Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier: I9GOngPW2eH1I1WPiOvqvIUMc48ZbDjtJz9XnvHO+wc=
Subject key identifier: 38:62:99:39:EB:23:68:39:90:82:0D:DB:4E:B4:A1:55:FD:50:38:14
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 0199228CC4FB6BE2EC58036E93212CB9D6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: oe+Z/MKY0Eq6nOxrr1BMW4qeRuhV0K4sV9t0dHibGco=)
2: Pjo3RDAsopUeM78b85_QPN1-7VI.roa (hash: I/2zLP79cKW8Js/ksFDd8QdVZcG00HVdVbP2kBa1g/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c4:fb:6b:e2:ec:58:03:6e:93:21:2c:b9:d6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=38629939eb23683990820ddb4eb4a155fd503814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:54:16:ca:a6:de:ba:98:c1:dd:96:ec:b5:
ad:e4:3a:7e:9f:86:f5:99:9c:34:1d:8f:f1:8c:0a:
c5:a8:1d:d2:5c:18:57:af:a0:5a:31:d2:2c:5d:ac:
ab:7c:8f:91:16:11:16:28:a3:26:42:73:37:b1:4a:
d7:b3:3e:a0:ba:2a:df:60:79:7c:4c:bb:75:74:72:
1d:f2:16:eb:e1:f0:0f:f5:fc:00:e0:69:27:ac:30:
db:7e:34:56:65:53:3a:8d:5c:09:8f:27:ee:21:f9:
fb:f5:86:55:be:26:5d:f5:0e:47:91:92:c1:56:3c:
ac:1f:7a:a4:84:56:b8:37:fe:6a:33:ca:4d:82:5e:
9d:c9:74:79:4a:19:c3:e0:4e:aa:27:ad:02:cc:15:
e5:9d:36:c9:4d:8f:d7:12:5a:07:71:26:80:0f:3c:
a5:cb:56:a7:0c:58:8f:71:e0:c3:30:20:ed:1b:f2:
50:5f:f0:5f:09:24:0e:fd:c0:6f:54:31:f4:67:cf:
b5:8f:e5:07:ac:70:be:fe:d9:9b:a0:fd:a6:f0:4e:
3f:b2:63:fb:9d:36:88:8c:79:4e:a6:07:dc:0b:5b:
0c:74:66:54:87:00:d9:a3:b5:44:c3:49:00:10:39:
3a:c2:32:c8:94:51:25:ba:75:42:35:97:22:bb:78:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:99:39:EB:23:68:39:90:82:0D:DB:4E:B4:A1:55:FD:50:38:14
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:a5:e1:88:16:b4:4f:78:08:a3:25:a4:94:f5:7b:46:0a:
5d:1a:d0:ef:e4:bc:11:f9:bc:32:3a:03:0e:2d:e2:af:e9:eb:
54:3f:68:68:ed:05:94:74:9d:14:82:c9:a1:37:de:91:6a:a9:
7d:cc:26:93:e4:bd:26:81:73:5a:c7:46:53:e5:3a:94:5c:fb:
28:0e:30:a6:6e:7e:21:e1:da:cf:41:b4:9b:44:c2:b7:0b:5e:
cd:18:de:4f:6f:d8:d1:6c:ba:78:56:14:e6:5e:66:14:cb:b7:
e5:b6:b2:63:5a:80:e3:b7:90:9b:41:06:0b:c0:a3:fd:51:dd:
58:65:14:d1:b1:23:e8:b2:81:11:ca:42:7c:a9:5d:01:1e:eb:
f2:37:94:ce:3c:74:d3:e6:21:c0:46:64:a7:93:a3:15:e1:e6:
9b:7b:df:a9:ae:99:24:b9:5d:de:23:58:e4:f5:f0:01:24:e1:
96:4f:54:80:f9:e3:46:4d:72:7b:af:5d:6b:c4:22:61:53:3d:
f5:1d:6a:53:53:ca:b4:93:2c:52:f8:45:ae:15:7e:8a:b3:38:
42:80:29:48:bc:87:7c:4b:91:85:e0:e2:d0:57:36:48:4a:ac:
4c:8e:63:69:45:82:d3:64:a6:a7:d1:1e:1a:98:a9:72:6c:4c:
32:e2:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:34 2025 by rpki-client