Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier: 8Cw6n2Nc/HjACppU2FETXrIqUrq1Ah+vtnLnMtdfuDk=
Subject key identifier: C6:80:D2:D6:BE:75:79:8D:03:FB:F3:12:21:27:AE:B9:A3:78:6B:40
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial: 019921B0F9A5C6502BA5B0F410378E896903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number: 0335
Signing time: Sun 07 Sep 2025 01:01:10 +0000
Manifest this update: Sun 07 Sep 2025 01:01:10 +0000
Manifest next update: Mon 08 Sep 2025 01:01:10 +0000
Files and hashes: 1: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (hash: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=)
2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: M5UawMnZiXTZJA7LJz/2T61bGjq4lbdU7zyV4cP20I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:f9:a5:c6:50:2b:a5:b0:f4:10:37:8e:89:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Validity
Not Before: Sep 7 01:01:10 2025 GMT
Not After : Sep 8 01:01:10 2025 GMT
Subject: CN=c680d2d6be75798d03fbf3122127aeb9a3786b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:61:be:85:af:5b:cf:2e:99:63:dc:21:f2:
a2:cb:f5:c0:73:c7:b2:15:33:5b:76:b9:46:25:35:
db:39:a1:e0:dc:5f:7a:c7:b8:f9:74:52:83:76:53:
97:b8:10:dd:91:b1:b7:52:9e:ff:f9:f6:f8:ae:a9:
e4:07:3f:fe:ae:90:82:ee:ed:0f:f3:dd:1b:74:61:
9f:36:18:bc:18:dd:09:89:ac:3f:96:e0:e0:1b:50:
3f:74:f5:39:13:a1:4e:a6:77:04:52:82:a7:a6:15:
79:93:38:c9:cf:e3:e5:15:91:65:d3:f7:f2:5d:a4:
ae:92:d9:7b:bc:46:27:fe:88:a7:d3:1f:64:49:46:
79:74:ac:e8:e5:bb:b8:f1:0a:13:6a:a9:5e:37:f3:
31:63:7d:62:ac:32:36:ff:94:ef:c1:2a:e4:2c:ff:
5d:6f:8c:79:d3:ee:d4:82:4e:82:b7:47:5d:ad:8d:
4e:e0:07:2b:cb:9b:0b:f5:d4:6c:6e:1a:d2:2c:bf:
41:68:50:5a:c1:5a:e7:0e:04:c8:df:6a:90:2c:d9:
16:c2:2e:3e:c4:2e:8d:23:f3:b2:d7:0c:0b:c1:e8:
a0:74:92:32:59:75:b7:01:0a:77:48:7b:96:84:7d:
91:8d:b8:84:56:a7:73:fb:68:6d:08:7a:68:b9:17:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:D2:D6:BE:75:79:8D:03:FB:F3:12:21:27:AE:B9:A3:78:6B:40
X509v3 Authority Key Identifier:
keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:7b:31:1d:7f:c8:f7:50:17:a7:9c:ed:96:89:54:64:9d:
2e:38:78:13:8e:47:77:23:70:f5:a2:07:56:8a:ec:67:8c:da:
a7:0d:c8:c7:5a:26:bf:e6:04:17:87:5d:1a:21:2d:49:3a:e2:
38:78:f1:92:6a:68:72:73:40:e4:19:33:40:57:de:70:42:64:
0c:f7:0e:99:66:c4:04:0f:c3:82:d2:7f:57:0f:b0:92:49:bf:
25:dc:2b:13:22:e6:7a:fd:03:4f:d4:82:5d:6f:6c:e5:90:b0:
a0:25:de:ce:20:70:c0:67:9c:22:d1:65:75:12:e2:51:27:9c:
f7:f6:01:36:b6:d8:fa:e0:db:47:65:31:d9:95:6b:f3:78:d5:
87:54:e2:fe:f2:d8:b3:fb:5a:5e:da:9b:f6:40:1d:36:82:e7:
d0:42:1b:f5:d4:cc:3c:98:70:bd:90:16:f3:8b:87:ff:24:ea:
85:8a:44:05:56:88:fa:72:38:a2:77:55:e5:5c:29:3a:fc:b4:
69:3e:7d:35:1d:94:98:a2:d0:d5:51:bc:ee:92:9f:a7:6e:60:
d6:c9:23:fd:82:9e:04:1b:73:31:22:08:76:a3:c6:80:49:4b:
a5:27:3f:15:16:38:73:79:2d:33:73:ad:3c:0a:9a:bc:40:c2:
8e:d5:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:30 2025 by rpki-client