Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: qNcTdKiGGG1hUDXglyf+nYOg8A9s4fU/JlTH1WAKy7A=
Subject key identifier: 4B:50:84:68:5A:EA:24:63:97:5C:70:35:31:21:5B:0F:7C:39:F1:81
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 0198C724BA62DE052CFAEFD48AF65607E4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1644
Signing time: Wed 20 Aug 2025 11:02:09 +0000
Manifest this update: Wed 20 Aug 2025 11:02:09 +0000
Manifest next update: Thu 21 Aug 2025 11:02:09 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: Yo5itBy0863KGuuJjMnWWS8IMY9XH8DZmLsWYS0Y7zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 11:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:ba:62:de:05:2c:fa:ef:d4:8a:f6:56:07:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Aug 20 11:02:09 2025 GMT
Not After : Aug 21 11:02:09 2025 GMT
Subject: CN=4b5084685aea2463975c703531215b0f7c39f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:da:f0:38:fd:9e:72:46:2e:97:75:4e:a1:
27:48:8f:8d:08:70:a3:ab:20:7e:72:c2:7d:a2:69:
5e:46:93:85:6b:47:0e:01:09:64:72:49:42:26:35:
5b:00:38:a6:0d:fb:47:d8:fb:6d:1d:e7:33:83:f2:
a5:12:6c:5e:68:be:2a:39:db:2e:b4:60:65:95:79:
cf:06:1d:7b:a6:5d:13:31:7f:be:47:35:85:77:06:
cf:e3:04:2a:1e:f5:3c:a6:f7:3c:ca:5f:f4:98:33:
fc:70:35:fe:48:4a:17:73:b0:6d:1f:c5:08:da:5c:
a8:74:08:9e:6c:cb:f2:ed:6a:47:11:51:76:20:bb:
e4:e2:f0:00:a3:52:94:f3:dd:23:0c:8d:b9:fc:ff:
13:51:4e:c6:99:b7:09:ca:81:ec:88:88:ca:9d:14:
02:be:0b:e9:36:5b:16:fd:82:4a:68:a6:a4:cc:8d:
4f:18:03:c7:6f:4f:8f:54:6b:d6:12:e7:08:44:72:
62:14:ad:a7:7a:84:01:3a:ec:b4:31:be:64:e0:00:
2b:4b:a8:71:ef:b4:96:37:10:db:8d:cd:28:74:1d:
bc:d6:da:00:b0:14:99:0e:d5:54:c9:95:cc:dd:bc:
bd:e6:c6:39:6c:82:f2:70:81:99:51:ad:3c:c7:e0:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:84:68:5A:EA:24:63:97:5C:70:35:31:21:5B:0F:7C:39:F1:81
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6c:cb:51:d4:cd:d7:77:b4:f3:3c:93:9f:93:9d:b4:b7:36:
4e:3c:13:7b:73:7a:ef:ba:77:aa:5c:39:6f:4c:7d:bd:3e:2c:
7b:ca:8b:39:a3:4e:47:37:36:95:cf:02:d6:98:61:6a:70:c6:
b4:e2:cd:27:93:2e:13:bf:25:c0:15:dc:95:38:17:c5:a6:52:
a6:f9:3d:24:a7:2b:2b:71:ad:da:79:65:95:41:d3:92:92:6b:
bf:02:c2:c0:d5:d0:a7:cd:00:58:b0:eb:b8:05:27:fb:b1:f6:
e1:79:97:d7:5a:19:c8:a8:2b:6a:23:f1:d4:11:85:12:8f:6d:
0d:f7:19:62:69:5b:25:f5:68:10:5c:01:e1:26:5d:9e:f3:7c:
1f:ec:f0:04:f3:6b:a0:5d:59:b0:c9:8f:71:e6:1c:c4:bc:9d:
2e:e3:ae:a8:c1:2e:20:a5:8f:f9:07:84:85:e4:1f:47:12:fb:
da:50:41:3c:2d:9a:3b:31:02:f8:16:2a:ad:11:0c:74:24:1e:
0f:87:7e:12:1b:c6:6f:08:b4:a4:74:e0:c4:64:ff:78:23:c8:
a8:7a:6c:42:ec:f0:54:81:a2:36:72:2a:c6:96:34:b6:c3:c7:
8b:b8:ea:25:e7:2c:10:9e:f8:e3:31:ae:83:b2:65:cb:90:c9:
bf:6c:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:15 2025 by rpki-client