4:9E:61:59:89:E1:A3
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019848532923B94B7B1596E3202AF980DFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0BDC
Signing time: Sat 26 Jul 2025 20:01:06 +0000
Manifest this update: Sat 26 Jul 2025 20:01:06 +0000
Manifest next update: Sun 27 Jul 2025 20:01:06 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: zLf4L5mwiuN/eDssEFIHSFnKFYlNSgBAWgJustC7nvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:29:23:b9:4b:7b:15:96:e3:20:2a:f9:80:df:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jul 26 20:01:06 2025 GMT
Not After : Jul 27 20:01:06 2025 GMT
Subject: CN=1c50b4a5e054e16b4ece88ad88c49e615989e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:58:c8:ed:7e:c4:7b:94:2b:f0:10:48:ab:
0f:38:36:9d:fd:86:6b:60:99:57:b2:74:eb:cc:2d:
9f:33:15:27:ce:ab:bc:07:c8:27:4c:f6:a5:62:13:
33:e9:43:c7:09:b7:d3:2f:6f:f2:1d:78:69:b7:dd:
0b:26:01:38:a6:a3:c2:fe:64:a2:6b:10:34:e5:0e:
47:99:0d:b6:0c:d2:d5:f4:90:87:a0:13:0b:18:39:
36:d7:a5:ed:b2:5d:ae:7c:91:0c:65:78:c8:0d:44:
e1:74:71:e3:6a:ae:2b:98:ee:05:13:0c:7b:c9:60:
b8:ea:4e:0f:c9:e6:1f:7e:a3:2b:58:c7:b8:8c:ff:
c6:2c:69:36:e7:8e:ca:77:b3:dd:30:4a:e9:98:ee:
c5:44:5e:a1:21:ff:e0:51:3f:93:ef:29:a5:68:37:
db:72:c9:24:3b:95:1c:b1:c2:3a:8d:30:5b:63:53:
f4:ed:61:78:f8:5b:63:d0:4d:cb:0d:85:70:f9:09:
b2:d9:77:86:99:59:cb:0b:ac:93:4a:21:ea:d2:9e:
f2:8e:79:10:eb:02:71:07:11:45:9c:25:96:9a:e8:
49:82:c0:fe:de:d9:8e:06:6f:3b:97:37:ff:83:28:
03:dd:28:2f:cd:f5:6e:65:96:dd:5c:78:12:db:33:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:50:B4:A5:E0:54:E1:6B:4E:CE:88:AD:88:C4:9E:61:59:89:E1:A3
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:d9:2e:9f:18:99:a5:8d:e3:d9:7c:0a:a1:29:84:a9:b6:
ed:84:6e:ce:0b:d5:ef:79:54:ba:21:99:1b:c5:62:01:6d:8e:
f4:dd:05:be:3f:14:a1:2f:c5:4e:d9:28:bd:10:7e:1a:dc:30:
28:0c:fa:66:6d:d7:69:f9:61:4a:b5:30:fb:36:e2:de:95:95:
76:42:9d:13:28:61:4d:0b:3c:a0:79:d0:9d:d3:19:9a:eb:42:
53:21:a2:d6:63:e5:df:88:b2:c7:62:03:3b:0e:98:ff:2e:50:
7e:70:eb:2d:76:e3:74:67:b2:d3:e4:3e:d7:9c:81:78:2f:c4:
f0:eb:3e:03:50:9a:86:ed:57:c7:fa:47:eb:dc:04:29:d4:65:
05:f3:de:2f:5d:9c:ae:fc:87:17:bb:03:4f:0f:57:fe:b5:a5:
95:4f:ca:20:c4:18:28:ee:31:b7:b3:fd:bb:1d:53:f3:74:e5:
9f:71:22:26:63:b2:0a:74:54:d5:93:bb:34:5d:a8:60:20:66:
1d:53:5c:1d:be:1a:ae:c6:d4:99:dd:89:cd:92:c4:92:b7:70:
40:57:e2:39:09:b0:c0:62:a4:35:20:26:20:cb:aa:37:42:15:
9f:73:d6:20:48:9b:81:d9:f7:9e:25:e1:02:0d:e3:35:74:b1:
57:63:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:32 2025 by rpki-client