Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: RcnDyj17MElevanCyC4BX2DhM4zUXJso6xKvQRGn/rY=
Subject key identifier: BA:AA:B9:CE:55:A9:9E:16:24:90:43:92:A0:CC:55:F8:62:AC:FF:D5
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 019922FA10857CF318611899D0A13D19911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0F5E
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: Pueg4vJUSGCLC+TdTdlGNj/gb3f2Oo0oI9Ekvki2C3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:10:85:7c:f3:18:61:18:99:d0:a1:3d:19:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=baaab9ce55a99e1624904392a0cc55f862acffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:93:f1:15:c0:e1:c9:34:98:5c:31:16:b6:
98:43:20:58:6e:bd:f1:31:03:69:3b:c2:db:ca:92:
c3:39:16:02:f0:60:b5:0b:2e:e1:01:bb:5a:c2:98:
10:80:0a:3f:dd:9c:30:42:66:49:04:e4:9b:15:4a:
c2:ea:e0:49:3d:60:45:fe:ce:1d:14:18:28:f0:2f:
2e:76:89:28:b8:d7:2a:85:d4:fe:3e:ef:d4:ed:25:
88:9c:6f:d8:ea:8d:eb:42:ac:9b:eb:a5:19:d6:5f:
25:ff:e2:19:93:c6:2f:ac:be:01:55:25:ae:5d:5d:
c6:58:38:a7:7a:03:d0:40:c3:1c:af:3e:4a:0e:a7:
fa:4a:85:77:9a:f0:97:4a:2f:3e:3b:0d:f9:be:e4:
b3:6e:6c:8f:6b:29:d5:05:6d:4d:da:ef:d1:9e:54:
f7:ac:05:9a:fa:ff:84:b9:6e:8a:a0:7e:d1:7d:65:
0c:0d:5e:5d:c3:59:63:a2:a8:71:67:45:f4:94:bc:
19:66:2a:ee:5a:5e:5c:bd:49:19:0d:c0:5c:92:39:
50:1b:ba:a6:f1:74:d8:82:2b:d2:d1:46:7c:ba:99:
8a:65:df:c9:91:da:ff:48:c7:88:7e:4d:d0:b6:8a:
53:5e:8b:64:1d:99:bb:67:25:0b:1f:b7:c9:91:5c:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:B9:CE:55:A9:9E:16:24:90:43:92:A0:CC:55:F8:62:AC:FF:D5
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:d3:8e:94:b6:67:43:db:53:23:af:fb:9d:a8:7c:2d:2b:
07:6c:a3:97:f0:64:e0:34:fb:07:81:35:6f:f4:01:bf:5c:a1:
c6:3f:35:da:53:3e:e6:c8:8b:4a:3b:34:6f:7b:18:4d:49:92:
84:10:85:cb:0a:23:0d:0a:fb:c2:66:5c:2e:34:ba:fb:f0:79:
e6:1a:1b:63:12:7e:f3:be:ab:15:ba:af:23:6a:1a:b2:00:fa:
62:df:28:47:4a:cf:64:3f:86:d6:cd:0d:0c:4a:bc:7d:59:8f:
d3:e9:18:7a:a4:3b:8b:df:1a:b1:eb:f9:54:88:4b:27:ac:d9:
29:58:cc:74:e7:a2:65:0e:ed:c2:b7:68:7b:2e:ad:46:12:4c:
db:5d:65:41:58:fa:b3:b1:c7:4a:f8:4a:65:68:89:c3:da:58:
34:cb:40:94:67:e3:e5:57:4b:c1:16:f1:c0:bd:09:33:44:aa:
d6:a6:0b:b9:85:90:8f:db:a0:6e:6a:b1:96:28:4d:81:2f:7e:
62:fe:dc:b1:28:28:aa:43:ab:43:ea:d5:9b:08:e1:fb:28:e0:
64:e8:ae:f3:26:b2:fc:ee:ed:03:4f:11:69:c1:07:f5:11:95:
72:ce:a1:cf:9c:62:ea:19:df:63:91:4a:4b:e9:50:c0:43:e1:
fb:52:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client