Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: Kg1PFpGNhjnzwR3fSK1Z1tcyc+nDA4+xbeTZEuVUXmU=
Subject key identifier: 36:9F:C8:46:45:E2:82:C6:0B:B9:C9:47:B4:D1:ED:77:64:91:CC:D1
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019927B2FC8EFD0A9FDC91D3272CD87528F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 129A
Signing time: Mon 08 Sep 2025 05:01:05 +0000
Manifest this update: Mon 08 Sep 2025 05:01:05 +0000
Manifest next update: Tue 09 Sep 2025 05:01:05 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: XyZ19Rr77pGcNNU/+9XYE0rZqaN+sSnNECFkN2X82P0=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:fc:8e:fd:0a:9f:dc:91:d3:27:2c:d8:75:28:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Sep 8 05:01:05 2025 GMT
Not After : Sep 9 05:01:05 2025 GMT
Subject: CN=369fc84645e282c60bb9c947b4d1ed776491ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:b6:45:79:33:f8:d1:e5:b9:cb:c7:a7:2b:
2d:c8:d6:e5:62:df:14:33:10:69:6c:a1:40:51:8d:
c2:c5:21:c0:ca:0d:fb:3e:b8:4d:c1:17:21:c2:73:
f8:8a:4b:b3:b7:a7:aa:d8:7d:1d:92:e3:29:e4:1b:
a3:f4:f5:73:78:7b:f5:45:53:eb:41:e6:ea:2b:4f:
eb:35:0d:1f:0e:44:ab:08:c7:0c:9b:35:b6:8d:1a:
e3:97:9f:a6:a2:64:41:50:7a:14:78:a4:8f:38:ac:
98:05:68:58:d9:cd:d1:8a:f2:f9:62:8c:88:60:44:
ae:2a:e8:99:85:29:fc:fa:74:ff:6e:ef:c8:02:5e:
93:be:8e:53:81:10:c9:b7:9c:a3:f4:e0:a8:86:82:
fc:52:53:e3:65:d6:45:b6:37:e9:db:ce:c1:35:02:
9a:e5:43:0a:ee:d6:42:50:cf:91:e9:25:09:27:00:
05:01:71:35:98:e1:e3:cb:7e:44:62:e2:e6:9e:22:
71:41:71:ae:71:d3:a5:a5:c1:f8:18:ec:80:fb:b9:
24:2e:dd:8e:f9:57:e8:1d:e2:02:bb:4e:a0:ce:89:
0f:21:69:52:4c:c8:4d:0f:2b:cd:d8:59:b2:5f:31:
a4:86:4a:82:60:ee:70:3c:8e:4d:10:cc:97:61:d8:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:C8:46:45:E2:82:C6:0B:B9:C9:47:B4:D1:ED:77:64:91:CC:D1
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:94:fd:ca:a6:fd:75:0c:bd:5b:21:1a:10:d6:0e:bb:35:a8:
a4:2c:d8:5f:27:5b:f3:79:b0:55:57:e4:60:b3:fc:b9:36:4c:
c6:59:fd:c5:d4:96:4b:c9:21:a9:cc:8f:6b:80:1e:20:6b:aa:
65:ec:88:30:42:04:b6:e7:ff:a2:4a:03:57:a1:42:fe:0b:96:
00:e6:ae:e8:8e:9c:d5:1f:d8:aa:6e:23:2e:df:37:5f:ab:96:
46:9a:db:4d:ba:bb:de:bf:d3:4d:94:ca:77:fc:f9:9f:27:c1:
b6:f8:50:de:2a:53:6e:a3:a6:38:5b:55:53:ab:37:bd:e4:cb:
7f:4b:7d:ab:0f:24:57:39:ee:ec:e5:57:ec:4c:9c:62:f5:49:
4a:90:af:63:8a:a9:ee:5a:89:b7:51:6f:bf:50:18:e6:7f:43:
af:46:1b:fe:20:5d:cf:a3:c6:d6:4e:2e:78:4b:1d:24:30:f4:
3b:c5:a3:20:d9:b9:9a:fe:fc:89:4a:a9:8e:b3:bd:2a:6c:1b:
66:0d:96:60:f6:cc:50:b8:e0:3f:25:7f:7b:7f:5d:5a:b3:89:
54:a0:06:5b:25:fd:62:c5:11:2d:74:6f:24:2a:0e:13:1f:1f:
45:b5:36:5c:e6:ae:69:67:b6:fe:a9:46:bb:bc:4a:bc:3a:10:
06:52:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:54:53 2025 by rpki-client