Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: aABD+eu0aTfT5Hz9bhN/xhGQvD4vUWKEKf5tH1rNNnQ=
Subject key identifier: 32:E4:FD:18:B7:64:23:2A:55:07:94:0A:82:76:4E:D6:52:8E:48:A0
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 01991763C95FD13FF570CD9CA7D64758D8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0AC8
Signing time: Fri 05 Sep 2025 01:00:39 +0000
Manifest this update: Fri 05 Sep 2025 01:00:39 +0000
Manifest next update: Sat 06 Sep 2025 01:00:39 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: GYagM1yunV8LcWSsMHWdUrkIlJHc9q9x/0J2LqXLlbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:c9:5f:d1:3f:f5:70:cd:9c:a7:d6:47:58:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Sep 5 01:00:39 2025 GMT
Not After : Sep 6 01:00:39 2025 GMT
Subject: CN=32e4fd18b764232a5507940a82764ed6528e48a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:d0:a7:53:4e:cc:a1:48:18:03:c5:f3:4f:
25:ea:35:fd:17:0c:1d:0e:e4:1f:f9:0f:ad:73:c2:
72:46:2f:4d:5e:1e:c4:71:52:80:4b:03:f5:65:cc:
61:be:59:06:65:37:a5:45:51:e3:81:35:ac:8f:96:
0a:16:8a:d7:56:fd:29:5f:c1:07:11:50:2d:87:cb:
ed:78:5f:41:5a:33:d2:54:f6:cb:35:9d:30:59:a3:
b6:54:d3:ee:01:cf:44:f6:17:fb:b2:af:0d:ba:f9:
9b:f3:bc:b1:97:6c:a0:17:1f:a7:c8:df:32:e2:9d:
ad:6f:d3:9d:e7:f6:39:2f:00:8d:6f:38:99:9a:bc:
05:67:6d:dc:e9:a5:70:3e:96:e9:d6:51:8a:f5:83:
1a:9d:80:8f:89:f0:fe:47:7a:8e:59:94:08:53:f6:
28:62:33:48:20:ea:9a:03:69:2f:32:1b:5d:f6:e2:
6b:6b:df:a5:77:d2:af:c4:8e:f1:ba:c7:1f:9d:5c:
bd:63:be:92:39:b1:6a:98:71:dd:78:8d:cd:53:34:
d2:7b:f2:b3:dc:7c:33:52:f9:2b:a6:69:8d:eb:89:
7e:03:d3:d3:5a:99:ce:be:8c:9a:9e:de:e4:2b:9b:
46:bc:36:2f:fe:20:86:e1:1c:c2:63:44:ec:b4:d4:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:FD:18:B7:64:23:2A:55:07:94:0A:82:76:4E:D6:52:8E:48:A0
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:f4:5e:cd:65:16:c5:3d:98:e3:de:9d:05:60:41:2b:4c:
28:e6:a0:b7:8c:2b:5d:be:cd:9c:c5:01:25:0e:bb:38:5d:e7:
96:47:2a:0e:ac:37:85:75:07:b3:5f:09:31:93:ad:36:59:a3:
cf:32:ce:a2:12:fa:f9:00:9a:3a:6a:06:92:fb:60:cc:3d:5b:
14:d2:f4:04:83:42:21:a3:3e:b1:b4:7f:b3:89:08:62:3a:fd:
f3:ff:7d:df:82:47:c1:9b:28:79:c6:bb:1a:45:37:e9:d8:fc:
44:d2:b0:00:37:50:40:37:79:50:c2:9b:13:a8:16:da:dd:60:
13:79:0f:96:6d:dc:aa:0c:be:99:58:03:50:69:18:6c:48:ae:
0c:d4:c5:cd:1b:07:cb:47:ba:e2:13:0c:2a:23:1e:ca:88:2e:
1e:55:82:a4:27:af:72:18:4b:db:c3:ec:bb:93:f9:fe:77:02:
67:61:fc:a4:35:8f:e5:5c:b6:17:32:59:30:e2:47:f1:2c:db:
d8:f1:10:85:70:da:07:5d:1e:44:a9:df:f8:2e:df:da:dd:63:
4e:ef:72:77:01:b5:16:f6:9e:4c:57:93:1b:74:29:67:7e:b9:
68:f2:f3:eb:44:a5:69:fd:08:6e:73:9d:4f:b9:f8:53:a7:bc:
0e:c0:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:16 2025 by rpki-client