Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: INjBex4vE/f9j0PSyj1GcX7WjRJowxbxWb2aEMy++ZU=
Subject key identifier: FD:3E:CC:10:65:9B:8F:1F:B1:C1:AE:FA:2E:B0:49:71:72:F7:94:2A
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019921E76ED355E321AE9ACCE0622870DAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 02:00:39 +0000
Manifest this update: Sun 07 Sep 2025 02:00:39 +0000
Manifest next update: Mon 08 Sep 2025 02:00:39 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: Z1Y4HYNf9fxaVuJR5WvP99jWwPyuU25+biEsFtVm3VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6e:d3:55:e3:21:ae:9a:cc:e0:62:28:70:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Sep 7 02:00:39 2025 GMT
Not After : Sep 8 02:00:39 2025 GMT
Subject: CN=fd3ecc10659b8f1fb1c1aefa2eb0497172f7942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:19:a4:e4:b5:f4:d9:ca:32:aa:bb:30:94:
e2:cd:48:55:f6:17:33:de:3c:f1:a4:93:ad:2b:b6:
52:b4:00:fd:1d:4b:6d:ba:96:58:3a:81:f3:d5:dd:
18:ac:b3:57:56:7c:b5:f6:49:00:77:d3:e0:44:8d:
a0:df:fe:15:a9:2b:38:66:8b:83:30:5d:ac:89:bc:
14:39:9f:b1:4b:be:c9:39:26:5e:ed:1d:27:c4:9c:
c2:62:df:cd:98:43:75:e6:cf:68:9c:94:2f:dc:69:
70:24:87:bf:f1:41:47:08:9f:3d:b1:4b:d9:b0:5c:
02:08:46:44:3c:2e:83:c6:b5:c2:21:6e:42:b1:c0:
ec:e9:40:81:a4:ca:36:70:48:95:95:f1:aa:58:34:
9a:b7:ce:e5:4b:e0:2e:57:7e:24:63:4c:90:f8:ea:
cd:8f:88:bd:35:93:1e:0e:8d:ec:36:17:14:f6:2b:
49:9d:45:39:47:41:af:d0:70:51:72:fb:72:5e:63:
f6:91:9a:11:77:e9:9f:3b:b2:98:94:7c:b1:83:dc:
2f:34:3d:77:c0:4e:6f:88:56:4a:c1:c6:b2:bd:29:
f3:f5:57:f8:63:8e:af:54:1d:5a:0e:54:34:97:e1:
c4:bc:8d:b9:88:96:d2:4f:3b:b6:88:4c:62:b5:c2:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:CC:10:65:9B:8F:1F:B1:C1:AE:FA:2E:B0:49:71:72:F7:94:2A
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:34:81:91:8b:8d:ab:81:5a:28:38:a5:fa:05:ec:8b:9b:eb:
b0:78:0d:32:d3:1b:fa:f8:3b:4a:cb:5b:b3:8b:ba:06:36:ad:
30:01:3a:4a:a7:2d:30:91:c3:54:8a:f1:b3:24:28:de:fd:51:
8c:fc:7f:42:79:6a:50:28:95:e4:71:09:72:1c:be:5d:ea:b6:
04:09:fb:aa:ef:e0:42:b5:bb:6f:35:8e:06:3d:0c:f7:7e:b7:
d8:55:00:16:55:51:8f:d5:e0:d0:26:2a:0a:3d:d5:34:cd:a0:
7e:7d:4b:d6:6a:17:94:85:e9:f2:47:84:e3:a1:c5:c0:4c:80:
bc:a2:bd:41:29:8b:05:67:11:b7:67:1f:2f:d0:a0:88:bf:83:
b5:69:38:1c:ae:30:ec:2e:f0:96:05:68:17:9d:3a:25:11:12:
af:88:28:f9:8b:95:fa:f9:c6:79:ea:47:ed:33:88:d1:37:56:
f2:55:7a:5b:15:7c:b7:4b:13:47:53:b0:bc:00:c0:61:68:d0:
f2:d8:e9:c7:7f:e0:f3:d7:b2:ad:b9:67:9d:a4:cd:2c:5f:45:
2c:a8:df:8b:48:e2:f9:e9:b0:c6:13:24:11:e0:a6:04:33:5f:
52:e9:3f:17:74:4b:c8:d9:45:bb:fd:7a:a7:43:ce:d0:72:51:
4f:67:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:43 2025 by rpki-client