Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier: m82DvIaulzJxm9+DdgD2yrEA19/M/hST7O0nUILzqyU=
Subject key identifier: 47:2B:74:A9:14:FB:FD:A7:BC:6C:6D:9E:07:C1:6B:54:8E:40:D7:8B
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 019939F0224B00C24D4EBE5135316E740D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 18:01:02 +0000
Manifest this update: Thu 11 Sep 2025 18:01:02 +0000
Manifest next update: Fri 12 Sep 2025 18:01:02 +0000
Files and hashes: 1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: cHSLcj9x+HHuVCYPNeJElwla3e+p4LISZnANlaSoupQ=)
2: avJEaghetulkdy61P3vVvRtnwao.roa (hash: isq8BGshz+w5RQmqprep+yBn/iuxAmpetPcOYQFYWJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:f0:22:4b:00:c2:4d:4e:be:51:35:31:6e:74:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Sep 11 18:01:02 2025 GMT
Not After : Sep 12 18:01:02 2025 GMT
Subject: CN=472b74a914fbfda7bc6c6d9e07c16b548e40d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:49:fc:ae:bb:78:46:90:37:e6:a1:3d:ce:
3b:5c:b7:33:07:2e:75:41:13:e4:09:e5:2e:83:d7:
4d:c3:ae:33:3c:e7:85:86:b7:4d:e5:c8:82:b0:63:
44:95:02:4b:ff:c0:49:f5:e6:43:0d:cb:b8:40:45:
70:86:c0:47:75:55:0b:a6:25:7c:a7:ac:f8:a6:ad:
f3:f9:57:7c:e0:99:ca:a8:9a:23:e7:a8:24:3f:c0:
58:78:17:df:c5:84:68:77:6b:67:67:83:61:4b:66:
1c:cf:b3:37:96:b6:58:c9:c6:ae:91:e7:b9:c3:bd:
6e:d6:97:43:9c:c1:5b:c7:d7:4c:d8:07:6d:39:a1:
ad:7d:61:8d:66:a1:7e:f7:98:c5:f2:a3:f2:0c:21:
07:5b:2f:7b:d3:d9:b4:0c:3f:f9:d7:55:ac:c9:09:
23:47:5e:8a:ff:03:f8:c7:03:fe:31:77:11:75:b0:
bf:4c:eb:be:74:e7:63:ca:c9:98:fc:89:1b:74:75:
8f:e6:53:9f:ca:72:3e:7f:db:25:6f:54:10:46:a1:
68:83:3b:48:aa:68:e3:17:00:ef:5e:4e:c4:5d:8c:
33:bd:9d:b1:d4:b0:42:e7:bd:16:b2:4c:f3:bc:c4:
88:22:2f:5e:41:dd:70:ed:5d:8e:5e:79:2a:f1:b3:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:74:A9:14:FB:FD:A7:BC:6C:6D:9E:07:C1:6B:54:8E:40:D7:8B
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:72:93:35:46:4d:c8:08:f1:dd:df:4e:6d:8a:e7:d3:d8:
b3:1b:de:5f:42:11:30:94:df:99:bb:14:dd:ee:70:43:36:eb:
45:36:8b:4e:0a:6f:cc:83:f4:6c:80:ef:f0:27:34:70:a4:d3:
47:59:2c:bd:47:40:bb:4c:20:91:60:80:ca:8c:49:16:7f:4b:
5f:4c:19:56:fe:28:4b:fa:22:39:c5:1a:f0:fc:a5:44:4c:e2:
22:02:83:9e:76:37:7d:af:e6:28:e8:e0:74:68:94:0f:ba:7c:
b6:65:23:34:4b:c7:db:3f:75:05:1d:62:f5:86:e9:ff:9b:51:
d8:af:d3:34:23:03:d5:71:41:d2:35:12:8a:e1:c5:77:53:a8:
e1:19:7a:63:ed:eb:6e:a2:d1:76:e3:73:88:c3:e5:ca:b8:21:
21:ab:33:37:03:67:46:60:e7:a6:5a:32:7d:8d:8d:7b:30:a1:
6f:cd:6d:df:9a:41:77:9c:d5:8c:47:d0:1b:b5:40:4e:f7:d5:
05:ff:f0:f5:3c:70:51:91:9c:d1:cf:43:bc:37:58:40:76:46:
d6:80:1a:43:10:84:c8:50:62:c6:fb:4b:00:a2:5e:e2:53:80:
84:72:4c:e4:20:8e:72:00:d6:63:c9:a8:fb:06:7b:f2:4e:b9:
cd:a2:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:33:03 2025 by rpki-client