Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: I8d3MTGNBqCYmaWN9bySGnmWj0isOqPcoZrhmPKbpJ0=
Subject key identifier: AC:CB:62:FB:38:67:65:00:FB:94:C0:69:5C:8E:10:E8:20:8B:38:6B
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 0198C949E70F7C75757E50D0D76E60CEDAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1645
Signing time: Wed 20 Aug 2025 21:02:00 +0000
Manifest this update: Wed 20 Aug 2025 21:02:00 +0000
Manifest next update: Thu 21 Aug 2025 21:02:00 +0000
Files and hashes: 1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: V7RmYBl5p5xo2IphIrVJnOJqTEMf5tw04jMWX7VUO3s=)
2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:e7:0f:7c:75:75:7e:50:d0:d7:6e:60:ce:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Aug 20 21:02:00 2025 GMT
Not After : Aug 21 21:02:00 2025 GMT
Subject: CN=accb62fb38676500fb94c0695c8e10e8208b386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:d2:53:bf:ae:25:f0:4a:4e:dd:2a:76:a4:
fa:0c:5f:76:30:8d:79:b3:9c:ee:8d:d8:77:91:63:
7d:2c:ef:34:8c:29:4e:4a:05:71:24:62:58:38:51:
5b:88:2d:38:0e:0d:75:89:e6:ff:b8:22:be:02:d0:
4a:61:9b:e0:9e:6c:ee:56:83:d6:64:e5:77:26:67:
72:d5:b7:3e:5d:3f:a6:d6:d3:db:9b:3d:1c:42:e2:
b2:05:cc:25:99:f3:2f:d6:9d:b6:d1:9e:0b:9b:41:
e6:ff:fc:31:5e:a8:b4:01:ef:ae:0e:64:53:1a:04:
86:d1:39:99:7f:9d:e3:cd:ef:82:6e:b5:f4:11:38:
cf:18:71:89:b8:e0:ad:61:79:62:f6:c5:82:23:8d:
76:5a:eb:99:32:ca:6a:a6:0b:82:7d:9d:39:4b:e2:
8b:b5:7c:30:5f:28:a9:66:b4:d6:59:45:31:dd:34:
73:30:e9:b1:cd:1f:f2:24:27:18:4c:f2:27:9a:95:
35:68:b3:5e:84:f6:a0:b2:82:96:45:4f:c6:f5:29:
f5:56:64:ea:74:01:05:f5:64:19:0a:1f:09:66:7f:
7a:3e:6c:c5:fb:13:3f:ae:a6:6e:b8:45:d5:2e:f6:
36:b1:24:86:9d:39:d1:03:d0:38:f5:ff:d5:ea:0d:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:62:FB:38:67:65:00:FB:94:C0:69:5C:8E:10:E8:20:8B:38:6B
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:b1:94:d9:78:d1:69:eb:e4:ba:ab:d4:a5:c9:7c:68:b2:
92:cc:91:f2:ce:82:28:ee:09:12:a4:09:ee:2c:f4:bb:b5:5e:
c1:46:f9:38:7b:de:cd:95:49:50:93:00:a6:8f:cf:75:65:d2:
78:9a:09:6d:3d:da:1b:c8:af:4a:3f:d3:43:50:8b:00:8a:63:
26:a4:aa:d1:fe:9a:9d:ea:85:bd:f5:a8:14:ac:3a:ae:7b:f6:
af:19:33:4a:5f:82:39:99:36:ff:23:e8:d0:cd:51:16:79:b1:
c9:f7:08:98:cc:61:e8:96:31:d4:76:6f:51:99:5c:c5:0a:73:
6a:47:e0:f5:b8:b9:de:78:ca:c5:78:9e:32:9d:d7:74:b8:5b:
66:73:56:96:79:34:34:e8:43:86:4f:f5:13:1d:a9:7f:47:34:
93:6a:e0:f9:c9:65:b8:f0:23:f9:d8:80:e6:2d:eb:eb:5e:d9:
fe:0d:1d:66:90:06:20:9a:45:a8:c0:50:1c:cf:09:a8:a7:ce:
a9:b5:52:e0:dc:ab:2b:17:3e:48:cd:6d:b1:d6:af:f0:24:04:
05:d2:f2:bc:b8:f4:cf:1c:20:b1:27:74:44:95:d5:31:38:19:
59:aa:c0:1b:e5:1f:64:a7:a2:b9:4d:5e:ed:ef:19:25:f6:52:
34:b2:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:06 2025 by rpki-client