Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: Rjy5vcmCV4VpUpzB2M26v/1+RzKP05n/YjECrx04Q+k=
Subject key identifier: F1:56:E0:97:00:94:EC:E8:3E:B9:15:F4:53:B3:CB:0D:DE:92:BE:99
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019922559F7534933DD6B85AADDE32DDB7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 1382
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: jllu0dTqhGK9/anVEzPeE7mHtDdWssd1ZEhdifGihR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9f:75:34:93:3d:d6:b8:5a:ad:de:32:dd:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=f156e0970094ece83eb915f453b3cb0dde92be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:2c:98:ac:48:e3:d0:bc:11:f5:07:6b:57:
ef:e8:06:cc:28:f7:a7:58:e1:51:75:9c:8b:89:f8:
cd:52:f6:bc:f6:16:ba:cc:b7:60:61:94:9e:0d:4c:
6e:ef:f1:d4:e5:81:4f:9c:64:fe:2b:24:e0:52:26:
9b:ae:29:a6:3d:1b:7c:59:2d:0f:a1:9f:81:c7:bb:
34:d1:bb:f9:b0:df:b3:34:d9:7b:72:32:32:3d:58:
36:20:69:c3:8b:3a:15:9b:97:c6:00:8d:5e:60:08:
f6:43:58:ca:84:63:03:cf:cf:40:77:78:ee:2f:3a:
c6:d2:ee:14:a4:17:0a:50:90:66:95:1e:d4:02:b7:
9c:47:71:34:fb:15:ac:2e:91:0f:58:ae:37:da:eb:
42:64:9f:4d:9e:18:35:7f:0a:8e:62:1a:28:59:1a:
9f:35:84:30:57:9a:6b:6c:5e:49:d5:36:96:b7:0f:
0b:b7:ff:91:94:82:48:fb:da:98:a7:73:1a:fb:7b:
28:ab:53:77:f7:05:82:79:ee:2a:15:e9:e1:96:95:
ba:6c:9f:59:d4:d6:34:aa:5b:09:96:73:7e:0e:dd:
c2:a5:01:89:ff:37:7a:43:a4:ac:d4:e0:21:cb:1a:
83:92:9b:47:32:95:2d:b2:57:03:9d:23:f5:71:0b:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:E0:97:00:94:EC:E8:3E:B9:15:F4:53:B3:CB:0D:DE:92:BE:99
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ce:16:89:73:f2:db:36:23:13:18:d9:28:40:1d:42:08:22:
28:c2:ef:02:37:67:81:7d:e8:3c:01:d9:51:c9:9f:28:ba:0f:
36:70:22:1c:1f:b1:5f:56:7b:9c:80:74:73:29:14:24:6d:39:
14:80:d0:ec:43:a9:29:07:12:ed:5a:c2:a8:db:52:54:0b:ea:
db:4e:ec:5a:48:1a:11:3b:42:98:7a:87:02:d4:48:05:3a:1a:
85:87:f1:0f:6a:c3:a8:03:69:fa:73:98:27:f7:b3:32:36:94:
34:b1:c7:a3:be:92:44:4f:1a:39:53:22:1c:dd:bc:48:10:14:
79:05:96:8e:03:71:90:16:b5:35:ae:06:2f:ba:89:44:bc:b4:
39:12:61:bb:ec:45:f4:69:80:72:35:04:73:4f:be:f6:74:26:
14:13:f9:01:6d:1c:5f:e0:0b:02:d3:4e:7d:ad:01:1b:0e:ee:
ee:de:12:c0:d5:10:0b:57:a6:3c:de:64:c4:36:18:2d:08:08:
e3:2e:21:57:23:4d:7c:33:45:38:e9:53:52:1d:34:87:47:6d:
f0:75:3f:5b:68:55:27:49:a1:fc:a4:ee:81:71:38:99:35:5a:
e5:4f:64:c4:1a:8d:02:3e:64:08:c6:a9:a8:40:32:38:1f:a8:
2d:27:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:45 2025 by rpki-client