Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File: eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier: nEomT94bNzHH6vfgYv35Om5mo7BsJGl4BMQtLWW/IwI=
Subject key identifier: 66:64:37:A9:E6:82:F6:9F:37:E9:31:9A:6B:0F:70:BB:CB:0A:4A:6D
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 0199375D575680C370543D22BD037DDE4DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 06:01:27 +0000
Manifest this update: Thu 11 Sep 2025 06:01:27 +0000
Manifest next update: Fri 12 Sep 2025 06:01:27 +0000
Files and hashes: 1: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (hash: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=)
2: XrmbTB36f6No7HgE2Qb2I31Dcv8.roa (hash: HGfAozR7O/ZB1GS1OfPuLa6dsGtZ660AMEUXLcdHqKM=)
3: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: IKZX983dYz8uZ+FMbn3vIVAbh9nR8qQT+eP3ET7Ln1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:57:56:80:c3:70:54:3d:22:bd:03:7d:de:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Sep 11 06:01:27 2025 GMT
Not After : Sep 12 06:01:27 2025 GMT
Subject: CN=666437a9e682f69f37e9319a6b0f70bbcb0a4a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:11:65:a3:86:86:5d:81:e0:ac:0e:9c:ef:
9f:ba:87:02:26:92:31:bb:65:0a:38:e1:18:30:52:
0c:95:33:b0:56:89:4a:13:f6:e7:f8:6a:79:ca:55:
6a:a4:b5:25:86:b2:86:75:34:fc:8c:11:77:4c:5a:
00:46:70:6a:45:02:be:08:c3:27:59:15:aa:69:c6:
94:32:60:ec:29:e2:a4:40:ef:8c:24:4e:19:cf:c6:
64:72:df:ed:ad:6d:d4:36:99:11:a3:c2:d6:14:bd:
9a:32:ac:f5:45:5c:da:46:26:14:b6:03:90:0d:df:
54:55:59:3b:14:9b:37:ea:30:25:5c:5c:0b:35:04:
c7:b6:71:6f:e6:55:b3:db:1e:e3:80:d9:f5:41:cf:
a7:3b:1d:5e:61:71:de:1e:96:27:68:d1:a5:e1:66:
f5:5f:d0:f8:97:2b:ba:0d:d2:3c:f2:68:1f:44:21:
6f:44:e4:00:b8:35:ac:b7:45:6c:cc:5e:3d:39:e7:
32:8c:a1:89:0e:4c:9f:36:e5:c2:df:f7:db:17:95:
70:8a:9b:14:fe:c7:ce:6e:1d:e9:1f:64:f3:e9:e4:
80:9f:e3:9b:34:e7:d9:20:6f:49:c2:75:0b:d2:f6:
7c:10:b9:13:95:0e:aa:21:9b:69:04:41:0d:49:f5:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:37:A9:E6:82:F6:9F:37:E9:31:9A:6B:0F:70:BB:CB:0A:4A:6D
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:d7:9e:02:8b:10:86:c7:5e:c9:37:f7:1f:f9:ab:5d:2e:
89:b3:99:f3:4f:3b:a2:b5:66:30:57:ae:a9:53:4b:92:f2:94:
8b:28:27:eb:84:e8:4f:bd:f9:1a:1e:f7:b0:65:b8:fa:c7:40:
70:14:94:84:eb:b1:d5:fb:b9:31:48:7d:aa:30:dc:9f:46:60:
4e:1c:db:0a:a0:ac:68:c9:ba:d5:fe:0f:a1:2e:3e:aa:3c:4b:
61:ab:21:a8:18:a5:3a:76:35:60:c3:b5:18:40:9b:9a:0e:24:
af:9b:64:4f:d2:19:10:5f:8f:0a:b6:9d:9e:df:68:76:03:ef:
b7:9e:50:d4:7a:c3:dd:8e:e8:28:9b:5b:a7:0b:6d:d2:2a:6c:
95:fb:01:d7:6a:09:1e:65:ae:8c:d6:fc:1e:81:7c:ca:73:7d:
43:d3:93:4d:9c:96:e6:7a:e2:93:93:7b:e3:98:63:34:34:07:
e5:c3:b1:01:06:3e:6a:e0:f0:cc:e2:86:dd:34:4d:0a:85:cd:
f3:c0:1e:f8:25:86:9a:9d:87:48:32:f6:50:14:b4:55:b5:04:
4c:bc:94:77:0a:82:db:49:a7:53:8b:d8:9c:b5:4e:64:0e:eb:
f7:69:e4:dc:0c:5b:2a:08:f1:e8:72:f4:8f:fc:9d:f7:1d:87:
1a:57:b9:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XVdWgMNwVD0ivQN93k2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MzhkZmI5ZWI5MjQwNzliYjcwNmNiNjE2ZWRhNTcyODY0
YTllMTMwHhcNMjUwOTExMDYwMTI3WhcNMjUwOTEyMDYwMTI3WjAzMTEwLwYDVQQD
Eyg2NjY0MzdhOWU2ODJmNjlmMzdlOTMxOWE2YjBmNzBiYmNiMGE0YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9wRZaOGhl2B4KwOnO+fuocCJpIx
u2UKOOEYMFIMlTOwVolKE/bn+Gp5ylVqpLUlhrKGdTT8jBF3TFoARnBqRQK+CMMn
WRWqacaUMmDsKeKkQO+MJE4Zz8Zkct/trW3UNpkRo8LWFL2aMqz1RVzaRiYUtgOQ
Dd9UVVk7FJs36jAlXFwLNQTHtnFv5lWz2x7jgNn1Qc+nOx1eYXHeHpYnaNGl4Wb1
X9D4lyu6DdI88mgfRCFvROQAuDWst0VszF49OecyjKGJDkyfNuXC3/fbF5VwipsU
/sfObh3pH2Tz6eSAn+ObNOfZIG9JwnUL0vZ8ELkTlQ6qIZtpBEENSfUm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZkN6nmgvafN+kxmmsPcLvLCkptMB8GA1UdIwQY
MBaAFHk437nrkkB5u3BsthbtpXKGSp4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQt
MDZkYTJiYjA2MDcxLzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQtMDZkYTJiYjA2MDcx
LzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6rXngKL
EIbHXsk39x/5q10uibOZ8087orVmMFeuqVNLkvKUiygn64ToT735Gh73sGW4+sdA
cBSUhOux1fu5MUh9qjDcn0ZgThzbCqCsaMm61f4PoS4+qjxLYashqBilOnY1YMO1
GECbmg4kr5tkT9IZEF+PCradnt9odgPvt55Q1HrD3Y7oKJtbpwtt0ipslfsB12oJ
HmWujNb8HoF8ynN9Q9OTTZyW5nrik5N745hjNDQH5cOxAQY+auDwzOKG3TRNCoXN
88Ae+CWGmp2HSDL2UBS0VbUETLyUdwqC20mnU4vYnLVOZA7r92nk3AxbKgjx6HL0
j/yd9x2HGle5CA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:56:51 2025 by rpki-client