Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: TNFaTetEpZFwH9t1mO6EhpmphgjMNewMvVNQ3DJmJGk=
Subject key identifier: 28:03:B5:F6:6A:EA:E3:13:D5:FB:CA:9C:34:99:E1:0F:2B:23:B5:6A
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019927EA4A0CF47EADC8E732B11B02E7FFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0F6A
Signing time: Mon 08 Sep 2025 06:01:29 +0000
Manifest this update: Mon 08 Sep 2025 06:01:29 +0000
Manifest next update: Tue 09 Sep 2025 06:01:29 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: tSKlmKqpJ9G9+hf+HDA3kR3plKX0wS4ASnO2zL/uq7Y=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:4a:0c:f4:7e:ad:c8:e7:32:b1:1b:02:e7:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Sep 8 06:01:29 2025 GMT
Not After : Sep 9 06:01:29 2025 GMT
Subject: CN=2803b5f66aeae313d5fbca9c3499e10f2b23b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:a9:97:55:a1:d1:7f:ff:46:6d:58:e4:00:
16:81:ab:12:88:72:71:35:fd:4b:5a:42:4e:d2:92:
89:60:e0:d2:5b:e6:a8:47:3e:a4:5d:b2:70:ae:70:
f5:7c:80:78:bd:7e:1e:1a:8f:a7:f9:3c:89:cf:32:
5a:8f:ba:82:f1:10:5c:a9:7f:83:24:e3:47:f7:69:
1f:9e:43:c6:5d:cc:b8:b4:e0:57:cd:d5:19:73:40:
fd:d0:cf:7f:d9:bb:08:b8:83:c0:49:10:7e:29:05:
1d:5e:02:3d:1b:91:5d:7d:11:b9:8f:28:77:b5:e2:
e4:46:82:8b:0b:d9:56:9b:3d:21:b0:f3:3f:f4:c5:
60:78:38:a2:e4:85:de:cd:d1:ec:58:e8:d4:67:d0:
6f:b8:83:f8:0f:f2:e7:8a:3f:81:1a:a5:f8:fc:f1:
14:4c:57:d3:e2:1e:7c:ad:35:41:28:0d:ac:23:85:
1f:80:d1:6f:a5:d2:13:5a:5b:a8:35:ad:7e:fa:07:
51:56:a5:4f:20:c6:7f:2a:12:9f:dd:0e:0d:1e:9a:
d9:b2:25:a4:ef:23:82:bb:52:68:c6:c2:9e:22:89:
9a:46:74:75:19:e8:a3:f3:4a:b1:d1:b6:34:4f:e6:
31:48:6f:34:06:e2:86:2b:36:e4:84:be:a7:8f:7f:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:B5:F6:6A:EA:E3:13:D5:FB:CA:9C:34:99:E1:0F:2B:23:B5:6A
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:33:a0:03:2d:ce:5e:43:9c:b0:7a:06:08:cc:88:3c:19:
56:d0:23:6a:64:46:f0:9e:a8:b9:99:2e:ef:28:b7:8e:7e:df:
cb:c8:aa:81:c1:85:0e:b9:d6:d5:de:0e:2d:8f:6e:a1:b2:8b:
0d:b5:8a:4a:44:20:35:69:35:56:1e:65:b5:e9:9b:b1:00:3f:
2d:ac:f1:da:52:11:95:81:51:06:6f:e9:b9:39:bc:20:d8:fe:
00:0d:bc:ab:4b:cf:96:c5:1a:0a:dc:a2:cb:8c:d1:c1:3a:3a:
09:c1:8b:6b:30:e0:bb:85:70:23:0d:b3:c5:76:f3:d7:c1:1b:
bb:c2:49:27:e9:11:19:21:ae:d4:94:c9:86:bf:c4:80:f6:99:
0b:7a:02:b2:5b:2e:5c:bf:fb:c8:03:c0:04:0c:3c:90:60:12:
78:26:50:8e:ad:5b:80:cc:14:0c:96:6e:df:cb:bd:1a:4b:c6:
2b:0a:1b:1d:b8:36:ff:42:23:14:78:a0:0e:48:23:09:b7:59:
6e:c4:34:8c:c0:6e:77:79:79:fb:75:89:9a:89:82:d0:d9:88:
e9:52:7f:06:f0:e2:7e:cc:c3:f0:da:36:17:c8:55:cc:c1:74:
42:4b:5a:ce:a8:b0:bb:eb:00:57:1f:88:68:8f:63:1a:c2:bb:
9e:2f:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:42:48 2025 by rpki-client