Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: 38naxV3QJpWcUQ+oCKe5tSeqsT37X84BHUNctE2LPfM=
Subject key identifier: B2:07:20:6E:4E:BE:8B:BC:92:04:DC:AE:FB:A4:64:D6:27:05:15:06
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 01984C2F78DF613ED8F7B99E8870C2E53D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 024E
Signing time: Sun 27 Jul 2025 14:00:36 +0000
Manifest this update: Sun 27 Jul 2025 14:00:36 +0000
Manifest next update: Mon 28 Jul 2025 14:00:36 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: xNsgO9UNuX059bdSgZSekysOs07jBOsFNRiN6v6wAuE=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:78:df:61:3e:d8:f7:b9:9e:88:70:c2:e5:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Jul 27 14:00:36 2025 GMT
Not After : Jul 28 14:00:36 2025 GMT
Subject: CN=b207206e4ebe8bbc9204dcaefba464d627051506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:d9:84:0e:93:57:32:19:bb:27:f5:46:24:
f0:47:a1:23:73:22:9c:45:69:4e:39:18:15:00:20:
a9:3d:18:78:06:07:4c:9b:ac:89:3c:f0:6b:39:42:
5f:17:94:5e:7f:da:ca:e1:d4:93:d7:80:72:e9:c8:
ba:06:c8:d8:c1:fa:4a:f8:66:fd:25:f2:69:42:be:
48:db:bb:70:1f:a6:e6:24:2d:97:f0:ab:44:74:26:
08:a9:91:d8:e0:51:52:60:bb:1b:bf:82:2b:43:4b:
25:80:5d:15:1e:dd:10:d7:49:14:83:73:4f:70:87:
8e:e3:64:4d:ca:ff:6a:c3:09:88:38:15:68:46:96:
13:f4:0e:df:8f:39:1b:e0:2f:3d:49:84:e3:60:af:
d8:84:4b:76:d1:45:bd:25:ba:c7:4d:49:f7:ba:0e:
f4:c4:fc:06:f5:71:4e:42:5b:07:b2:03:d3:aa:28:
0a:9b:c9:79:82:61:0d:94:83:d7:20:54:a2:b6:c4:
5e:fe:f0:9f:85:ce:82:49:85:1d:a6:b6:bc:e6:7c:
43:33:ad:94:45:70:a9:f0:85:51:6e:68:6b:a4:ab:
60:2d:72:9d:99:3b:9b:80:35:75:b2:74:4f:d3:ee:
fe:a3:15:cd:60:1d:21:d4:a1:ef:7b:ab:e0:40:84:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:20:6E:4E:BE:8B:BC:92:04:DC:AE:FB:A4:64:D6:27:05:15:06
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:65:e6:12:13:0f:a3:21:b3:c4:63:66:f6:fa:0d:a9:a5:9f:
04:2b:36:15:16:14:6d:c1:34:b1:15:62:ab:28:b5:b4:9c:90:
45:a8:85:c2:c0:e6:56:02:35:a6:01:8c:1b:25:16:0a:ee:2c:
de:42:e0:13:f2:c1:4f:90:51:97:97:d6:f1:e7:ae:b3:0a:2f:
6e:02:da:d2:d4:d9:cf:59:e9:16:a2:bd:a8:7f:77:c8:3b:2b:
db:53:52:45:17:24:ed:d2:6b:d9:bf:9a:bd:61:b5:c2:5c:77:
25:54:be:0f:47:9d:0e:4a:40:83:8c:2a:60:69:06:0f:16:86:
9c:52:01:59:d6:f4:51:0e:dc:ce:b1:25:51:2f:47:95:6c:d5:
c3:5b:f6:0c:f2:f5:3b:62:a7:d7:b5:0f:4f:d6:23:73:40:2a:
48:08:58:02:0f:20:01:64:d6:4d:91:2b:9e:f4:e2:93:74:81:
cf:d8:de:63:25:e2:01:c5:ab:e4:68:e7:a6:ba:f5:45:8b:d0:
16:73:f6:e4:cb:b4:ad:a7:12:12:5d:9b:72:3a:d5:d8:79:69:
52:76:ba:60:37:c2:2f:e3:11:5a:66:44:ae:c7:b8:eb:2c:84:
5b:74:f1:23:58:6e:0a:ef:79:69:8a:47:f7:2d:fc:2a:51:a1:
46:c6:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:52:11 2025 by rpki-client