Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: i/BK6rW9kuB3Xnrcg1erLsjYiTYpj42jhPGJatIXpG4=
Subject key identifier: 8E:1F:C9:93:9C:9B:DD:99:EA:49:4B:96:8E:08:35:9F:02:42:75:77
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0199221E4CFCD49C5614C3F73840581CDBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0518
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: /DwW2xoCBFgTzj72CquYVOGWu6FmpksP60TemgclfX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4c:fc:d4:9c:56:14:c3:f7:38:40:58:1c:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=8e1fc9939c9bdd99ea494b968e08359f02427577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:08:f9:0a:f5:98:28:10:0f:46:2f:d1:71:
fc:15:d1:a6:bd:92:6d:c1:6b:af:8c:77:76:d8:b8:
3a:59:05:4f:0d:ec:e9:3f:99:64:9b:d6:44:50:85:
21:53:1c:b0:44:49:54:8b:56:28:3f:53:e1:bc:a3:
da:a0:c8:57:00:f5:36:34:4c:db:ac:3a:57:5d:78:
ff:d4:79:94:ba:de:aa:bd:37:20:05:d3:0a:18:3c:
0b:ff:79:61:1e:1b:99:d8:25:e0:c9:93:09:2a:0c:
ce:55:b6:49:8f:23:88:e5:27:30:7f:f0:b3:42:01:
aa:87:57:35:ba:8d:44:ba:16:7d:65:31:04:47:62:
d2:44:b4:b7:da:58:42:f7:63:76:8c:6c:a3:ec:91:
7b:c5:b3:0f:e7:5c:05:63:38:e3:41:ad:79:d0:39:
21:cb:5e:6e:fb:71:5a:9f:b9:97:0c:e7:73:10:c5:
83:44:4b:0b:65:54:08:5f:00:3d:89:e2:10:1e:23:
aa:0c:9c:ab:0e:61:63:b0:8d:5f:fd:9d:02:6a:3f:
1b:16:4c:01:b5:a1:f0:e6:77:be:6b:5d:50:b4:3a:
c5:14:be:6d:d7:ce:e7:86:bf:56:aa:3a:e4:c0:3c:
0f:b1:0e:47:02:ee:4b:36:6e:bb:8d:87:c1:2a:da:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:C9:93:9C:9B:DD:99:EA:49:4B:96:8E:08:35:9F:02:42:75:77
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:f1:aa:82:06:19:7d:e2:0f:81:4b:3a:f9:71:7c:c4:2e:
c2:4a:9a:9a:5f:62:8a:d6:0f:89:5b:2c:1e:3f:6e:20:2f:1c:
32:4e:26:2c:d8:40:9a:f0:73:98:1a:00:7f:1c:3c:21:40:86:
97:cd:f4:25:ae:95:fb:cf:f7:fa:0c:71:e5:6a:91:87:78:98:
44:66:e3:5a:78:8e:cd:99:0c:25:fd:76:70:68:da:55:7d:20:
04:18:ff:91:25:69:dc:d9:53:0d:7c:fd:64:9e:49:50:74:ed:
0c:a3:7c:7e:e1:11:32:33:6b:c9:17:02:ff:c7:78:11:c0:4d:
05:43:b8:72:e8:a6:b4:05:e9:c9:af:bb:b2:08:b6:dd:5e:f2:
fa:d0:de:e0:a9:ed:38:ae:9c:72:9d:5c:97:e0:4b:01:69:28:
0f:c9:62:eb:73:e4:c1:37:7b:ab:30:71:c5:73:61:af:cf:d6:
5c:87:c6:b5:e2:af:50:9a:83:ea:5b:85:52:50:30:93:0b:75:
26:16:bf:db:b8:4c:67:61:f7:b9:24:52:cd:54:61:19:45:3d:
98:ba:94:91:c2:aa:34:68:d1:f6:e5:46:b0:f8:f0:0e:49:a3:
d1:37:24:12:4a:c3:66:96:84:c3:ae:67:99:ca:80:77:06:1e:
14:8f:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:48 2025 by rpki-client