
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: hfxvS/HAyzbaIm8/f6n37WJVjhQzZCkGcocJx3vCAoM=
Subject key identifier: 27:7F:12:40:C0:C1:46:A2:BF:E2:13:86:6D:F5:B5:AD:B0:1D:BB:EC
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019922FA2C1B3875CBA17F342AA96200F7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 07:00:44 +0000
Manifest this update: Sun 07 Sep 2025 07:00:44 +0000
Manifest next update: Mon 08 Sep 2025 07:00:44 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: pImO+qY27Eap47I1CJL9BvVrweIpCtw9NX70EM9hpJ4=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2c:1b:38:75:cb:a1:7f:34:2a:a9:62:00:f7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Sep 7 07:00:44 2025 GMT
Not After : Sep 8 07:00:44 2025 GMT
Subject: CN=277f1240c0c146a2bfe213866df5b5adb01dbbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:2c:f5:e8:db:9b:2d:c9:81:c6:ad:04:67:
50:36:62:50:a7:8e:f6:49:a2:12:e0:eb:ca:b0:19:
9b:5a:ef:38:98:2e:ab:ea:fa:54:18:c7:02:42:03:
17:1d:65:f5:2b:46:c2:06:07:29:f4:d1:36:03:73:
db:93:91:0a:9b:6d:c6:47:4c:8a:ab:ff:2e:39:bd:
27:07:b1:f8:85:1a:15:64:be:aa:de:ea:34:f0:b8:
07:a6:20:01:f7:2b:eb:f6:17:65:ae:cf:a3:62:64:
90:96:60:a7:44:69:5b:19:b4:62:b6:d0:55:3e:7f:
c1:d6:12:3c:57:79:c6:f2:4f:55:46:88:3b:a4:e4:
24:c0:8d:c8:c4:a8:7a:83:62:20:2c:16:03:e6:03:
b5:3e:d3:70:d4:86:c6:85:f4:15:c3:12:64:2a:56:
b4:0d:16:1c:17:9e:6a:1f:fa:18:eb:8d:2e:e4:9d:
21:6d:b4:44:e0:bd:14:ee:81:01:aa:9c:8f:42:2d:
a2:f4:53:2c:95:b2:b0:58:0f:9c:c8:58:ef:58:49:
a1:0a:68:ab:3a:79:da:36:ce:25:a1:ac:f3:dd:8d:
15:af:1b:ae:61:ed:2d:25:26:cf:70:80:5c:8c:2b:
77:42:48:6b:cc:92:df:ec:b2:93:f6:c2:13:8e:06:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:12:40:C0:C1:46:A2:BF:E2:13:86:6D:F5:B5:AD:B0:1D:BB:EC
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a9:65:5c:68:8d:56:ed:fc:cd:68:28:6f:32:07:34:ef:f0:
dc:10:54:63:2e:a0:d7:cb:7c:e0:66:63:a5:90:58:89:ec:09:
ea:c1:4b:84:a0:18:1b:e0:fd:e5:7c:de:4c:a1:09:ce:58:80:
c0:93:c3:e2:f1:19:af:84:aa:6c:09:c5:b3:5f:c7:af:e6:b1:
03:08:ef:1c:38:3c:a8:7c:5f:ad:03:a1:14:c2:d2:e1:88:ba:
d6:7f:42:69:5c:20:fa:ee:8b:5e:15:78:cd:fe:b5:b6:ca:95:
8d:d2:9c:9d:15:f1:67:0b:7e:94:89:2f:e6:a6:39:3a:a5:f6:
bf:b2:8e:73:58:35:c7:9a:8f:00:af:9a:17:d8:d8:78:20:eb:
3f:6e:81:79:eb:2e:e3:e4:20:55:4a:fd:8b:02:da:1d:34:2a:
a5:9d:3d:5b:8c:e2:34:0a:48:b2:a3:97:4c:65:0c:b2:c8:41:
1e:f8:2d:e7:c4:ac:b5:7e:c8:1a:60:83:8a:d8:3a:9f:b6:68:
29:ea:81:92:bb:69:be:2f:11:b7:ea:9f:7c:61:df:ba:e0:a2:
4f:6a:ce:9f:b3:06:b6:c7:9f:aa:a0:f1:7f:19:51:30:48:c0:
1f:dc:eb:81:f7:55:91:61:02:43:c1:3f:8d:62:e3:42:9f:34:
3c:62:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:13 2025 by rpki-client