Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: dFCiKANSP3hufwJInJvCrAYXtO/rrjgH0kj7ThUQCIg=
Subject key identifier: 73:C8:A4:B6:21:78:6B:25:8E:CA:B3:99:40:08:9D:43:51:B1:31:74
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019924B1AFD36299BBDD7875E48F3607F5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 15:00:48 +0000
Manifest this update: Sun 07 Sep 2025 15:00:48 +0000
Manifest next update: Mon 08 Sep 2025 15:00:48 +0000
Files and hashes: 1: 16vis8mKCMw0Lqb7iG4NH7TCbeU.roa (hash: 7jQbnk7QOCJ8ZAWzucJtV6/4pdB8lxfRJErUH5wxQnk=)
2: WmLDow5KPtPm7R4XsODNb3nK6Og.roa (hash: 4GYJeuCBXCBDgFT4ZnecJgi27g3BGxeNgDA7fyyOWHA=)
3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: /7KmJI3Nt4fcinUvIaprIF/H9dSPX++Fzv+8hGDXh7Y=)
4: sKFV1IZJE6PHOD4OWD9PuwV-r0c.roa (hash: FEZExqLNwEb0ZHJP/qaT8YTmmptHTZovCZeuHCrrdBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:b1:af:d3:62:99:bb:dd:78:75:e4:8f:36:07:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Sep 7 15:00:48 2025 GMT
Not After : Sep 8 15:00:48 2025 GMT
Subject: CN=73c8a4b621786b258ecab39940089d4351b13174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:a1:8a:45:fd:1d:e1:58:f4:12:2c:b8:ad:
1a:13:e1:1b:ed:94:09:f5:f5:34:27:fe:ad:af:e9:
90:6b:67:5d:13:d5:ce:44:9c:4a:ae:f0:b9:58:06:
84:6e:17:bc:0d:c7:c0:6a:8e:03:24:59:e8:48:59:
84:f0:86:d1:27:98:f0:f2:27:0e:0c:3e:72:dd:16:
65:73:e7:f7:1b:37:cc:9b:3e:52:74:9e:96:53:04:
db:0b:c5:2c:65:a3:20:26:7d:38:a0:4c:de:4e:c2:
9c:5e:8d:5d:5e:6a:5a:cc:5d:f4:c5:47:ec:5f:01:
d8:3d:ed:f4:c4:d6:0b:14:2c:ee:c1:98:8a:7e:0e:
15:9d:90:53:05:ce:c8:87:46:dc:94:e7:f3:97:11:
9a:13:aa:7c:7d:bf:8b:fe:7a:94:01:06:2f:e4:f3:
33:90:d7:db:92:16:3c:10:75:a7:da:4f:de:69:8a:
30:99:0f:34:81:3c:04:5c:5f:df:99:ac:54:f2:64:
54:71:1b:19:5e:a1:1b:ec:a2:84:d3:02:25:2b:d8:
56:ae:62:c6:ba:8d:db:61:92:4d:75:12:10:b5:80:
43:04:f5:7c:9e:b1:f5:64:ac:3e:6f:4e:89:52:70:
82:20:d0:d8:cd:db:23:e3:d3:15:08:04:a3:ca:93:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C8:A4:B6:21:78:6B:25:8E:CA:B3:99:40:08:9D:43:51:B1:31:74
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:10:33:43:b9:b9:7a:a9:03:66:6b:c1:27:4e:5a:c2:57:
b3:c8:87:ce:59:84:36:01:ad:2e:2e:2a:6c:66:c6:44:d1:09:
07:f7:66:3a:14:4c:c2:0b:24:f7:c9:19:02:fa:84:a8:97:96:
84:3a:02:f4:b6:ad:8c:94:70:f6:0d:97:82:a5:07:45:cf:4f:
f2:e9:13:2b:e1:53:45:65:65:40:1c:68:c6:22:6d:dc:4a:9d:
2b:e3:5d:d6:8d:1f:75:08:68:64:6b:a1:4d:9b:eb:97:7e:cf:
9d:d1:3c:a2:bb:9c:df:22:da:2a:1e:51:aa:98:5a:93:e7:2e:
32:d6:95:f5:31:48:c3:d3:9a:1b:11:aa:cb:69:8c:f0:71:e8:
87:fe:63:20:36:8a:f7:a1:fc:7f:4e:3f:ab:d5:10:86:b0:0d:
7d:87:f1:51:56:c3:88:1d:7b:e3:d5:d1:31:c8:55:e7:51:fd:
5a:c0:d9:01:67:2f:4d:74:97:6b:9c:b0:04:f3:67:1b:38:a1:
f3:a4:6e:2e:f7:f6:4f:3b:d5:24:28:0a:0b:50:8a:04:8d:aa:
11:48:48:6e:69:65:e8:a7:db:58:44:b0:a1:f2:aa:7b:67:8f:
89:9f:66:a0:b8:14:f0:4b:38:70:45:3b:ae:4f:9d:10:fd:af:
9b:9b:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:29:13 2025 by rpki-client