Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: y2VgxWvK8XSVinFaqb6JQg8jLHwBxWB6EWXTNL+PEkA=
Subject key identifier: 9D:F2:03:01:7E:B9:A1:6B:28:89:54:08:FF:A8:ED:32:2C:96:E8:CB
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0199239FECF0A258245CE9D4CE942DCA02DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:47 +0000
Manifest this update: Sun 07 Sep 2025 10:01:47 +0000
Manifest next update: Mon 08 Sep 2025 10:01:47 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: WaCat0iyrjj/j3R5ljVHrLBajG1IpOaIFgruD7F/s1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ec:f0:a2:58:24:5c:e9:d4:ce:94:2d:ca:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Sep 7 10:01:47 2025 GMT
Not After : Sep 8 10:01:47 2025 GMT
Subject: CN=9df203017eb9a16b28895408ffa8ed322c96e8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:6e:7e:11:b9:ae:b4:89:71:c1:88:82:ac:
40:f0:ab:d1:77:8c:8d:3e:ad:ff:7a:3e:86:72:b9:
2e:3f:da:4a:65:21:ce:30:11:80:a0:91:93:56:3a:
5d:00:65:a3:5a:e2:73:42:74:2d:81:01:be:c1:6d:
a7:c1:a5:87:18:40:be:52:de:4b:4c:fb:f4:37:29:
df:01:03:c1:2a:be:e5:d8:0e:67:97:8c:c1:4d:97:
7a:8c:f8:dc:e1:84:ab:2b:c8:52:a0:77:00:96:99:
58:c7:14:bf:0c:5b:a1:f7:95:7d:2b:8d:94:e4:c8:
22:0b:f4:a9:d6:da:14:6b:ca:c8:bb:c3:e6:b9:22:
38:d6:d1:9b:f0:c5:ef:43:37:31:0f:0b:24:3d:12:
82:f4:62:78:a9:ac:22:99:9b:53:a8:58:5b:b8:77:
81:76:62:da:72:73:4e:54:0c:46:20:bb:d0:1d:d9:
33:69:8c:3a:e8:2c:eb:e5:63:03:c8:c9:ec:7b:3c:
1a:4a:df:dc:fa:ea:68:25:9d:e4:cd:2c:39:2a:5b:
05:e6:23:87:3a:f5:2d:bd:88:6d:9e:42:6d:5b:d6:
76:cf:b1:bf:f6:d4:d6:97:c8:de:9f:bb:5f:db:60:
53:c7:3d:6d:99:20:18:52:f0:cf:8e:41:f9:0a:ae:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:03:01:7E:B9:A1:6B:28:89:54:08:FF:A8:ED:32:2C:96:E8:CB
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a2:55:35:5b:f1:a6:88:f5:ca:89:f2:6a:d7:1e:f1:41:07:
e7:a9:4f:a6:c6:a8:65:71:ea:77:29:f0:e0:d2:64:b1:31:b9:
4c:01:dd:b1:f9:ed:93:6a:9a:96:5f:27:58:e5:db:17:e7:de:
4d:15:37:10:e6:f8:d6:a6:31:35:d7:12:ec:55:a0:1d:64:fe:
96:6a:3f:9a:cf:28:f8:52:92:27:21:06:13:1c:8b:4f:f1:4a:
68:3b:b3:a0:af:a2:d1:35:57:14:b1:b1:59:72:a0:14:0a:23:
48:e5:b0:e9:cf:5e:4b:5a:d8:af:4e:3e:77:f2:90:74:8b:d0:
c9:a5:59:02:aa:36:6f:da:83:50:df:66:a0:be:5a:6c:05:ec:
d5:82:dd:4b:51:87:78:ed:ac:11:ee:c7:ce:50:6a:4c:39:7d:
95:01:3e:68:7f:b3:b7:d5:00:80:38:48:7b:84:b6:44:29:ed:
8e:0d:63:86:08:a3:02:de:b3:3e:05:70:92:75:6d:f1:6d:ee:
af:35:d9:05:9a:b7:bf:d7:33:d2:06:c8:1c:d7:42:c2:0b:62:
d5:f2:fa:50:80:36:63:bf:28:de:43:05:2e:ae:ee:e0:9e:f3:
9c:fe:53:c9:d8:bb:94:fe:75:31:f1:63:9f:59:ef:f8:42:44:
ac:f9:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:13 2025 by rpki-client