Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: kqRXV6+ImnFMEMIGTTgZ245TSNGfqQAcktJF5UD0ZE4=
Subject key identifier: DD:FA:40:4D:97:82:8F:2D:16:A4:17:8D:EC:24:2D:6F:D9:16:43:34
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 0199228CE4918C8F8B008EF6124BE4742081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:22 +0000
Manifest this update: Sun 07 Sep 2025 05:01:22 +0000
Manifest next update: Mon 08 Sep 2025 05:01:22 +0000
Files and hashes: 1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: io7QTF3q7hwqxK/CoUfJb6NzTBiHqpV9HiHDaJIWklM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e4:91:8c:8f:8b:00:8e:f6:12:4b:e4:74:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Sep 7 05:01:22 2025 GMT
Not After : Sep 8 05:01:22 2025 GMT
Subject: CN=ddfa404d97828f2d16a4178dec242d6fd9164334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:65:9a:f5:74:98:f7:61:7f:19:6b:d4:93:
b7:bd:a9:ea:41:96:44:7f:c4:83:fe:9d:94:f4:ad:
ec:ba:c0:83:67:67:b2:f8:de:e5:6d:f7:57:6b:cd:
2b:fa:c0:ce:48:ef:bd:9a:6f:36:3c:fc:25:f5:f6:
be:a8:49:46:9a:7f:c2:48:9c:03:c2:b5:6a:b1:de:
2f:b1:2b:10:45:87:0b:e3:db:f3:91:6a:1c:b1:bc:
4a:fe:0c:90:b8:2b:94:69:24:1e:8a:62:43:0f:d9:
2e:7d:51:36:bd:6b:60:e5:7b:2f:d3:58:ef:cf:3b:
c1:58:65:7f:14:d0:ac:b6:19:a1:38:89:d8:5a:c3:
83:36:95:e7:a1:2a:a7:e3:07:d9:5d:07:72:3f:49:
b0:10:8e:b1:87:95:e0:a8:0e:d3:82:cf:9a:a4:4b:
f9:d5:c9:9c:ac:08:31:da:7e:38:b1:a4:09:57:3f:
20:f8:a1:ab:8a:80:2e:44:15:ed:a4:3f:8c:42:17:
3e:76:5a:5b:80:d9:05:55:d0:29:af:12:87:7f:2d:
7f:d3:2d:bf:e5:47:44:35:7d:63:73:85:38:1b:19:
ea:05:86:64:78:df:81:19:78:21:c9:72:00:b0:e0:
50:c9:2e:65:0a:87:7b:d2:74:45:d6:29:da:86:37:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:40:4D:97:82:8F:2D:16:A4:17:8D:EC:24:2D:6F:D9:16:43:34
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:06:25:1f:3e:eb:71:90:61:76:be:93:1e:7c:7f:eb:71:
94:d0:b3:65:6a:9c:36:72:1d:c8:c0:99:f6:c7:14:ad:96:d5:
8d:e7:4b:e3:d3:96:46:b2:b4:1f:8f:03:01:b2:4c:35:b6:8c:
45:18:d5:48:88:dd:46:35:65:60:22:e5:f2:87:d8:1d:98:e8:
9e:3e:b1:1c:4f:ba:80:2d:5c:01:02:74:a2:eb:c8:1b:99:d5:
1f:72:84:24:79:db:db:9b:bb:ea:04:58:2c:b7:22:36:f8:75:
91:d0:32:b0:ee:20:b2:a4:dc:31:67:53:f1:45:71:0d:43:6e:
dd:77:d0:cb:6d:4d:0f:d9:b1:6d:04:89:2b:4c:b9:2f:9c:32:
3d:90:ca:3b:fe:4c:67:47:3c:2c:01:db:74:13:67:38:16:e5:
55:39:db:a1:57:64:00:c6:5b:5f:3a:2a:f1:0d:87:b9:48:75:
9c:e8:f5:25:71:7f:45:00:91:73:cb:11:86:bb:82:93:55:da:
c0:6c:b2:67:71:b5:fd:fd:f5:a9:16:21:a0:ee:f4:ec:e8:09:
c8:b5:d2:0f:13:a0:63:39:65:a2:bf:9a:36:ed:26:56:9b:cd:
7b:1d:d4:fe:44:aa:61:ec:5c:ab:0e:43:ef:f5:1a:b5:73:b2:
62:96:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:09 2025 by rpki-client