Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File: eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier: 3Mxjl+J6daM//4t2vSxCKxqsnJZm9P0yHaAezK9Ecgk=
Subject key identifier: 40:08:B4:EC:9E:54:DD:72:3F:CC:DC:21:95:2A:4D:30:F9:C1:84:DC
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial: 01984B54F34ED172FBF834A89888D2DFB271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:55 +0000
Manifest this update: Sun 27 Jul 2025 10:01:55 +0000
Manifest next update: Mon 28 Jul 2025 10:01:55 +0000
Files and hashes: 1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: dIMTC7aRQue9UPeso+2M622+8HE6giroSh3Uvb7y4sE=)
4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f3:4e:d1:72:fb:f8:34:a8:98:88:d2:df:b2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Validity
Not Before: Jul 27 10:01:55 2025 GMT
Not After : Jul 28 10:01:55 2025 GMT
Subject: CN=4008b4ec9e54dd723fccdc21952a4d30f9c184dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:77:99:64:4e:db:cb:ce:27:3b:5a:3e:65:
f9:08:00:25:cf:69:2e:10:60:17:fb:ef:2d:0f:ec:
1b:0f:ea:ff:dd:98:b9:f2:e6:2a:9a:40:59:75:fd:
4d:ad:0a:86:7f:85:23:3b:c0:85:f4:0a:0c:1d:f7:
c8:ee:37:a5:ba:28:d2:87:dd:5e:41:95:52:6a:6f:
6d:ac:15:d7:85:2d:c0:4a:32:de:9b:26:9b:b3:d6:
88:b1:84:b9:0b:6c:eb:73:a3:11:84:ec:0d:65:99:
0e:81:8d:e7:aa:27:8a:4a:ca:e1:3d:76:e8:b7:6d:
aa:35:4b:18:8e:c2:27:76:f2:6a:79:5b:90:bf:2d:
67:10:bd:b8:c6:71:2d:3b:27:3e:28:af:d7:33:e3:
0d:f1:38:c7:96:6d:44:eb:a7:bf:fb:ae:74:9e:7a:
75:95:65:e2:05:0c:1c:42:9d:bd:90:be:c7:db:8b:
77:42:9b:a1:8b:9f:68:f1:06:65:14:58:ab:f3:10:
02:16:57:ab:49:04:f9:f2:99:4f:db:44:0c:c3:1f:
51:8c:14:dd:af:f6:ad:a1:8b:66:0d:ed:0a:ff:7a:
12:88:df:75:c3:6a:ff:e8:5e:3c:47:3f:cc:f5:42:
04:ec:fe:79:f6:41:aa:67:69:fe:5b:2d:47:87:fb:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:B4:EC:9E:54:DD:72:3F:CC:DC:21:95:2A:4D:30:F9:C1:84:DC
X509v3 Authority Key Identifier:
keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:69:3f:27:4a:10:aa:bc:72:dc:cc:75:03:5e:e1:e3:1a:1e:
09:69:8d:ca:e3:3f:f2:d5:2e:05:1a:2a:c7:b0:32:88:dd:7c:
53:27:43:2f:b2:54:0c:79:44:c0:c1:20:8f:09:c3:92:51:4d:
5b:08:81:97:3e:d1:8a:0a:f8:22:05:15:7e:c2:1c:30:57:38:
3e:37:0d:15:98:65:e2:62:a2:e6:a7:09:aa:46:1e:f6:28:5d:
f5:98:81:0c:42:74:a6:49:60:7c:30:ee:85:ff:bb:2f:ae:1b:
e7:b6:70:80:ba:eb:55:f7:d6:89:27:8e:71:c6:d8:64:f3:80:
22:13:ec:a9:4c:6b:d0:8b:38:73:59:84:04:62:d4:b1:4e:e8:
c0:dc:b1:07:85:99:cd:ce:d4:0d:af:78:77:4f:c1:44:48:12:
93:23:82:74:20:70:b0:51:29:ed:c9:e9:77:42:c3:2e:56:82:
36:9d:bd:72:c4:40:a9:33:f3:c3:65:ff:68:8d:b4:88:4d:bd:
41:f5:d3:0c:ad:f0:20:53:44:e0:90:15:cc:18:29:9e:f7:2f:
a5:14:c8:ce:28:f3:4e:b3:af:28:c5:7d:bc:3a:15:a7:bb:72:
ea:7b:b5:50:3d:94:ea:61:4d:2e:cf:b9:5e:ab:b9:d1:84:25:
2e:1c:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:05 2025 by rpki-client