Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: QsjofUAmm77GTzXJmRR7t0liS7DNRhejEkgYKo2Fea0=
Subject key identifier: 47:A2:DA:9F:B7:3C:28:18:DE:7A:77:E6:64:B8:D4:3D:62:7E:24:A7
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 0198D54E845172F1172B9C2EBD0F274E1652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0929
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: ea7qpYW1STFicsFMxpa/dOPGLsJxVcuqj78/l40GGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:84:51:72:f1:17:2b:9c:2e:bd:0f:27:4e:16:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=47a2da9fb73c2818de7a77e664b8d43d627e24a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:cd:66:d2:5f:d1:f1:f8:51:29:cc:29:fa:
ff:b4:fc:17:bf:00:0e:f7:97:48:5e:9c:4f:59:81:
f9:e9:55:3a:f6:1c:29:61:58:e5:8b:27:24:98:7d:
32:e6:f2:ab:56:81:84:79:0c:ba:6e:9b:34:b1:44:
7b:d8:5a:e0:af:77:1c:8f:d4:1f:7d:bf:7d:19:f9:
90:9c:5b:c6:b5:89:de:7f:1a:13:8b:e8:fc:e5:2a:
69:33:ea:e1:13:49:e6:46:db:94:99:ef:b4:35:8b:
c6:0b:ee:5d:de:96:58:6a:40:dc:ca:17:4e:6e:bd:
2b:0a:be:70:85:8e:22:3a:e5:53:7f:63:65:29:83:
11:43:5d:93:00:14:72:ed:9d:da:a5:ef:de:24:80:
70:6e:df:fb:da:20:29:bb:c3:cd:40:fa:18:80:42:
79:ca:e8:ab:ec:16:39:73:7b:e1:25:68:59:35:a9:
fa:e3:47:6b:bb:ce:fe:2e:1a:a5:12:94:cd:5b:20:
27:e0:a3:2d:47:d1:03:fc:7b:44:8d:db:a9:b2:67:
61:0d:72:d3:aa:55:e7:da:bf:94:bf:19:9b:19:a9:
46:64:86:9e:4f:de:5b:d5:a5:14:34:1a:68:fa:a9:
81:23:6c:47:bf:31:11:8e:7c:a0:36:80:0f:96:1c:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:DA:9F:B7:3C:28:18:DE:7A:77:E6:64:B8:D4:3D:62:7E:24:A7
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d7:5e:9c:d8:56:a6:12:f4:64:2d:71:88:5a:27:8c:3c:58:
8e:fc:f7:2a:f3:71:1b:c0:c1:0a:2e:6a:f6:df:ef:d0:4a:fb:
b1:42:f8:68:c7:ec:be:cd:ce:88:f2:c0:31:64:31:16:b3:96:
0e:09:d3:3a:01:27:e9:7e:f6:fa:31:cb:5c:76:0f:80:31:83:
fb:dc:e4:e8:b1:fb:70:eb:c3:02:23:42:ef:b1:e1:f8:09:f1:
2b:6f:1b:25:03:f9:2d:0e:38:68:3e:26:c2:0e:20:af:99:00:
ee:d6:b0:3a:bb:e8:b8:51:5a:ae:30:05:c9:7a:c0:e3:4b:19:
c9:dd:90:a8:86:88:9f:b1:4a:a8:91:2e:df:34:59:69:51:9e:
26:b5:64:8a:ae:9c:11:a6:ca:3a:5f:fa:c6:de:4d:a6:ce:28:
4f:9e:33:4b:81:75:dc:bd:df:e5:3a:3f:4b:2b:07:4f:13:7f:
d7:66:bc:17:eb:0f:5e:4c:83:c1:66:b5:62:97:3e:21:1e:f4:
d7:22:f2:69:70:06:0b:2e:cb:46:36:ae:af:52:fa:8d:2b:4d:
7d:a6:ff:37:60:b2:4b:46:02:07:63:9f:2c:8c:4c:b8:1d:9f:
f0:e4:42:cf:d3:31:5a:7d:43:87:51:90:f8:4d:af:97:a1:1f:
9b:67:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:45 2025 by rpki-client