Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: +Sml2XWhbUhPf4BWSTVaPS/cF4gQoNHaEgFryihTJIU=
Subject key identifier: 85:69:A1:66:91:2E:02:16:AC:71:E1:2B:91:43:16:3B:8B:67:45:4B
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 019922C3A0B7900F1FCD9DBE623F5106A2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0D5A
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: idrk2U3iINmAMGwnAqjY0IsJkAfjqARQBc3JpHVPyy8=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a0:b7:90:0f:1f:cd:9d:be:62:3f:51:06:a2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=8569a166912e0216ac71e12b9143163b8b67454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:1d:70:25:6c:0a:40:96:7c:1f:8a:7f:58:
9d:0c:21:1f:ea:0c:96:82:99:6b:e8:3e:b5:a0:b3:
70:8d:62:ce:9a:a2:f2:34:d0:1d:af:bd:3a:be:8e:
03:fa:9d:64:90:5b:9b:f3:ce:fe:3d:7e:25:5a:9f:
23:65:02:90:6b:d6:8e:55:50:30:5e:c3:ca:59:f0:
50:13:6d:b2:4a:ae:e1:49:91:8d:d2:26:22:84:b6:
22:8e:cd:c5:56:e9:ee:f9:4d:25:37:26:3d:82:ea:
7d:50:f9:47:f9:a9:99:02:71:d9:16:0b:cd:d4:fc:
fe:1d:49:a4:b6:ce:f9:0c:0e:e1:96:d2:93:c1:96:
93:5e:51:c1:0f:95:75:50:d2:e7:57:61:18:bc:ba:
0e:ac:bb:75:87:2d:69:c7:df:f8:7f:14:cd:1e:74:
06:d1:c3:5a:b7:77:08:45:90:fc:1e:13:6c:9f:84:
d9:e1:55:f7:07:3f:82:82:76:66:3c:8a:a8:15:0e:
ed:fb:22:4a:0f:36:89:e0:8f:36:9a:b3:f4:a8:7a:
bd:cf:66:af:6a:5a:8b:fd:83:01:81:0b:f3:6d:dc:
6e:9b:a9:c8:55:03:95:73:d9:e5:55:ea:d8:39:73:
d4:0d:24:1e:64:c2:85:06:37:8b:9e:ae:88:ce:88:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:A1:66:91:2E:02:16:AC:71:E1:2B:91:43:16:3B:8B:67:45:4B
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:31:21:e6:69:71:af:00:d6:42:37:1f:d7:33:c4:cc:52:
38:8e:d4:d8:2e:31:d2:d8:73:8b:55:3f:d8:da:de:10:a3:b2:
33:7b:5e:27:a6:c4:c8:c9:76:63:d1:0d:41:ff:4f:5b:12:37:
5f:ea:44:30:45:63:8d:ea:94:09:13:08:cb:62:ff:5e:ed:e0:
02:2f:e5:04:73:8f:a9:41:40:5c:c5:11:60:90:03:e7:d9:87:
65:4d:09:3e:4a:7a:cf:09:3e:ed:94:83:df:ea:50:93:15:f0:
a1:7b:43:94:a6:40:54:a1:30:4c:c0:bb:c9:e4:7c:5a:b1:3f:
bf:9a:dd:3d:98:aa:e0:f9:a7:92:ea:c5:cb:1a:a3:bd:8c:17:
c4:6e:f9:21:a5:5a:44:69:18:fa:84:d2:9f:37:93:7c:58:6f:
95:b9:01:0a:b3:3d:3d:1a:90:a2:d7:e8:d2:a9:b5:d6:d7:f2:
32:0b:94:ea:56:f5:cc:31:73:ce:61:f7:c0:ad:7a:82:be:5d:
61:ae:af:5d:22:35:c2:fa:6e:56:bc:ae:52:2c:03:58:7e:83:
87:1f:c2:80:5e:a9:56:07:b9:47:63:b4:32:9b:4c:e5:58:a2:
ff:82:db:cf:61:4a:31:44:d3:aa:16:1e:a5:a6:c4:d0:35:24:
1e:66:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client