Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: bd8DT+UoLGyBfYXz2gNdyVSZZ5Gufqe2B0RA5sBSN9U=
Subject key identifier: FF:13:95:68:43:7E:A7:24:A2:11:80:5B:B4:0D:06:53:F6:E2:97:32
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 0199228CB68843987E14F529160CE3A95EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:10 +0000
Manifest this update: Sun 07 Sep 2025 05:01:10 +0000
Manifest next update: Mon 08 Sep 2025 05:01:10 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: 7bLWzk6y8r9bk4MVUmLCBBcL+LSaSlT+mc/yLwdkw9A=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b6:88:43:98:7e:14:f5:29:16:0c:e3:a9:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Sep 7 05:01:10 2025 GMT
Not After : Sep 8 05:01:10 2025 GMT
Subject: CN=ff139568437ea724a211805bb40d0653f6e29732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:7a:b0:58:0a:18:bc:14:f2:fd:b1:b5:6f:
77:92:b1:4d:ff:e4:7b:75:cb:90:81:ef:80:6f:20:
35:f5:f6:44:9d:02:84:e1:a0:f0:8c:a7:e4:2a:92:
8e:a8:34:52:31:da:a7:74:a3:36:78:d3:7a:a0:c9:
b6:8f:34:9c:81:3c:ef:95:a9:9b:8f:c0:4c:8f:5c:
1f:44:a6:f6:71:ac:19:bc:1d:47:37:e7:75:2b:31:
1f:e3:60:b8:34:32:f6:20:30:50:2f:06:73:1f:c1:
1e:99:2a:d2:05:29:0b:9b:18:89:a9:75:67:9a:62:
b7:2b:b0:14:9d:0b:36:d7:77:b4:25:0d:ce:d3:ed:
b6:b9:36:6f:ff:a4:7f:c3:e1:61:28:58:5f:24:c7:
4d:d0:a6:f9:60:85:e1:89:a9:d9:d2:d7:bd:e9:78:
08:69:0e:08:a7:31:4e:45:29:70:11:f6:21:46:b7:
68:bb:8d:eb:4b:27:31:81:d7:51:7f:b6:a4:15:5e:
f6:c6:9f:e0:ec:55:34:dc:ed:ce:9f:f5:9e:bb:4c:
ae:2c:59:27:dd:2d:d8:5f:27:1d:d5:cc:09:4b:e3:
32:3a:a3:47:14:e1:d1:d5:4d:b0:fa:ef:46:4b:70:
2a:be:6d:90:29:6d:bb:f5:69:9c:74:5f:a5:22:a5:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:95:68:43:7E:A7:24:A2:11:80:5B:B4:0D:06:53:F6:E2:97:32
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ea:53:61:6e:da:83:f3:3a:3f:38:33:66:e3:95:0a:fa:d5:
5f:b5:5b:15:d5:46:82:89:49:f9:f7:2c:22:ae:10:11:47:ee:
7d:59:58:d5:41:08:34:03:d1:56:12:e3:24:8c:d6:d3:c3:3f:
62:52:24:39:0b:e8:89:95:88:3a:bd:a3:d0:c3:84:cb:9f:b2:
8e:98:fe:a8:a4:bd:20:a7:3e:47:c2:f3:b1:b2:37:cf:f1:0a:
10:65:26:7c:54:72:01:ea:00:3e:c4:07:9d:a2:16:8f:0c:32:
47:2b:f8:dc:7b:33:2d:4d:7f:6a:c0:d4:ef:a1:95:fe:57:9a:
52:eb:be:90:02:33:89:88:f2:72:d9:4c:82:13:56:40:9f:64:
15:dd:a9:1d:ae:9e:69:25:52:4e:1f:3c:56:de:e3:28:f3:f5:
91:53:f4:24:6d:16:36:c4:98:fc:23:a2:83:b6:fc:41:72:cd:
52:2b:13:8b:cb:c4:56:db:64:92:e0:42:da:83:21:0f:ec:a4:
f1:a2:58:cb:de:4d:81:10:a9:31:d6:23:7c:e4:cb:35:99:fd:
14:55:d1:8b:81:7b:18:3b:58:d7:52:04:d2:38:d5:1e:e3:98:
b0:3f:cf:ad:4a:95:64:44:1d:e6:51:c4:ec:8a:8c:f7:60:47:
c7:e7:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client