Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: isbyL5avCHs0zlC8G8QJw6oy6QjBI0Kq2+G2mEzrGhY=
Subject key identifier: 8C:7A:FE:8A:85:07:08:9F:64:00:83:0A:04:88:D4:2B:D3:FB:85:FA
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 01991876D599077E90B2AF568E702DC47F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 166F
Signing time: Fri 05 Sep 2025 06:01:05 +0000
Manifest this update: Fri 05 Sep 2025 06:01:05 +0000
Manifest next update: Sat 06 Sep 2025 06:01:05 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: T8L73BYgnr2nHwJqnukhNNi2qJ/Boobn8L/hjzAnoA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:d5:99:07:7e:90:b2:af:56:8e:70:2d:c4:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Sep 5 06:01:05 2025 GMT
Not After : Sep 6 06:01:05 2025 GMT
Subject: CN=8c7afe8a8507089f6400830a0488d42bd3fb85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:93:1d:e4:37:a2:a8:70:aa:8b:42:ce:6e:
fc:60:9f:5c:6f:59:d9:1b:af:97:18:a9:59:b8:25:
30:3b:d3:e2:17:5b:77:3d:56:55:a8:11:2d:7d:cd:
15:8b:35:53:2c:7f:b7:8a:36:cc:35:6b:3e:4c:05:
a3:ed:5a:50:4c:a6:26:3b:da:0f:c4:95:6e:73:8c:
66:bf:b0:8c:eb:5f:03:48:1e:fa:ad:3c:36:2e:4f:
14:f1:bf:90:f3:0c:ff:ed:4a:fe:ea:c8:65:5a:6a:
86:67:88:1e:d1:eb:56:52:1a:ee:80:3e:64:0e:c5:
ff:b1:80:8c:8b:6b:f9:3c:a8:0d:05:d0:ea:ca:1a:
06:c4:0e:0b:49:2f:94:d8:b4:e2:6f:75:9d:0b:38:
d1:01:ad:d6:82:39:57:b8:2b:d5:5a:72:20:8f:b5:
60:13:3a:4e:09:c0:1d:4d:d5:5a:38:24:05:78:2f:
e7:8f:a9:e0:97:3f:cc:44:1e:ba:c2:3a:d5:83:7a:
3a:11:0a:4b:fc:a9:81:65:66:30:99:e7:15:5b:ec:
57:5c:16:cf:0d:96:5d:79:b9:db:ca:bb:7f:f9:c9:
1e:ae:4e:32:6f:d8:cb:b3:a9:39:00:3d:58:6a:23:
38:c0:66:27:84:7a:fc:c1:f6:4b:53:c2:65:d4:97:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:FE:8A:85:07:08:9F:64:00:83:0A:04:88:D4:2B:D3:FB:85:FA
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:81:8c:8d:a4:16:e8:5e:1b:09:b5:52:f9:43:53:11:72:
26:0c:04:e0:98:2f:61:d8:d9:33:4e:02:2f:f2:af:73:e2:4a:
f5:a7:a0:fe:aa:38:ef:84:9f:32:c3:83:82:72:38:5f:4b:5f:
80:09:97:4e:1c:c7:08:66:96:ef:cc:97:c4:32:05:1c:00:2e:
c8:56:76:2f:b0:87:6d:1e:ba:27:f3:67:a8:91:15:18:6a:dc:
64:c4:b8:da:d6:00:85:65:7d:08:e2:6b:aa:7a:da:a2:ac:6c:
d7:0d:75:fc:96:42:b0:d9:9c:99:40:1e:21:06:b6:b5:5e:2c:
fe:ff:53:3e:af:b5:33:10:8d:5e:28:33:f0:43:6d:a8:02:84:
21:57:a7:ae:1d:bf:03:62:89:f4:90:d8:9e:5b:fd:7b:cd:29:
8d:aa:e6:89:ef:f5:18:30:02:aa:6a:9a:40:66:b4:1c:5a:b7:
50:41:54:08:09:d0:7f:fc:ad:77:70:b5:67:d9:5a:82:78:ec:
ab:c0:fd:9e:31:4e:a8:7c:28:d6:9f:bf:4a:13:af:a2:e0:8e:
75:b8:80:0f:85:ec:cb:0d:f0:fb:9d:d0:96:69:08:e5:14:e1:
22:77:bc:23:39:f9:1f:61:94:0a:ae:04:9a:f1:5d:34:e7:9a:
44:3d:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:28 2025 by rpki-client