Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: cUmy+xh+b30/vvdnzV4rmzG5ruxVHu0zlehrYbiUvOQ=
Subject key identifier: B7:2C:76:9D:FB:62:C1:92:6D:57:96:D6:D6:0E:E1:44:35:99:E7:17
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 0199221F406798F816C9C27F2BF5B9D5C04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:01:37 +0000
Manifest this update: Sun 07 Sep 2025 03:01:37 +0000
Manifest next update: Mon 08 Sep 2025 03:01:37 +0000
Files and hashes: 1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: bfQJ0lCm4hoivRdWaCTdsiFYF1XGkkI6YvXvU5D4Mxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:40:67:98:f8:16:c9:c2:7f:2b:f5:b9:d5:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Sep 7 03:01:37 2025 GMT
Not After : Sep 8 03:01:37 2025 GMT
Subject: CN=b72c769dfb62c1926d5796d6d60ee1443599e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:bb:e4:e6:ce:b8:d3:76:18:65:da:90:e4:
32:a7:d2:31:d5:1a:1c:ae:6c:d7:bd:04:3a:1c:54:
82:44:d3:39:eb:89:64:fd:44:19:60:67:ab:a3:c2:
ba:5b:dc:c0:d1:b1:5e:34:99:6e:6c:2d:69:bb:0a:
f2:97:e9:4c:70:3d:29:bf:16:8d:d9:04:65:a3:99:
73:0c:f0:64:3a:2e:b7:da:3a:33:52:bc:0c:a2:5e:
71:88:09:24:07:2b:8d:85:c3:2e:f4:f1:d2:34:17:
ca:34:57:c1:65:dd:f7:cb:10:50:23:1a:66:3f:f2:
58:e2:38:0e:56:18:de:84:86:5a:5b:8d:65:47:8d:
fa:2c:22:5c:37:b1:f0:05:b7:74:67:51:41:97:12:
d8:a0:4e:99:ba:58:30:c6:4a:b8:73:65:88:1c:2f:
3d:ac:46:9e:98:a3:fd:d0:a7:42:e8:60:b7:25:a8:
92:c3:2e:c6:62:db:c9:b9:89:73:58:e5:a1:f0:46:
9c:1c:f8:f1:d9:30:10:1c:54:0d:46:4c:96:77:d5:
b3:a8:61:f7:87:42:4b:3d:83:5c:8b:0a:48:8a:a3:
32:5d:3d:34:4c:0d:55:23:bd:cc:20:14:44:73:f8:
96:db:49:b0:11:4b:a9:b1:7d:a3:4a:1f:3f:3f:3a:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:76:9D:FB:62:C1:92:6D:57:96:D6:D6:0E:E1:44:35:99:E7:17
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:c5:60:ff:43:ab:c0:2d:22:e0:c5:c2:aa:45:b1:c5:60:
e2:68:f8:13:29:84:8d:00:63:92:52:b2:cc:66:3c:75:43:10:
44:d9:ee:e5:fd:7c:00:06:06:ed:b1:d6:45:13:b9:34:a5:02:
78:d5:d7:74:78:26:cd:73:ab:a2:1b:be:6d:c3:ca:df:a2:4e:
46:c0:49:84:75:41:db:2d:f5:79:f9:4b:e3:c9:85:01:a9:cc:
86:dc:ff:0a:73:f9:c1:d1:80:e8:9b:b7:35:79:c2:9e:65:4c:
82:c4:d7:b2:d9:10:7a:cb:89:62:ba:5c:7a:2f:38:08:3b:87:
f9:1e:84:85:28:33:c7:79:16:41:ec:00:ca:a2:a3:af:1b:cb:
c9:29:6a:b6:3d:44:d8:fa:20:94:17:a5:fb:60:5b:b5:35:ca:
3d:2c:e4:da:c4:99:07:88:80:3e:6f:db:30:86:48:9c:71:9d:
45:42:a3:2a:a1:51:8a:c6:78:06:81:25:87:6a:2f:7f:02:80:
4b:99:0c:6c:cd:5c:b8:54:91:93:27:3b:19:82:21:b9:b0:63:
23:ef:8c:89:a4:e2:df:1b:de:03:f9:23:30:0c:18:0c:26:13:
a1:37:2f:3a:9d:22:dc:f2:0f:51:25:d1:81:82:5f:7f:04:64:
9f:6e:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:04 2025 by rpki-client