Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File: eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier: Sqn4lkAa92fGYZoLXQ465GG5OjJt/8sIsJWiodZVn74=
Subject key identifier: 4F:82:ED:5A:76:71:69:13:2B:A5:71:06:11:52:08:7D:E1:0B:94:85
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 019921B1543B924BC7383596B4B3C1E0A3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number: 14F3
Signing time: Sun 07 Sep 2025 01:01:33 +0000
Manifest this update: Sun 07 Sep 2025 01:01:33 +0000
Manifest next update: Mon 08 Sep 2025 01:01:33 +0000
Files and hashes: 1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: xUKsGvSv5gp6kp6fqXFMdyv3LyE91ZCym2h+4CoHBNY=)
2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:54:3b:92:4b:c7:38:35:96:b4:b3:c1:e0:a3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Sep 7 01:01:33 2025 GMT
Not After : Sep 8 01:01:33 2025 GMT
Subject: CN=4f82ed5a767169132ba571061152087de10b9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:f1:6e:c2:5f:c9:df:2a:8d:22:b6:c2:f4:
08:59:87:a0:8d:7a:44:09:69:a9:07:11:76:bc:ff:
4e:44:d9:4c:d6:fd:af:7d:ac:69:e9:da:41:a0:f4:
65:fd:13:ea:f6:d5:13:e7:68:5e:e6:91:03:f3:a8:
0f:cc:b9:ad:a9:a7:48:ea:1b:7d:88:34:5c:2a:b4:
83:a2:9f:77:4d:1a:f4:65:0a:26:66:ac:91:10:2d:
b6:8b:b2:73:80:ca:ba:5b:4b:d7:bd:4e:47:36:62:
11:87:bb:e4:83:2f:ac:5a:f4:ae:6e:a3:d4:c0:87:
42:af:d2:93:39:02:95:8c:bf:bd:9f:38:dc:dc:5b:
df:80:1d:43:f1:b7:b5:a3:10:61:17:34:81:58:d8:
13:4f:6f:be:92:37:bd:50:57:e8:e1:de:2c:1b:0f:
b3:19:35:5b:d7:ab:ce:15:76:f2:10:5f:5f:05:e0:
1f:7a:5d:02:bb:4a:17:49:ea:27:e2:43:cd:f9:c9:
ea:df:59:cd:06:79:b6:a8:dd:86:0a:ea:3e:c8:7d:
d7:26:86:52:fd:4a:b7:57:af:48:bb:17:8e:d0:a7:
bf:40:2e:5d:bc:b5:8d:5b:47:c9:58:3b:2e:72:7e:
97:59:6d:9d:f6:7c:5e:51:00:09:46:15:74:73:74:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:ED:5A:76:71:69:13:2B:A5:71:06:11:52:08:7D:E1:0B:94:85
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:93:17:3c:3d:44:24:e1:be:87:ef:bc:ec:12:be:bb:46:
43:9e:3e:67:46:53:3f:ba:f6:70:b1:69:0d:cf:07:54:17:99:
df:80:7c:1b:c7:8f:68:39:30:1a:b4:53:1a:82:19:cb:93:c9:
4e:77:8b:92:05:c7:ec:49:3a:c3:67:e3:b1:a7:cd:56:54:cc:
f1:59:ea:e5:ef:a2:93:ae:14:47:d7:e2:cc:76:e0:15:9b:59:
01:eb:1f:b0:2d:99:2f:fb:d0:f6:ef:df:c2:21:69:2b:2c:e5:
07:e9:71:0a:8b:7e:09:f8:ed:a3:67:0f:f5:e3:3b:8e:99:47:
c5:bb:2c:90:29:c1:25:5f:2c:b6:3c:de:51:0b:4b:ec:f5:24:
ac:9e:e9:b8:ee:19:0b:36:e1:85:6d:72:2b:d7:d5:c3:74:79:
0f:e1:77:33:5d:67:74:b1:f9:43:ab:0a:91:36:55:c1:71:f3:
6a:a0:25:7d:c7:ef:b7:22:5c:f7:f7:8b:06:09:c7:b1:63:54:
06:90:eb:3c:18:ce:4b:2b:18:dc:3d:9c:e4:01:5b:99:35:de:
16:b0:01:aa:54:4b:58:e4:3c:25:d8:fe:5c:8f:c6:0d:9d:4b:
f5:54:a5:d9:ce:18:d6:55:a4:f8:3e:89:e8:4a:21:28:21:41:
ac:c6:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:49 2025 by rpki-client