Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier: A5ilReszI//R33u92Ocdca4vjyvT5/WdzBnQ0blXGuA=
Subject key identifier: F4:F1:1E:25:BB:A0:3A:F6:08:27:D9:6C:7E:BA:B8:E2:E5:54:CA:B6
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 01992DEBEC1FFBD878E71EFC06A28249D0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number: 0865
Signing time: Tue 09 Sep 2025 10:00:59 +0000
Manifest this update: Tue 09 Sep 2025 10:00:59 +0000
Manifest next update: Wed 10 Sep 2025 10:00:59 +0000
Files and hashes: 1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: nLEizOFoYFEjM3LQfQZC8kLXG1sxdUtBTldYjzqwRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:ec:1f:fb:d8:78:e7:1e:fc:06:a2:82:49:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Sep 9 10:00:59 2025 GMT
Not After : Sep 10 10:00:59 2025 GMT
Subject: CN=f4f11e25bba03af60827d96c7ebab8e2e554cab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:38:ef:8b:27:18:73:c7:34:4f:10:fd:83:
35:c7:e9:e9:68:a2:eb:89:09:1d:0e:3e:ad:a8:d3:
2d:59:bd:82:bd:5e:bd:fa:a4:15:a5:c9:4e:c1:2b:
18:86:62:b4:69:98:7d:3b:e3:24:ca:64:1a:5d:9f:
69:38:93:1f:ed:c1:e1:79:16:b7:92:78:ae:20:dd:
bd:01:e0:fd:28:10:39:77:ad:08:f6:a9:76:b9:76:
e6:ca:d8:6b:ac:ad:8b:b5:c0:9c:b8:5d:fc:12:55:
38:6e:ab:ea:5f:46:d9:85:9b:12:d1:74:9d:04:82:
fa:9a:1f:2b:75:31:21:23:1a:81:20:83:5d:53:70:
50:e9:4a:c1:c7:26:55:a0:28:2b:cf:bc:88:4e:5e:
c6:05:82:49:11:3b:26:75:e6:7f:35:1a:8c:e5:20:
75:05:41:d5:68:03:64:6d:9b:49:d6:73:27:d8:12:
ab:fe:eb:ab:e5:83:c1:73:2f:ba:15:db:ed:ba:c3:
c5:0c:0c:9f:88:fc:eb:2a:54:5a:48:c2:cb:45:77:
ba:a6:2a:eb:9d:8e:f3:09:cb:ec:c1:84:ba:01:3e:
61:41:46:42:16:a5:69:e0:0f:38:ef:2d:11:68:d6:
07:ab:9b:6c:3d:eb:c9:b0:d4:f9:13:47:e9:a6:61:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:1E:25:BB:A0:3A:F6:08:27:D9:6C:7E:BA:B8:E2:E5:54:CA:B6
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0d:69:8c:60:16:8d:8d:1b:27:60:45:70:2f:8e:30:cf:c4:
cf:32:b2:67:2c:2c:d0:e1:af:b5:14:8c:8d:3a:83:f2:41:10:
11:e0:13:b5:c3:8d:f7:cb:c4:b4:1e:59:bf:10:45:1f:e3:57:
46:d4:b8:50:b4:05:c7:fb:57:59:cc:fb:03:e1:bd:dd:ef:80:
1a:71:67:fa:34:d6:7b:22:0b:d9:db:5c:dc:d3:f9:96:a4:62:
43:91:66:cd:0c:42:74:89:50:a1:c1:78:b8:65:96:c6:65:c6:
a9:17:34:29:bf:08:d3:86:7f:39:41:62:30:53:26:78:52:05:
70:59:55:e8:17:e1:95:d0:53:8c:03:93:98:a4:0c:1e:63:f8:
50:78:4a:94:42:71:ef:06:00:2e:2d:5f:0e:b3:19:59:3e:41:
51:41:67:25:fa:69:1b:c7:f5:c3:6c:8e:a7:1d:be:18:9f:4e:
dd:02:33:6e:17:a7:38:63:2a:65:92:91:ea:42:43:0f:c7:07:
b9:33:c1:7e:61:8d:6b:1e:cb:bd:3d:30:2a:c1:c1:62:52:16:
22:8f:c3:ac:b5:b7:83:b1:5a:44:de:f1:2f:de:87:63:0f:f1:
42:97:e8:04:45:fa:e4:5d:ff:43:ab:ce:2f:c5:a5:9b:2c:9b:
d8:c7:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:31:32 2025 by rpki-client