Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: l+G847z4CrRKAFcwUJ0Ji7DIrlw82a+fXKkWvoV5mvI=
Subject key identifier: 67:C6:84:85:35:13:DE:8D:D2:1B:24:C1:34:02:4D:95:E4:AA:23:8A
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019921B141C40989B596964960981E8B5D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0E68
Signing time: Sun 07 Sep 2025 01:01:28 +0000
Manifest this update: Sun 07 Sep 2025 01:01:28 +0000
Manifest next update: Mon 08 Sep 2025 01:01:28 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: HDAPSbfK9Vcyyp0Z2lkD3AAf/imx7NRmsHdE317Lkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:41:c4:09:89:b5:96:96:49:60:98:1e:8b:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Sep 7 01:01:28 2025 GMT
Not After : Sep 8 01:01:28 2025 GMT
Subject: CN=67c684853513de8dd21b24c134024d95e4aa238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:bb:54:a4:95:9d:00:ee:e6:06:e6:14:6f:
5d:d2:94:ea:3d:a0:bf:da:9e:a5:03:56:3d:d0:57:
f5:b3:01:cd:2c:a7:9a:a2:68:32:e2:ac:7e:81:f2:
ec:e6:8e:d3:c8:29:ab:16:44:00:67:34:4d:1e:c4:
7e:2e:a4:24:56:3c:d7:18:3d:ef:50:a8:75:98:da:
41:08:0c:b8:5a:6d:40:81:50:45:58:72:7c:8b:c6:
1a:14:e7:22:32:3f:a0:7a:8e:75:14:2a:e5:0e:ad:
dc:74:7a:c3:2b:06:7e:40:2d:d1:a6:70:31:74:c7:
21:ea:b2:7e:b2:34:b6:fd:e8:cb:6f:d6:a3:da:66:
ba:81:5a:49:4f:17:e5:0f:c9:1f:f1:0f:96:6d:fd:
3a:7f:6e:f8:20:32:22:d9:21:43:76:ab:c3:6f:d7:
49:b1:d7:d6:60:89:66:b2:d7:a5:5c:15:c2:ca:4a:
ed:83:40:20:09:d8:da:82:cb:4b:ff:89:42:e1:1e:
54:c0:99:1c:6f:b2:8d:4e:43:67:f5:96:2d:33:ed:
06:41:37:1d:79:75:50:e7:d2:ac:e9:79:8a:bc:d0:
86:06:01:79:04:df:e0:2f:ff:c0:72:b6:b1:5e:0d:
64:f9:56:df:7a:fb:71:43:6e:a7:11:61:45:79:18:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:84:85:35:13:DE:8D:D2:1B:24:C1:34:02:4D:95:E4:AA:23:8A
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:61:de:e7:b7:9d:7e:23:c8:d7:31:49:8f:e9:c1:33:7b:
72:1e:0e:be:1f:78:72:60:d3:6f:26:53:7f:76:68:80:98:04:
bb:8a:90:fe:6a:aa:c0:b3:55:b8:db:19:cb:34:f1:75:7e:bf:
5e:77:72:95:29:88:50:30:01:77:f8:f2:75:a3:d1:67:c2:70:
c9:42:e9:a4:23:06:42:c1:24:32:30:c9:59:1c:22:fe:04:21:
91:98:73:52:2d:90:24:b4:7a:dd:1a:3f:d0:c4:de:28:0d:6a:
66:a6:72:69:94:a2:b2:62:52:cf:ca:00:d3:32:c8:15:e4:b4:
b6:1a:1f:e3:ed:50:7e:4d:03:e3:32:94:29:75:8b:93:70:18:
03:56:85:7c:a5:2f:87:5d:47:b1:50:7a:e6:88:d5:b1:1e:f2:
db:82:1a:e8:57:56:37:f4:37:86:b8:f8:72:ac:37:7c:6e:a0:
8e:3e:b0:3b:8f:17:9c:01:43:e0:b9:a3:e5:f3:fb:1f:bf:08:
ee:5e:54:51:d8:99:23:2c:c5:3b:c8:7a:3e:3b:40:ae:75:b0:
0a:fb:63:b0:97:64:cf:75:28:b2:c4:94:a2:5f:0f:88:4e:cc:
d8:7f:86:a8:ff:68:ea:0d:b4:e2:c6:d5:74:41:0c:ab:2f:96:
d3:01:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client