Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: ZMGqxxM0HAJ4ZFvjDiYtdUHKh+au7GtaSzWAInixfjg=
Subject key identifier: BE:BB:1F:36:B8:44:FB:41:B4:F6:87:22:46:25:72:76:34:AB:7B:CA
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 019923A09B683B73299FAF51AA928656A8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: 0217
Signing time: Sun 07 Sep 2025 10:02:31 +0000
Manifest this update: Sun 07 Sep 2025 10:02:31 +0000
Manifest next update: Mon 08 Sep 2025 10:02:31 +0000
Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: JSvHRfo+UlVSfXAfOi1DUihQn2SAuZJhn0L+Idc7Gfw=)
2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:9b:68:3b:73:29:9f:af:51:aa:92:86:56:a8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Sep 7 10:02:31 2025 GMT
Not After : Sep 8 10:02:31 2025 GMT
Subject: CN=bebb1f36b844fb41b4f687224625727634ab7bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:b3:6f:05:c1:e4:69:e4:a4:3f:16:53:88:
d4:ab:19:ee:43:db:e4:c9:da:34:d8:5b:44:42:73:
58:3b:41:c5:d0:0c:ae:e5:4f:b2:39:a3:c4:2b:ec:
1a:67:df:f2:9e:bb:6d:2a:5e:b3:3c:34:2c:18:f0:
e6:83:88:00:bb:0d:1d:f2:95:82:13:27:ba:0e:1a:
e5:03:24:22:1a:31:72:8a:3d:92:d0:4e:ae:41:f3:
fd:03:49:81:60:b5:96:4b:e0:7e:e3:a7:bf:16:ea:
2c:62:ec:9b:d8:e6:06:86:a7:03:98:43:da:41:09:
93:15:d3:39:bc:e8:f6:8c:47:52:b7:27:34:59:ef:
c2:ee:cf:7e:58:ca:dc:0e:b8:0f:51:61:ac:75:7f:
98:82:21:d7:77:19:41:98:4c:45:0b:8f:6c:3f:4a:
e4:bb:29:ab:32:13:6a:47:a7:af:1d:c0:c7:88:56:
87:e0:bc:91:d1:e8:c8:e5:63:27:a5:4c:f7:cf:1f:
a2:d7:89:a8:ce:55:3c:bb:05:2f:8f:9b:11:1e:99:
15:6d:65:e1:2b:4d:1d:a0:21:22:34:74:26:5f:3f:
ef:a5:a2:1e:5d:30:48:58:50:06:6f:36:f1:4f:30:
56:47:4a:ae:9b:a2:2f:e2:f2:b9:3a:c7:06:39:66:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:1F:36:B8:44:FB:41:B4:F6:87:22:46:25:72:76:34:AB:7B:CA
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:a7:2b:c4:7f:2b:85:e5:d1:e6:ca:1c:58:41:16:6c:02:
4f:90:6c:a0:49:ff:e9:2e:ec:d2:7f:47:cc:2d:2d:a9:52:1b:
28:43:7f:b3:78:e8:3c:e7:b2:0b:49:9c:3d:de:8c:b9:58:aa:
19:cd:f3:ff:6b:1c:6f:9e:f2:38:60:57:a9:03:db:24:c1:de:
84:67:63:0d:56:50:45:1e:4f:8a:c0:07:ec:ee:27:c1:9f:22:
da:65:23:49:9d:4e:6f:d2:2d:65:97:08:f1:57:36:7b:90:e9:
29:14:d6:a8:77:36:86:e6:87:ac:7b:00:77:fe:0d:fc:32:7c:
4a:41:a3:d2:29:c8:5d:5f:93:93:1d:d6:d1:fc:fa:01:61:ad:
5a:0b:3c:5a:15:4d:65:2e:e8:10:b2:d6:46:f5:53:7e:84:d5:
5d:43:f9:48:ff:42:fd:4a:c0:31:f9:08:19:05:0e:ff:4a:b6:
0f:c4:07:a6:db:be:70:8f:2c:c2:b4:b7:18:ae:b5:a2:87:65:
4e:43:7b:6f:2f:bd:75:ad:b4:2e:15:02:fd:17:f9:d4:d8:17:
06:15:9f:8d:8b:48:fd:17:4c:f6:e6:a4:23:ef:0a:f6:46:aa:
d0:f4:a3:ae:24:18:17:20:c7:a8:6a:17:3f:82:5f:47:70:08:
94:a4:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client