Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: YOghRt7Tf1jJi44zxRHf6SJeaPkohBimDGD1mthyjvA=
Subject key identifier: EC:20:DD:89:39:1B:AB:E5:FC:6F:D3:8D:2E:E3:FD:CC:94:80:70:19
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019918099B2D38773E8B9731D83E74E3DBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0B5D
Signing time: Fri 05 Sep 2025 04:01:46 +0000
Manifest this update: Fri 05 Sep 2025 04:01:46 +0000
Manifest next update: Sat 06 Sep 2025 04:01:46 +0000
Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: Lra4iNMbQXTc+o/op5s+M/BOY+ALOXftL7f/HjZr8OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:9b:2d:38:77:3e:8b:97:31:d8:3e:74:e3:db:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Sep 5 04:01:46 2025 GMT
Not After : Sep 6 04:01:46 2025 GMT
Subject: CN=ec20dd89391babe5fc6fd38d2ee3fdcc94807019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:e1:e0:2b:e9:b4:6c:6a:d6:be:9d:30:c5:
b8:c0:f9:ed:42:33:cc:06:8f:9f:a0:95:65:71:08:
08:54:7d:7f:50:45:e8:ee:b0:c0:e1:89:51:b9:4e:
a1:35:86:a5:f1:f0:df:ee:65:cf:17:69:81:a8:16:
a2:a5:31:f9:6c:1c:36:f4:b3:90:06:20:8e:ac:a9:
ba:6c:8b:97:d7:7b:6b:9e:38:29:ee:e2:27:45:6e:
26:c7:cf:43:5d:f5:ac:1e:9f:4f:d9:bd:c5:9e:e4:
47:e1:68:9c:df:cb:9e:90:48:c5:ae:0d:d2:72:2a:
ad:8d:8e:3d:d5:a0:c6:20:27:91:6a:c3:40:20:d8:
ec:39:1a:00:5f:7a:26:5e:ca:09:01:37:4f:1b:51:
71:e1:bd:90:96:66:71:7d:fe:ee:03:e2:3b:af:6b:
93:2e:a8:43:ce:4c:2c:2d:b6:20:4b:1c:4a:46:ca:
cf:de:11:c5:d2:8e:16:bc:c8:c9:f4:36:18:26:93:
81:11:da:c8:98:b8:9d:fd:ab:91:8f:c7:26:26:50:
dc:c3:ac:ee:f3:d4:cc:c4:7a:8a:95:c3:8b:8a:73:
9a:53:87:9a:fe:b2:e7:6e:45:6d:bf:97:1d:21:c8:
26:35:7e:77:f4:5c:56:bd:42:d3:63:ba:28:5e:c8:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:DD:89:39:1B:AB:E5:FC:6F:D3:8D:2E:E3:FD:CC:94:80:70:19
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3f:64:d1:c5:8c:a1:80:b1:d2:c0:ed:7b:f0:16:5b:63:62:
b9:0d:72:b8:df:9d:bb:45:cf:88:35:7a:8c:95:01:fc:2e:53:
f1:a1:4e:04:e5:f4:41:85:b6:08:e7:76:a6:06:c3:42:5e:de:
a3:52:f5:22:73:dc:66:c7:8f:cf:a9:d4:59:9b:48:b9:f6:44:
73:38:e3:77:a7:fe:1f:08:43:84:8b:1c:e3:80:78:1e:20:b9:
b8:83:34:73:23:b9:de:de:83:18:00:9a:97:76:5a:3a:0a:66:
96:22:e8:64:41:70:2d:f9:e5:6c:a1:2e:c1:27:cc:a6:ce:6c:
3c:53:28:8f:d4:87:ce:da:b2:22:71:ea:bc:4e:a6:88:fe:92:
ae:d7:75:46:62:c5:99:e9:a6:74:b2:6c:95:79:b9:c8:8e:fe:
eb:92:78:93:08:3c:b2:1b:03:08:9a:f2:86:e7:e2:a4:bc:e3:
f3:c7:19:59:63:7a:9f:92:f3:d0:5b:89:50:b7:6c:68:28:94:
90:d6:03:2c:bf:99:2b:82:58:90:0d:45:99:da:b9:3f:02:75:
69:4a:11:33:bf:f1:26:36:6a:09:cf:bc:c6:1c:22:8a:0b:17:
9d:81:c8:4a:b7:0e:73:48:f6:a8:c3:8c:50:00:ef:09:ab:ad:
2c:e3:4b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCZstOHc+i5cx2D5049v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1
YzZjOTEwHhcNMjUwOTA1MDQwMTQ2WhcNMjUwOTA2MDQwMTQ2WjAzMTEwLwYDVQQD
EyhlYzIwZGQ4OTM5MWJhYmU1ZmM2ZmQzOGQyZWUzZmRjYzk0ODA3MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpzh4CvptGxq1r6dMMW4wPntQjPM
Bo+foJVlcQgIVH1/UEXo7rDA4YlRuU6hNYal8fDf7mXPF2mBqBaipTH5bBw29LOQ
BiCOrKm6bIuX13trnjgp7uInRW4mx89DXfWsHp9P2b3FnuRH4Wic38uekEjFrg3S
ciqtjY491aDGICeRasNAINjsORoAX3omXsoJATdPG1Fx4b2QlmZxff7uA+I7r2uT
LqhDzkwsLbYgSxxKRsrP3hHF0o4WvMjJ9DYYJpOBEdrImLid/auRj8cmJlDcw6zu
89TMxHqKlcOLinOaU4ea/rLnbkVtv5cdIcgmNX539FxWvULTY7ooXsgiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwg3Yk5G6vl/G/TjS7j/cyUgHAZMB8GA1UdIwQY
MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt
ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0
LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsD9k0cWM
oYCx0sDte/AWW2NiuQ1yuN+du0XPiDV6jJUB/C5T8aFOBOX0QYW2COd2pgbDQl7e
o1L1InPcZsePz6nUWZtIufZEczjjd6f+HwhDhIsc44B4HiC5uIM0cyO53t6DGACa
l3ZaOgpmliLoZEFwLfnlbKEuwSfMps5sPFMoj9SHztqyInHqvE6miP6Srtd1RmLF
memmdLJslXm5yI7+65J4kwg8shsDCJryhufipLzj88cZWWN6n5Lz0FuJULdsaCiU
kNYDLL+ZK4JYkA1Fmdq5PwJ1aUoRM7/xJjZqCc+8xhwiigsXnYHISrcOc0j2qMOM
UADvCautLONLYA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:42 2025 by rpki-client