Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: pPbur+iOSNPe/PPEWueeF+xEiGubKyYOE/CG9o2lftU=
Subject key identifier: 8B:B9:8C:01:95:F7:B7:49:75:E5:9A:7B:B4:68:FD:A1:DE:E1:37:44
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019846D25E1887DD2D78F8E6C376FA83BA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 13B3
Signing time: Sat 26 Jul 2025 13:00:48 +0000
Manifest this update: Sat 26 Jul 2025 13:00:48 +0000
Manifest next update: Sun 27 Jul 2025 13:00:48 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: Z3zWmTgg1AjhPqYuz7Pg5bD0IRqIS20sQc7VNIRihSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:5e:18:87:dd:2d:78:f8:e6:c3:76:fa:83:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Jul 26 13:00:48 2025 GMT
Not After : Jul 27 13:00:48 2025 GMT
Subject: CN=8bb98c0195f7b74975e59a7bb468fda1dee13744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:b7:ed:9b:e0:bc:45:cb:ce:df:91:34:d7:
d4:c5:4c:1c:14:ec:56:ab:2c:46:50:2c:cf:57:c2:
d6:96:26:46:ca:89:3d:cf:73:48:a0:c3:f1:7c:2e:
5a:ec:5f:17:57:21:9f:d0:76:0d:a0:f2:c1:0b:2d:
0d:16:53:41:93:d7:2a:e3:97:ba:71:d0:8f:ae:c3:
52:bb:f3:42:5f:16:70:e9:b2:09:f3:68:34:04:69:
45:eb:43:c8:a1:43:4c:42:86:54:9f:79:72:04:fb:
81:19:ea:e5:23:60:26:0e:70:4b:f3:82:18:8d:06:
85:aa:08:f3:5f:41:d9:4c:39:f4:6b:d4:0c:62:ff:
16:ae:c4:e3:d5:23:f9:d8:45:f2:6a:47:8b:6d:f1:
3c:8f:58:4a:cd:ab:1e:67:fe:99:91:8e:f8:64:85:
49:d0:9b:70:e4:b9:b2:b8:09:51:7c:e6:91:f9:14:
38:9a:39:33:65:96:a5:aa:2f:7d:db:62:bd:ab:13:
8b:c3:f7:de:a3:3f:ad:ac:8f:90:b8:62:50:78:bf:
b6:08:c1:cc:74:aa:0d:91:40:f3:48:1b:4b:bf:4c:
af:87:9d:38:6f:69:d4:e8:f3:d0:06:f9:b1:6e:80:
2a:18:29:db:2a:5a:c5:b8:8b:16:d6:5d:d8:48:39:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:8C:01:95:F7:B7:49:75:E5:9A:7B:B4:68:FD:A1:DE:E1:37:44
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:db:12:51:f4:35:8a:20:e9:8a:6c:bc:75:58:de:87:cd:3c:
88:a2:92:f7:63:65:68:d6:22:ae:31:35:de:58:e6:71:27:62:
42:26:5a:e2:83:26:24:ad:ba:c1:96:5b:34:d3:df:6d:39:19:
9b:71:21:09:76:61:54:9d:81:3a:ac:cb:00:12:23:fb:0a:62:
1a:61:07:dd:00:c6:83:fe:66:06:eb:a5:b3:cc:aa:70:18:20:
1b:0b:00:a4:83:aa:10:99:c7:bf:9d:6a:9b:26:bd:b1:8d:c8:
e0:b3:41:18:38:85:14:7e:9d:a9:f0:9d:ab:4e:bd:5d:5d:3a:
8c:80:65:4c:f5:14:a8:0c:59:3c:aa:25:a2:11:6b:b6:b7:25:
f8:d2:a3:7b:c4:09:ab:f7:b8:a3:fe:8c:45:ef:62:c1:df:95:
20:87:01:51:31:4b:63:12:33:99:a9:54:ff:da:28:f9:de:d7:
c0:9b:ac:9c:77:d6:d5:fd:f9:d3:a9:c7:c2:ae:19:58:5d:dc:
86:31:c1:80:f0:22:89:65:d7:46:b8:b4:96:e2:77:70:cb:5b:
8c:d6:14:33:6d:0c:80:82:e9:6b:35:91:74:44:66:ce:df:b3:
22:d2:9e:86:7e:69:0f:00:fc:18:77:16:44:2f:22:15:ca:b2:
2b:78:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:33 2025 by rpki-client