Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: sxmpMA0TXG7Pno4ekERn2fot1UMtFPQ1ygypGvMQocg=
Subject key identifier: 2D:43:B1:24:A0:9C:E8:34:C7:32:C7:E3:19:A4:34:7F:2C:70:A7:A8
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0198C9ED6EF5E109CFC5F6AA05DB288C24F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 08F4
Signing time: Thu 21 Aug 2025 00:00:37 +0000
Manifest this update: Thu 21 Aug 2025 00:00:37 +0000
Manifest next update: Fri 22 Aug 2025 00:00:37 +0000
Files and hashes: 1: VFYdZxVFCdCpkpyuxb39UT4cTZU.roa (hash: 9daq5hdLe7own+qRWKzM9da7RfcLhRIst1jMZCbP+lo=)
2: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: QYLN2XXtZ4KSNLarXBf+YDOtwk99+fmD8py2UfGOo30=)
3: wWNImYV_qusP-8tj830GeFyHo-0.roa (hash: TFb93bClGCsSwFF6uHgZAuz4lfTVxVkQiC5YvyRCimQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:6e:f5:e1:09:cf:c5:f6:aa:05:db:28:8c:24:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Aug 21 00:00:37 2025 GMT
Not After : Aug 22 00:00:37 2025 GMT
Subject: CN=2d43b124a09ce834c732c7e319a4347f2c70a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:12:48:d3:96:7d:4d:17:0e:e1:37:fb:45:
64:c8:a4:b3:fe:fb:e9:4a:9d:bd:5e:64:4f:04:86:
e1:8f:2d:91:a8:e7:6e:ae:b9:4c:5a:82:88:6b:37:
d9:ad:25:5a:9b:17:c2:de:64:02:1b:5f:0c:d0:d0:
24:b2:0b:8e:c3:81:2d:09:48:4a:2b:34:57:50:d1:
67:06:6c:b7:51:3f:e6:61:5e:87:d5:fc:da:7e:c0:
43:27:02:7e:bd:ce:fa:5d:56:cc:cb:0a:48:fd:ae:
79:ce:24:79:d4:1a:17:16:6d:15:49:18:a1:c9:64:
32:c3:25:fa:7d:58:0a:6c:3c:86:13:4a:db:8d:21:
b2:57:b6:01:cf:78:12:86:2a:74:a0:05:e9:90:f5:
4f:54:cd:5f:a0:1f:be:67:86:4f:fd:7c:ac:c2:b0:
0f:f1:5b:16:60:47:dd:68:ab:13:ed:01:38:cd:2d:
17:b0:5f:3c:ae:3b:09:f5:b9:a7:70:31:b1:b3:00:
1b:40:6d:84:2f:b0:92:f1:a7:8f:dd:03:8f:f9:a5:
ac:a6:9b:eb:2d:29:5f:b5:0b:e2:55:0b:27:64:0d:
8f:b9:f5:c2:53:c9:df:b2:34:37:b9:74:fb:64:71:
64:5d:f3:a9:73:8a:32:76:63:04:d5:b5:0a:5c:7c:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:43:B1:24:A0:9C:E8:34:C7:32:C7:E3:19:A4:34:7F:2C:70:A7:A8
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:24:0f:75:9c:4c:a3:3d:ec:5b:bb:f9:7e:94:0c:bd:20:4f:
8b:57:ab:e7:91:d0:2d:b2:e7:6d:d9:29:e4:cb:d8:84:34:2c:
11:a4:89:1f:11:ae:3f:55:83:55:46:6d:da:e6:63:8f:bd:c3:
aa:69:98:c4:10:8f:27:f6:f0:9f:18:b5:f6:f5:28:8e:3a:d8:
07:a3:51:f2:b5:19:0a:47:a8:d7:dd:44:88:be:fb:3e:d3:3f:
28:b0:dc:fe:1d:1e:e5:ff:c9:44:4c:80:90:07:3b:98:47:4c:
e5:f5:49:79:a8:75:38:96:4c:7f:f4:69:cd:52:8d:62:f6:3d:
0f:50:4f:7d:c7:71:fb:eb:b7:b8:f9:f0:33:7a:59:1a:2d:ae:
ba:73:a3:41:c9:5a:88:be:32:b8:82:59:b0:35:32:b8:95:21:
45:2f:b6:07:e6:ab:5c:17:49:e2:6e:41:22:53:f1:e9:4e:72:
32:e2:74:0b:c3:80:f2:b1:d2:2c:e9:9b:52:08:4a:f0:1b:02:
0c:28:76:34:77:6f:bf:f9:c6:d0:cd:4d:fd:67:17:8a:5a:29:
bb:db:74:af:20:87:ed:f7:16:5a:88:1c:b2:4b:58:c5:e0:8f:
40:5b:45:18:01:4e:98:aa:ef:92:39:f0:04:96:a2:c7:c4:27:
07:81:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:33 2025 by rpki-client