Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: sdqnBFtpo6AwKYp78fODJDChM55SQAcLgYq0LtiLESA=
Subject key identifier: 59:FD:53:F3:DA:81:D3:C5:70:B7:93:C5:D0:0F:37:4C:CC:D5:60:6C
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 0198D8BCFE7F72FDE69D8179AE39443C72F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0AA4
Signing time: Sat 23 Aug 2025 21:02:01 +0000
Manifest this update: Sat 23 Aug 2025 21:02:01 +0000
Manifest next update: Sun 24 Aug 2025 21:02:01 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: /RQzdJOf1y/G7kc64npwjOUl6asxKakDP8XurHnm8WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:fe:7f:72:fd:e6:9d:81:79:ae:39:44:3c:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Aug 23 21:02:01 2025 GMT
Not After : Aug 24 21:02:01 2025 GMT
Subject: CN=59fd53f3da81d3c570b793c5d00f374cccd5606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:6b:c6:c3:07:7d:f0:6b:44:45:4b:87:a2:
da:92:e3:6b:55:94:e8:c5:1c:c4:f0:01:7c:b0:38:
a5:4e:cb:23:73:ce:be:14:fe:88:dc:25:db:f5:42:
5d:8d:c9:c7:f8:4b:ca:f8:c6:48:f5:57:69:1e:d1:
f6:e2:d0:91:c0:5b:81:3d:e7:53:a1:e2:f3:48:3a:
7f:57:e8:6c:03:04:60:10:8b:64:78:29:1d:72:03:
db:68:80:64:a7:78:b1:f4:f3:7e:04:66:71:cb:cf:
f7:75:98:63:26:92:42:58:10:2e:be:02:99:ee:fe:
88:6d:a0:4a:0e:e5:85:99:25:f0:5c:6b:70:51:d1:
69:ca:97:4f:33:fa:7c:73:d7:1c:42:81:2a:ad:02:
70:31:3e:6c:fb:92:41:2e:2e:09:8c:51:3a:1c:bb:
7e:8e:28:b3:42:a2:d3:e8:1f:bc:d7:84:2f:8f:c5:
ad:3b:15:03:e0:83:68:d3:c1:f0:0f:98:d9:1c:d2:
62:d0:4d:75:41:16:b3:e5:40:b5:3c:36:d5:12:3c:
14:3e:9c:c0:07:99:f4:c6:95:07:a1:3f:a9:a6:21:
a0:ff:eb:23:15:f7:4e:56:9d:0d:e6:9e:f8:12:fe:
91:26:30:1e:ef:ad:ed:1a:ed:e3:a8:d2:3c:0e:ca:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:53:F3:DA:81:D3:C5:70:B7:93:C5:D0:0F:37:4C:CC:D5:60:6C
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:74:1f:7f:ea:e8:0f:a7:cb:c2:71:22:31:43:58:23:93:2c:
48:fa:e7:18:f8:ed:63:06:58:6a:fe:ed:2f:64:30:da:02:81:
0b:e2:49:b3:2d:da:f0:39:5b:5c:57:fc:29:52:9e:f7:d2:c7:
50:56:fc:f7:b1:21:ae:3b:83:64:81:1e:fc:70:30:f6:3a:54:
98:a4:05:3a:5d:25:eb:b0:59:8a:2e:95:1b:67:f2:2d:b6:77:
74:38:15:ba:62:05:0c:92:48:f3:08:56:34:16:7a:7e:1c:e3:
e5:36:6b:95:79:d5:14:42:d8:dd:3b:98:88:0a:73:a5:3c:08:
65:86:44:a2:35:ae:3b:b6:ab:a9:a2:88:ae:df:80:b1:84:d1:
af:e5:75:49:81:d8:77:bd:10:64:d4:29:23:36:f2:84:a9:c5:
21:1d:dd:5f:db:01:86:43:55:7b:38:1f:e3:51:a9:93:c1:09:
6e:eb:46:44:57:60:cb:b6:da:35:b7:7f:34:9d:da:6a:74:ac:
f8:8a:6d:03:71:b6:a6:80:62:43:c0:b7:bd:57:37:f0:82:28:
b6:eb:b9:0c:c9:22:8d:46:f8:12:2c:3a:42:62:1a:38:73:15:
66:87:a3:eb:5e:fd:77:cd:96:18:7d:67:b1:1c:36:25:1a:4d:
45:ba:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:35:59 2025 by rpki-client