Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: mCTeqgN1mc16gn61FwCzxxbEBY/5PYxPaUSPxxcLOG0=
Subject key identifier: 30:0C:61:A2:AC:BD:06:AE:CD:D6:45:AD:81:97:09:45:13:25:8C:77
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 0199239EFE6C7AF84EBAC6BAC8002E7FED55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 114D
Signing time: Sun 07 Sep 2025 10:00:46 +0000
Manifest this update: Sun 07 Sep 2025 10:00:46 +0000
Manifest next update: Mon 08 Sep 2025 10:00:46 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: HdXCZ/KzhZDhBUCBMkm66hP1jUiRfDjnTW9cdo/Ll7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:fe:6c:7a:f8:4e:ba:c6:ba:c8:00:2e:7f:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Sep 7 10:00:46 2025 GMT
Not After : Sep 8 10:00:46 2025 GMT
Subject: CN=300c61a2acbd06aecdd645ad8197094513258c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:26:cf:90:6b:9a:a5:fa:a5:10:b2:99:c5:
c0:fc:1a:00:12:ae:9c:a5:b4:94:fd:f5:16:63:84:
00:81:01:ac:8c:83:54:ab:e6:c3:1c:fd:3b:83:63:
ca:2e:97:6c:44:a5:9f:70:41:5d:c5:6d:9a:3b:5e:
a9:a3:9f:2a:df:f1:ae:f9:a7:bc:7d:7b:32:86:6d:
e1:99:2f:8f:9c:2f:fa:06:80:bb:49:f1:e0:f3:2c:
68:3a:ea:f4:59:64:c4:a4:43:ca:88:77:b1:2b:36:
28:f6:8a:81:a3:83:11:7b:5f:a6:e9:4c:0d:d9:7e:
6e:82:a3:49:75:52:4c:4d:07:14:96:29:dc:c1:cb:
75:63:2c:e6:0d:13:0e:7d:b6:c4:07:cc:db:d1:41:
b2:a4:5a:72:e9:86:8c:be:47:59:90:c8:89:1e:2e:
6b:84:71:c8:1f:95:d3:3f:f9:0f:48:b4:a3:ba:34:
92:3e:59:58:8c:14:2c:a2:e0:56:1e:17:03:a7:6f:
aa:07:84:c1:af:9e:dd:e3:0e:70:e0:85:e9:88:5e:
4c:6f:68:7d:48:fb:75:22:d7:c9:75:13:51:2d:68:
96:eb:f2:e4:57:9b:9a:ad:95:37:26:cf:4b:d1:b8:
87:00:3a:28:c9:05:d0:fd:93:f8:65:c0:53:32:79:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:61:A2:AC:BD:06:AE:CD:D6:45:AD:81:97:09:45:13:25:8C:77
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:80:e2:28:46:7e:c1:ab:d2:39:b4:a1:30:b0:dc:24:fe:
54:43:cd:ac:88:07:42:bf:55:2a:e0:97:16:9b:5d:46:f9:39:
d9:31:d8:45:05:43:5e:a0:d8:f2:07:b0:dd:d9:74:48:46:4a:
fc:7d:e4:85:28:0d:96:63:70:f2:8b:67:a2:d4:ca:b8:6d:7b:
8f:8f:6d:c9:f3:71:a1:39:24:fe:e4:96:7d:ac:49:db:dc:9a:
8c:87:16:9f:90:9b:06:4b:db:c9:5b:97:d6:bc:60:b6:aa:45:
cb:e8:a8:88:79:42:f5:e1:df:ce:a3:61:0e:bf:c4:e7:07:11:
4b:c4:90:ea:4a:3b:08:cc:28:01:9a:a0:48:dd:0c:15:6a:b6:
9b:d1:0b:62:7f:68:b2:ee:fd:f0:ea:6d:3d:30:5d:ae:52:99:
c9:6d:26:0d:98:13:e2:82:8e:62:36:ff:20:dd:37:51:14:d3:
07:6b:0c:32:cd:d4:29:e1:d9:0f:df:be:66:16:34:33:97:50:
28:40:2b:ff:c1:32:3e:e7:a3:1b:e0:06:8e:1c:59:31:bd:ea:
ef:88:a7:3b:fc:87:55:4d:de:f9:e1:91:10:c7:38:5d:77:94:
66:45:e8:15:79:68:b1:38:9d:c8:c8:c9:d4:fb:d6:05:4c:9b:
5a:cb:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:10 2025 by rpki-client