Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: Rx3xY3bOJc3OZPu3hj4GCuHSOTWeHwHs8z0K8pdOWUg=
Subject key identifier: 20:C1:47:16:E5:E5:2E:A1:FD:9D:15:AF:F3:AE:7B:13:9F:13:D4:5C
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 0199233181287C07AFB3C9A403DDA9B89704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 08:01:10 +0000
Manifest this update: Sun 07 Sep 2025 08:01:10 +0000
Manifest next update: Mon 08 Sep 2025 08:01:10 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: B5z1o8bQJ7GJvh85v4EfAPeewKcKZUc5ufQgeBQ1epI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:81:28:7c:07:af:b3:c9:a4:03:dd:a9:b8:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Sep 7 08:01:10 2025 GMT
Not After : Sep 8 08:01:10 2025 GMT
Subject: CN=20c14716e5e52ea1fd9d15aff3ae7b139f13d45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:ae:0d:9b:e9:8d:58:e5:59:68:a4:36:25:
87:3d:4c:e6:74:91:51:91:7b:0e:b5:0f:0c:22:31:
d3:3a:41:f8:e7:d6:b9:71:61:bd:c7:02:ad:1d:c3:
f2:48:f1:e8:4e:c5:e7:aa:8e:21:93:bd:35:2a:42:
13:85:08:26:8d:cf:14:3e:af:60:d6:6d:cb:48:c8:
80:06:1d:11:fb:04:9b:a3:24:4f:e0:9c:8a:cb:0c:
d5:bd:11:db:70:40:55:da:05:52:cd:74:68:28:79:
ce:cd:3e:0c:c7:76:90:1f:db:54:e2:68:1f:a7:6a:
ff:45:8f:d9:7b:92:27:4b:67:62:07:3b:4e:c7:0b:
b4:96:b3:f8:4b:58:3d:8c:27:dd:66:6c:8c:5e:ba:
3f:fc:02:68:74:68:a0:38:e9:90:e0:d5:32:fa:4b:
76:a4:11:56:f7:55:40:5b:f8:7c:5c:9c:9a:ea:0e:
28:f4:91:9d:43:3a:4e:30:d0:69:5b:1f:f0:9b:12:
b2:47:eb:a6:63:70:50:bd:41:54:db:63:5c:64:1f:
1b:7b:a3:4a:85:fa:b4:11:ff:7e:d0:43:70:b6:8d:
58:0f:23:f4:cd:3c:11:6d:be:de:61:7b:d2:54:cd:
23:21:fe:44:57:b2:5d:4f:6d:6d:fd:20:46:77:a4:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:47:16:E5:E5:2E:A1:FD:9D:15:AF:F3:AE:7B:13:9F:13:D4:5C
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:91:f6:a7:74:58:e4:48:33:c2:27:33:b0:0a:91:b8:58:
fb:92:b7:f6:a9:07:32:72:ee:57:cf:d4:3e:a3:7d:07:44:3f:
e0:37:3b:8e:9d:a3:2b:55:5d:29:88:23:4d:62:7e:41:72:e0:
9c:72:f9:60:a5:4c:9f:41:d8:12:cc:15:c0:b3:e5:dd:ad:8c:
4b:7a:20:23:a8:50:55:b5:11:92:93:9e:b6:64:ad:95:96:41:
bf:e2:f2:cf:7f:2f:c0:98:68:91:17:14:20:8a:f6:11:f0:f8:
46:5e:71:33:34:f8:d3:96:62:64:90:b1:c5:04:57:b7:c0:7c:
41:0b:2e:3c:1c:dc:96:0b:57:69:ab:d2:5a:25:56:aa:40:c4:
a2:8d:1f:2b:e3:85:03:82:e4:cd:b6:87:68:dd:4d:68:69:45:
24:20:25:a0:0f:af:aa:ab:d5:85:f8:7d:d3:5c:f3:5b:eb:5f:
e4:92:1a:22:7b:cd:68:73:47:58:c2:0d:9c:82:13:25:90:ce:
ed:05:4d:13:4e:e4:47:78:97:69:24:f4:c2:3d:53:cc:29:64:
af:8c:89:b4:c3:93:0f:4f:05:c9:42:74:b1:17:22:68:37:72:
3c:a3:d9:61:1a:10:e7:67:1f:b8:e8:48:f4:4b:be:1c:cc:ba:
7b:da:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:20 2025 by rpki-client