Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: kpsp89pdm7Z+G2oQSIypxHKzL5Q0tLVfkr97HOw/rO0=
Subject key identifier: 36:80:21:F6:4A:1B:47:72:28:54:51:06:52:39:97:E8:EA:BD:1B:DE
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 01992255C6D2DC841E3AB2F69C6F518FAC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 038C
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: KjiKf8JCvwJQAFUzX8kPDXGr4HC3IxyWKcUoK7jdsnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c6:d2:dc:84:1e:3a:b2:f6:9c:6f:51:8f:ac:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=368021f64a1b477228545106523997e8eabd1bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:2c:f3:33:7e:32:bf:93:f5:60:65:09:88:
4d:a0:bd:c5:67:49:ae:5f:c9:ed:9e:0e:d3:ca:36:
b8:60:6d:21:d0:82:73:cb:23:31:ec:d9:ef:0e:6d:
57:d3:bb:80:fc:be:ff:a1:c4:9b:e4:29:61:92:2a:
ce:09:fe:91:30:0a:aa:1a:0b:8e:05:40:ad:e5:24:
4b:5c:b5:f5:1c:bf:ea:10:24:6f:ac:d0:c4:ae:b8:
d0:c8:28:5e:0c:d5:5d:3d:bc:6d:a0:b3:10:8a:cb:
68:4f:d3:f7:18:ed:4f:92:35:93:e0:5c:07:56:d0:
e4:3c:61:b9:9b:bf:28:e6:72:02:b9:9f:c2:a4:8d:
ac:3c:fb:c8:03:a5:7f:7f:8b:a6:de:e4:62:1b:80:
16:e7:fa:94:fc:c3:c0:bc:6c:d8:e0:a0:e5:ca:88:
62:9e:11:19:68:09:49:bb:99:28:33:b0:b4:65:19:
43:35:67:e1:8f:16:ce:63:29:fa:b4:e2:53:d9:f1:
94:dc:86:01:db:70:60:31:e3:01:ce:cd:86:ea:61:
ab:52:07:4b:42:39:e5:46:ca:23:be:e4:e9:c8:75:
fc:c2:69:fb:d9:3b:30:19:d6:9f:30:e0:57:ff:0f:
3b:5a:45:88:46:ac:36:77:38:61:43:ed:e8:50:37:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:80:21:F6:4A:1B:47:72:28:54:51:06:52:39:97:E8:EA:BD:1B:DE
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:6f:5a:79:7f:73:6f:f2:8f:73:38:3e:8c:5e:32:12:62:
0e:d4:b5:b2:1a:89:5c:5c:f0:ed:3e:8e:e3:2d:ab:7a:11:2b:
ef:40:bf:29:08:dc:ad:ac:63:eb:57:d0:c3:8a:28:14:7f:fe:
4e:4f:7c:ba:cb:7d:a7:78:7a:b2:96:ce:06:20:ee:76:99:4c:
b2:e1:82:d2:3d:29:db:a8:0f:ea:97:2e:0f:e0:e6:1e:00:20:
f8:34:4a:f1:0c:e8:af:55:1f:42:3a:2f:89:b9:77:12:19:f6:
1e:0e:0b:fe:dc:d1:28:88:bb:3a:c0:11:6f:09:46:db:1c:73:
d9:f7:1b:03:7b:8b:9f:ec:dd:ae:81:78:21:78:7e:95:a9:25:
05:d4:b0:bc:9c:6a:6b:8d:f9:75:7a:78:54:da:eb:3b:ce:74:
66:cd:78:a5:80:7d:db:72:62:5f:91:76:a7:3e:24:56:ca:38:
bf:03:ba:87:62:80:30:1d:8e:9a:c4:59:9e:e2:13:ce:d0:1b:
22:f0:34:05:11:ac:36:4a:9b:4a:d6:c9:8a:2b:a5:62:b2:54:
37:1c:1f:25:bb:ca:c9:bd:bd:ab:5d:0e:1a:65:96:06:98:6d:
01:ae:41:da:d7:a5:81:7b:59:8e:5c:0b:c4:dc:58:b4:f4:d7:
b0:a2:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:28 2025 by rpki-client