Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: gSZM1JEAwB+UrmvnBuZrnXrPgPtWXr4SHA/zZQQWkCc=
Subject key identifier: CA:A4:5C:4C:F9:FD:A9:B5:2A:C7:E4:7A:B5:47:15:20:A8:4E:D8:5D
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 019921E79052A44A2F7F53403CDEA4F174C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 08CE
Signing time: Sun 07 Sep 2025 02:00:47 +0000
Manifest this update: Sun 07 Sep 2025 02:00:47 +0000
Manifest next update: Mon 08 Sep 2025 02:00:47 +0000
Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: W8sHiCzYofRHQyDXcGfORRHzZGkFFt7o/WJG+6G5xkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:90:52:a4:4a:2f:7f:53:40:3c:de:a4:f1:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Sep 7 02:00:47 2025 GMT
Not After : Sep 8 02:00:47 2025 GMT
Subject: CN=caa45c4cf9fda9b52ac7e47ab5471520a84ed85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:24:1b:92:f0:90:a5:fa:3f:52:b9:ea:52:
1c:c1:21:29:9e:17:d8:28:01:94:61:fc:c9:f4:c5:
29:c3:c3:2c:4f:c8:65:fe:51:a3:27:dc:e4:63:2d:
0c:77:dd:ae:fa:92:96:86:d0:bc:4f:26:c8:59:16:
6e:ba:27:2d:83:f7:15:4a:62:99:9e:59:cd:df:f4:
17:3f:24:58:c8:3a:1f:3f:ea:db:88:57:28:1f:a0:
79:7b:4c:a2:bd:1e:bf:76:7e:df:75:2e:7b:64:b9:
33:9a:16:e3:7e:c5:9c:2c:05:62:0d:0d:79:e0:60:
55:25:a8:0c:95:cf:af:97:68:20:f1:64:38:89:38:
06:6a:dd:06:74:e8:f8:01:d0:cc:50:5d:8a:53:4b:
27:0b:83:67:64:45:98:26:6d:49:fc:f7:0e:b4:bd:
3a:bf:72:b1:b4:da:f2:1b:38:cc:ff:ec:7e:ca:9b:
6f:fc:9c:1a:1d:bf:20:eb:52:f7:5d:b5:00:48:f8:
99:06:a7:1b:34:ba:f0:b4:d1:4c:ed:a8:66:f8:00:
9a:fc:ef:7e:1a:0b:9e:32:04:02:96:ea:52:9d:10:
03:c0:d9:8c:a8:cc:8e:fd:40:76:02:4a:9f:8e:45:
3c:ed:28:d9:71:b2:31:26:45:a7:33:6a:f3:b5:94:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:5C:4C:F9:FD:A9:B5:2A:C7:E4:7A:B5:47:15:20:A8:4E:D8:5D
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:e6:c6:a6:0c:cb:32:47:67:6e:d9:29:75:e5:d8:8a:cb:
37:90:99:87:2b:5b:9d:9e:0a:2b:ba:6b:b5:93:c6:34:c2:f0:
f2:13:67:55:2e:a0:c3:ad:ef:7b:8b:75:8d:e2:ed:fa:ce:d2:
b3:e4:8f:1c:87:62:52:bc:e3:74:79:32:05:13:32:49:f3:1d:
d3:65:da:34:c9:3d:d1:58:d7:be:22:02:b1:67:37:c3:b9:6e:
68:81:f8:16:86:9e:4f:3f:a5:bb:72:48:66:db:d9:70:49:9f:
ad:85:54:70:78:14:fd:50:d7:26:77:18:ad:7a:d1:29:df:02:
71:2f:f3:38:07:79:77:fa:3b:05:49:71:6e:85:97:a4:a9:bb:
e7:e2:53:bc:a4:86:3b:49:28:a2:20:c5:88:a3:87:67:ce:bb:
f1:19:98:5b:5d:f1:2b:94:66:ef:77:c9:05:fc:24:77:52:75:
d8:21:e6:fe:92:7d:c0:1e:63:94:a0:7b:cc:b4:1f:f1:63:9f:
f9:32:11:76:a4:38:11:25:7b:41:49:b5:7a:db:a4:4b:c1:83:
ed:13:c5:fa:3c:eb:d2:22:6d:45:ad:14:86:d2:25:7d:c2:99:
de:02:4d:0a:ac:20:51:33:71:43:77:1a:fb:d9:0c:9a:2e:2c:
03:ce:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:00 2025 by rpki-client