Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: Z8xNZf5GWQWBvCPD/GvG0ppF8zMWYmXHverNFF1G8Lc=
Subject key identifier: 65:62:68:A1:FD:29:E7:82:E4:45:32:15:C0:60:3E:5A:41:FF:75:51
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019923D5A674D876EEEC573C31A093F3982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:00:28 +0000
Manifest this update: Sun 07 Sep 2025 11:00:28 +0000
Manifest next update: Mon 08 Sep 2025 11:00:28 +0000
Files and hashes: 1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: +m7vDXl0/x37F/iMYSis8ta3irptW8R1AbD0+lNTC7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:a6:74:d8:76:ee:ec:57:3c:31:a0:93:f3:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Sep 7 11:00:28 2025 GMT
Not After : Sep 8 11:00:28 2025 GMT
Subject: CN=656268a1fd29e782e4453215c0603e5a41ff7551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:e8:d2:92:3b:e2:56:8e:ac:43:b2:a4:15:
57:e9:bb:f7:9d:78:7b:bb:83:79:21:03:83:0d:bf:
72:de:bb:ed:6d:ff:c6:93:2d:0e:d7:78:d9:23:c6:
8d:1a:a7:87:e5:46:6d:42:a9:44:34:b7:0a:3f:fa:
d3:5a:d1:23:cc:cd:dd:2c:d4:dc:e1:42:21:65:1b:
94:0e:05:f3:a7:85:df:6a:1b:65:f9:1d:7c:86:88:
88:57:95:37:9c:82:6f:fe:ae:a0:9b:3e:9a:5e:d7:
83:53:7f:4b:81:73:41:40:60:ca:20:52:2b:11:ba:
14:a1:7c:c2:2d:17:bd:62:70:69:39:40:ae:11:37:
8e:2d:a2:62:bb:7c:f9:0c:cc:0e:80:fe:61:8f:c0:
4d:f0:fc:a3:60:d3:95:28:ac:4e:fc:9a:61:15:cf:
ee:c3:4a:14:1e:d5:18:25:47:53:f8:74:cd:c4:47:
55:87:2b:e1:94:14:6b:ef:db:9e:a7:7e:8d:a6:3f:
e4:63:fd:e2:ba:d2:aa:c2:f7:61:04:9a:59:24:68:
37:54:b9:4c:61:aa:97:9c:dc:ad:61:8a:36:aa:87:
16:84:6f:b0:e8:c8:e7:15:5d:ef:fa:9c:4a:65:68:
73:94:4d:68:d8:f3:4b:f1:e5:9b:eb:49:60:f0:08:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:68:A1:FD:29:E7:82:E4:45:32:15:C0:60:3E:5A:41:FF:75:51
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:f4:3f:4b:cb:92:9a:60:0e:73:56:c5:30:ed:3c:85:5a:
71:79:32:52:ea:b6:78:43:98:d2:69:a1:bf:f0:74:ba:16:33:
e5:a1:81:ca:21:ce:77:a5:25:9b:f6:11:d0:f3:4b:17:71:31:
34:45:5a:01:8b:10:ba:08:2b:b4:b2:d3:34:dd:96:1b:ad:99:
20:58:7b:77:1c:57:52:76:c7:be:88:f5:2f:80:d1:23:fd:ac:
ed:e9:9e:b0:d7:f6:45:ff:16:c9:fe:74:28:6c:0c:be:84:1f:
ec:bb:ab:a7:8a:70:26:aa:d3:b5:64:6d:3a:f7:0f:f2:56:91:
fe:e4:c8:70:19:83:4a:27:b8:3c:42:fb:1c:72:6f:27:b9:a1:
6e:b9:7f:ca:aa:a1:0b:87:73:b7:90:d8:2e:8c:6b:19:bc:b0:
4f:a0:09:33:f6:8b:bc:29:cc:b5:fd:fc:51:cb:d3:60:53:cc:
40:8d:ce:2a:33:3d:33:94:b0:d8:e5:ca:ba:cf:eb:05:38:7a:
b8:8b:bf:a9:00:25:ed:3c:03:58:68:46:47:71:a0:43:63:77:
3b:c9:f9:3e:5d:22:db:81:19:f8:00:61:61:1c:3c:74:0d:3b:
27:de:f8:59:ad:45:fd:32:48:ca:8e:80:39:1b:9c:5c:cf:cd:
4c:30:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:00 2025 by rpki-client