Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: V1NN+5HnsRz+2KBE4IAQuIS3GkkfrJVg0uiswsBKS1c=
Subject key identifier: 6C:27:2C:BD:B6:81:A8:FC:61:4F:33:DC:D9:51:F1:D6:9C:03:88:50
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 0199228D2A03AC4B62FB77BAE63BC7CA9BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:40 +0000
Manifest this update: Sun 07 Sep 2025 05:01:40 +0000
Manifest next update: Mon 08 Sep 2025 05:01:40 +0000
Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: r1+Ja9lsINcIiM36eBK23xSfS6w+Xt8+BQDd0jdZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2a:03:ac:4b:62:fb:77:ba:e6:3b:c7:ca:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Sep 7 05:01:40 2025 GMT
Not After : Sep 8 05:01:40 2025 GMT
Subject: CN=6c272cbdb681a8fc614f33dcd951f1d69c038850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:e9:c0:3d:30:c8:fa:d0:d2:78:64:4b:36:
ed:bf:22:9f:7e:ec:d1:ca:67:7c:5b:5c:c1:e7:8d:
3e:e6:c1:4b:d8:e4:60:b3:be:71:90:cc:70:26:98:
07:ea:ba:b9:04:20:62:b4:01:99:20:11:e3:2f:6e:
6b:42:02:c8:59:a0:d0:fb:54:c3:22:25:21:3a:55:
ae:25:71:36:4b:2e:36:83:50:ab:57:f4:3d:b1:fd:
9e:42:04:e7:a6:08:fa:4e:2e:02:61:d1:2b:80:38:
db:f6:c2:32:e3:a8:63:af:d5:18:93:ee:3f:2d:6e:
0c:a4:22:fd:26:bf:1d:8a:92:61:9a:bb:4e:36:89:
eb:bb:86:01:d8:e6:ed:e8:bc:01:dc:d9:39:3f:da:
93:ad:84:5c:aa:cd:2f:54:80:31:99:96:0f:d6:40:
5a:a7:d8:0f:29:91:8c:cd:0e:ee:28:38:63:b9:04:
cf:63:21:f0:ef:3e:26:73:88:35:ea:7e:45:71:9a:
91:fd:39:eb:08:75:58:ec:21:50:ec:cc:e6:db:68:
cb:18:6a:1f:b1:77:a1:c1:53:81:24:4c:b3:aa:80:
7b:df:43:10:c9:d7:c2:dd:0a:d3:f6:aa:fd:99:d0:
0e:ff:1b:c1:8c:db:03:b3:bb:33:61:a3:5a:c7:b9:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:2C:BD:B6:81:A8:FC:61:4F:33:DC:D9:51:F1:D6:9C:03:88:50
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:51:87:0f:70:5d:67:fa:90:c2:d5:6e:96:85:d0:4d:a0:
29:ea:39:04:8f:64:88:9b:49:4f:b7:d8:58:2d:7e:d0:94:eb:
4c:0d:b6:c3:fd:26:49:bf:5f:f6:75:1c:65:d1:3d:39:8d:d2:
e6:eb:0e:7a:40:41:51:19:ae:2e:71:82:ea:90:d1:a7:0c:91:
05:2c:28:6d:3c:dd:26:b5:10:58:b6:6f:11:40:ea:bd:c5:72:
01:17:36:94:76:e9:ce:55:55:c4:f8:49:1e:97:3b:cb:84:1a:
80:05:21:cd:a6:c3:3a:af:39:93:81:f6:03:9e:c1:14:09:64:
cf:38:3a:45:04:d3:c0:e9:cc:39:ac:f8:d9:97:85:e0:62:ba:
61:06:a0:03:2b:73:b9:63:41:a2:13:2d:ab:aa:56:6d:ba:65:
3d:ab:69:8e:4f:0a:d9:42:d1:f7:72:4b:6b:f8:19:1e:2e:12:
7b:b2:d2:8d:35:5a:ff:b3:5b:00:bb:ed:5a:ae:f1:f9:e2:f8:
7e:8a:5b:0c:0d:65:3e:60:07:eb:72:00:33:03:fa:40:da:53:
33:3d:a3:5e:6c:15:2a:5c:1a:d8:f4:b3:e0:16:75:fa:c5:86:
ab:ef:1a:85:67:94:a7:8a:85:64:bd:af:0a:4f:68:fa:c1:30:
29:df:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:49 2025 by rpki-client