Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier: MOai0k832or7hUIWQCMHZe5j57+aD5duDiYxTiqBSFU=
Subject key identifier: 2E:12:74:27:C3:CD:02:BB:59:10:A3:54:AB:C8:48:6D:3A:DF:98:CA
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 019935029CC438A7CECD6CCEDFA36C6DCF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number: 066B
Signing time: Wed 10 Sep 2025 19:03:07 +0000
Manifest this update: Wed 10 Sep 2025 19:03:07 +0000
Manifest next update: Thu 11 Sep 2025 19:03:07 +0000
Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: SCwT+pZqrg+xzF736SJUag9LjLtmuGCwfq7wG0emzA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:9c:c4:38:a7:ce:cd:6c:ce:df:a3:6c:6d:cf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Sep 10 19:03:07 2025 GMT
Not After : Sep 11 19:03:07 2025 GMT
Subject: CN=2e127427c3cd02bb5910a354abc8486d3adf98ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:aa:c3:40:4a:84:7e:d4:b0:e9:36:8d:bb:
bc:45:51:aa:63:69:9e:89:15:12:45:c3:93:09:b5:
c0:09:a0:cc:7e:8a:41:cc:53:6d:92:e2:26:13:2d:
3d:8c:a3:70:f3:a8:6d:af:fb:79:8b:40:06:1c:9f:
7d:3d:11:2a:56:b3:f6:cf:f9:81:b2:60:c5:9d:09:
62:2f:0f:bf:80:dd:ce:a1:08:49:fe:c4:e3:2f:e2:
25:1e:1f:4b:ed:92:76:c4:57:af:cc:76:13:50:74:
7a:69:13:b3:70:5d:2a:e3:40:db:a7:dd:97:0c:51:
2a:79:c4:8b:35:0f:66:25:68:5e:ab:17:73:ef:8b:
3e:c7:a6:42:a7:ad:f5:da:ca:05:66:27:d8:4f:c1:
c1:3d:ea:1e:ad:c7:5a:5a:50:47:73:d6:d9:c8:09:
91:1a:52:95:b5:b5:92:6d:2f:4a:d6:a6:cb:56:87:
08:5e:d7:ee:5b:4a:b4:f8:e8:6c:f8:db:f6:6b:14:
1c:a9:31:59:56:b8:84:6c:1a:d3:bd:c4:c3:06:60:
b0:03:7e:fc:df:e2:a0:4c:06:55:bd:2c:a3:ab:c2:
7a:81:45:b8:59:ca:56:d5:01:e0:65:0b:fd:6f:6d:
36:d1:b7:73:9e:6e:a6:37:16:5b:7d:13:5a:07:d9:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:74:27:C3:CD:02:BB:59:10:A3:54:AB:C8:48:6D:3A:DF:98:CA
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:c9:88:6d:0b:34:91:f3:ba:ea:84:a1:19:8d:27:17:de:
89:0d:ec:0b:44:e7:36:c6:45:f9:63:a5:aa:9e:60:53:87:4c:
72:f2:dc:db:7c:c2:8e:b7:83:3b:9a:c2:fa:5e:95:9b:eb:e1:
d9:75:e7:07:01:a2:23:ca:69:b4:5a:aa:3a:aa:93:ec:12:ed:
52:73:25:22:50:c6:72:e8:4b:5f:53:0b:a3:c6:16:47:79:bf:
98:24:dd:da:d1:c4:13:22:0f:66:e0:c1:e1:9e:12:44:ce:eb:
ef:73:6b:a0:f9:fa:cf:c7:16:1b:39:11:bd:e4:90:c9:69:8f:
89:ec:78:13:01:98:b2:e9:42:12:68:fc:b1:85:18:74:81:ff:
fa:8a:17:5a:7f:8b:4c:90:e7:60:e0:14:9b:87:96:60:ee:db:
ed:e7:99:dc:45:04:7a:6b:47:70:e7:7d:81:2e:11:8e:9d:a9:
d2:41:2b:53:04:04:39:ba:d9:6d:28:a5:5c:53:62:7a:89:56:
ec:ea:5b:00:82:c3:13:d4:86:d2:2a:05:14:58:1a:a3:e7:5b:
e9:05:2f:da:99:d3:19:d6:68:59:09:da:54:58:80:f4:44:4b:
62:76:5f:0e:c5:15:b9:51:b9:f2:94:2d:3b:8d:2d:41:df:0b:
3b:78:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:26:42 2025 by rpki-client