Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: S1Ex0nOn2P7zcfq/k6tw4Uk/EyY6aKMlVjPdv9kZmF0=
Subject key identifier: A0:55:95:01:21:E2:44:B7:1A:8D:B0:47:EA:1B:85:78:9E:60:9A:6C
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01992F368944CD11C42A9F491B34A889EFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0D91
Signing time: Tue 09 Sep 2025 16:02:07 +0000
Manifest this update: Tue 09 Sep 2025 16:02:07 +0000
Manifest next update: Wed 10 Sep 2025 16:02:07 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: 2jqE5FJs/UpUp4i3/btaqWZGAki3KvfnHlLK5aTRwaQ=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:89:44:cd:11:c4:2a:9f:49:1b:34:a8:89:ef:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Sep 9 16:02:07 2025 GMT
Not After : Sep 10 16:02:07 2025 GMT
Subject: CN=a055950121e244b71a8db047ea1b85789e609a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:12:1e:f9:74:40:8f:f0:47:d8:00:03:8d:
a0:49:24:5d:4f:51:0b:67:19:51:6b:f6:d1:b5:17:
49:f0:a2:ec:f3:1b:cd:4f:83:e9:46:61:ef:fd:3d:
8e:d5:16:7c:df:41:ae:f4:cb:a3:48:ad:e8:99:b2:
29:e2:4b:bf:8a:da:9a:f5:e0:f0:19:e1:e2:dc:2b:
0d:e1:8c:1e:f7:14:a4:2a:d1:d9:2f:5f:bd:a2:4c:
fc:29:ba:43:af:1b:93:fc:ee:72:2a:27:9e:44:17:
99:27:7c:0a:f1:b9:34:da:52:a1:2b:11:58:56:7a:
6a:aa:a9:8f:8d:40:92:3b:e4:33:0b:1a:77:68:7f:
7f:af:50:7e:d6:fc:c1:31:2b:dc:de:81:7c:3d:98:
9d:e8:88:92:1e:db:9c:bc:54:a2:c1:9a:bf:ff:0b:
d8:fd:84:fa:30:23:04:ba:8e:17:fa:f5:5b:fe:12:
af:b3:26:67:02:93:fc:85:82:32:c4:db:e4:3e:3c:
f5:05:47:fc:23:60:37:dd:1d:ad:60:27:e9:7d:3d:
a4:ea:d3:32:89:0b:f9:d7:ba:5a:d9:9f:2e:4c:6e:
83:1c:03:8a:b1:b1:7c:3c:8a:ce:f6:b3:8f:96:c1:
7a:06:a0:4a:53:f8:0a:ff:0e:f0:7c:65:9f:6f:5c:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:95:01:21:E2:44:B7:1A:8D:B0:47:EA:1B:85:78:9E:60:9A:6C
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:95:9f:a7:f5:44:e5:ff:16:20:da:b6:e4:40:d1:b1:38:f3:
13:b4:e0:e3:f4:4c:35:2a:f5:c4:fb:ef:bb:87:74:02:6c:e5:
de:44:06:13:6a:16:c2:20:b5:48:5b:94:3c:a5:dd:0e:60:e7:
5e:40:78:10:0e:7f:e5:6b:77:9c:2d:a3:3f:d1:30:5e:09:e2:
6d:9b:35:04:91:0d:87:ab:c4:86:06:fa:ad:24:5b:66:23:16:
19:df:cb:db:63:63:80:30:ae:86:b7:67:74:57:08:4e:7c:3e:
ad:91:10:0e:36:05:aa:65:04:98:df:d9:a3:78:02:37:93:26:
ce:1c:e8:e9:62:bc:ed:20:89:4d:81:cf:f5:d1:2e:c9:98:4b:
20:c1:38:c4:7f:58:79:cb:01:b6:7a:2c:5c:c7:a8:08:57:91:
64:31:75:4a:8f:6c:30:fb:db:2e:f2:21:29:8d:97:f0:0c:e7:
70:24:4f:1a:7c:94:37:97:22:87:be:ff:6c:ed:0f:6f:7a:8a:
a9:c8:7f:51:61:17:24:ab:9b:c4:9f:43:56:e9:9d:21:ad:d9:
c1:89:8e:5e:9e:e8:f7:88:da:dd:11:b6:d0:dc:eb:fc:b1:de:
32:59:f5:cc:e6:d7:48:ba:61:73:e6:8f:f4:10:ce:4c:59:29:
f0:df:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:53:13 2025 by rpki-client