Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: NS6G/3CvfcaU5EQbrYVBy5Z/jFug8ZB9wi8OYPSJk2A=
Subject key identifier: 86:8C:D6:D4:A3:43:AB:00:DC:C0:FA:18:93:20:AB:CE:16:F8:2E:B4
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 01992E90B0FDDD2E4C2B0423B3781D9B4DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 1694
Signing time: Tue 09 Sep 2025 13:00:58 +0000
Manifest this update: Tue 09 Sep 2025 13:00:58 +0000
Manifest next update: Wed 10 Sep 2025 13:00:58 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: 0uTa+mEKmAVDmrWABCecJNVP71eIzNyN4q7KfDjMZJM=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:b0:fd:dd:2e:4c:2b:04:23:b3:78:1d:9b:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Sep 9 13:00:58 2025 GMT
Not After : Sep 10 13:00:58 2025 GMT
Subject: CN=868cd6d4a343ab00dcc0fa189320abce16f82eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:39:24:75:92:47:7f:24:49:12:8e:5f:07:
64:0d:01:4b:fa:39:ed:16:24:7b:c7:3a:57:02:9c:
a7:ed:bc:91:e2:b2:85:03:d6:04:3d:26:75:7f:04:
91:cf:31:0e:7d:8b:db:32:98:22:ad:ea:9c:7d:a7:
88:5e:75:e2:75:80:dc:76:3f:29:b9:a2:7d:54:21:
e0:c4:6e:f7:8a:95:3b:a7:07:88:c8:73:27:9e:a2:
2f:05:85:15:40:33:07:0f:37:4c:10:6b:62:b8:be:
9d:43:71:0c:ac:0f:c1:9a:1e:c7:5a:0f:de:71:e0:
7a:41:09:b9:be:e7:0c:93:18:d4:b0:30:9e:a1:60:
b5:2e:54:c4:e4:dd:99:5d:10:65:30:9a:8e:9a:7d:
1b:c0:e1:a6:b5:ff:09:77:90:32:af:0e:e5:d9:50:
8b:40:56:fc:25:ab:b8:a0:7c:f7:b5:84:f2:38:65:
91:a8:b1:8e:10:df:fb:dd:ad:3a:58:8b:a1:35:a8:
5d:86:0d:00:fc:59:91:3f:a3:14:61:a4:ba:38:d7:
13:9f:5d:04:1d:13:de:04:91:db:29:96:d2:cd:a5:
3c:46:bb:0f:b8:07:72:21:45:42:a6:4d:2e:e9:53:
bc:d6:be:c0:97:40:11:73:e1:17:32:4f:f1:f7:ea:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:D6:D4:A3:43:AB:00:DC:C0:FA:18:93:20:AB:CE:16:F8:2E:B4
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1f:a0:36:c3:af:9c:d3:23:cd:7b:3b:32:58:62:d4:fc:42:
d3:15:8a:0f:ee:29:b4:df:5c:68:52:bf:74:98:94:7b:e0:b5:
9e:65:22:c8:90:79:4c:de:92:cb:d8:79:79:52:a7:a6:d5:23:
63:59:d0:cf:61:e6:57:b3:76:97:6d:e5:62:0b:6c:80:86:98:
33:89:d1:1f:12:08:66:4a:70:da:cb:77:00:fc:ae:ec:37:49:
0c:99:7c:44:0d:ae:0f:37:2d:28:3d:d6:e0:b8:00:d6:d3:1a:
83:77:e7:30:fc:33:90:39:2d:c2:96:62:10:20:3d:5e:bb:1a:
f4:eb:f0:f7:94:58:33:16:11:ce:77:66:bf:1d:64:7c:4e:1b:
7f:d4:84:2a:17:b7:96:05:ae:20:a2:8e:5f:93:3e:7d:81:3a:
0a:56:49:0c:0f:c3:d8:38:61:18:ef:f8:83:c0:bc:be:98:f7:
d7:c4:ba:b7:53:4d:b7:af:a7:ba:6a:8d:6f:f8:3c:7d:e8:e0:
fd:e7:36:61:6c:89:e0:ae:f9:48:fc:01:fc:75:90:57:b7:c1:
da:5f:8d:50:99:64:d9:57:49:ec:2f:56:8c:1d:28:68:f0:88:
9c:60:92:36:ce:46:89:d2:c5:11:b4:30:f6:4f:af:62:c7:26:
be:46:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:55:52 2025 by rpki-client