Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: MSFNkQme8/jwTqK6UqXeDOac9iNs9M1zfkGsYsEosLM=
Subject key identifier: 22:23:40:E2:BE:97:56:0D:A2:1E:35:9B:F6:B1:14:B7:FD:C2:EF:F2
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 01993349AF6A59F258B12235A517D2CA7F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 11:01:30 +0000
Manifest this update: Wed 10 Sep 2025 11:01:30 +0000
Manifest next update: Thu 11 Sep 2025 11:01:30 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: cx8021qj7h7KxHmqAvroz5fkmtUemnOnznH3oyb33TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:af:6a:59:f2:58:b1:22:35:a5:17:d2:ca:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Sep 10 11:01:30 2025 GMT
Not After : Sep 11 11:01:30 2025 GMT
Subject: CN=222340e2be97560da21e359bf6b114b7fdc2eff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:05:b3:a0:72:bc:b9:2b:81:6c:88:e0:66:
23:a6:e3:5d:2e:6e:05:86:5d:d2:7b:d7:d5:c1:26:
89:89:26:13:96:5b:b2:0f:fb:44:81:b1:6b:57:e2:
98:fc:4c:16:e5:c6:5e:ca:a8:52:bb:a6:8a:48:e9:
3b:f6:23:9a:03:e1:65:b3:c4:69:41:2f:1f:86:4e:
ad:31:11:5f:35:b1:dd:db:ab:9e:d0:cd:8b:5c:15:
07:e1:cd:e8:9b:85:a0:9a:ec:c3:69:ae:b3:9b:e0:
2a:11:27:6a:79:c6:9e:2f:36:3a:0e:c0:95:b9:00:
7e:7e:73:0c:3b:bd:13:bd:61:37:0e:f5:44:05:29:
eb:bb:10:da:3d:01:d1:9c:ae:c2:c6:ac:91:3e:5a:
0a:e5:dc:88:c8:e5:45:42:cb:01:ae:76:8c:49:1a:
6a:c1:c2:38:5d:d8:cd:8c:fb:d9:5c:93:b9:e2:ba:
27:4e:4b:ee:ae:d1:54:d0:a0:0d:55:de:7d:1d:91:
2b:a4:61:f7:f8:eb:fe:6a:b8:2d:e3:37:28:63:f1:
91:c3:e8:11:50:a2:fe:2b:10:0a:51:03:c1:a7:bf:
d4:d2:ac:d3:a7:b1:25:20:09:4c:a9:e5:2d:cf:85:
cf:4f:10:e8:10:3a:54:77:65:d4:57:96:be:c8:a5:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:40:E2:BE:97:56:0D:A2:1E:35:9B:F6:B1:14:B7:FD:C2:EF:F2
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:36:98:76:84:a1:91:b6:73:22:e2:f9:32:93:43:aa:0b:
c4:41:43:32:7d:78:2d:ed:e7:28:28:50:7c:4b:5f:50:03:3e:
19:10:9e:3f:0d:9e:4c:c5:79:cd:01:e3:86:39:9c:1a:1c:95:
4e:62:60:34:5d:e2:b8:88:8e:c9:0d:04:54:b3:f7:b9:1d:bb:
af:c9:85:ac:14:75:3b:9c:1d:66:9d:ac:79:96:78:3b:8c:f0:
b6:ba:fb:35:31:59:0e:6b:71:5c:1c:d7:15:b6:16:f6:a0:9d:
fc:cc:a5:8a:80:86:93:8f:3e:37:62:31:8c:83:4f:fd:a3:ec:
64:b6:de:86:a1:af:62:75:28:c9:c4:bc:69:29:ed:2a:aa:80:
b8:dc:23:73:30:c3:28:5a:da:d9:28:61:42:49:4b:ce:0f:63:
0f:4f:0e:28:05:d2:02:7b:8b:25:f6:22:4b:1a:59:a9:01:1e:
30:3f:87:dc:ef:37:7b:75:99:6b:9c:ec:9b:07:b2:9f:36:32:
76:a6:83:a7:c0:33:2e:51:8a:9c:6a:cc:4c:c3:92:7c:7b:ef:
72:e8:02:ca:16:52:c2:a4:98:cc:93:d4:14:b3:85:f0:77:ad:
31:33:f1:76:cb:16:67:54:38:f1:1b:2b:29:c4:e0:12:27:9c:
18:42:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:55:13 2025 by rpki-client