Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: dDHGrUAGJ070gSOPNAZB+kXpCAVM7cIN5uWityMaES0=
Subject key identifier: F8:19:1E:FF:95:49:C5:BB:B8:85:CF:C7:26:35:0B:02:C8:5F:C9:FF
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 0198D473E75683C43EBD5BCB32ADC0F3BCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 1378
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: WTijxO+lCKcHziv2s717+pk/BeqXDFSLLPi2nqgNAfA=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e7:56:83:c4:3e:bd:5b:cb:32:ad:c0:f3:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=f8191eff9549c5bbb885cfc726350b02c85fc9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:90:21:1b:aa:3d:76:82:bb:e8:e6:4c:ea:8e:
e3:ad:85:91:0d:ba:15:36:85:1d:d7:02:ab:d4:9c:
fc:cb:fe:09:4f:2a:c4:e6:fb:dd:bf:92:dd:03:17:
b5:e2:86:65:68:c2:94:54:13:ce:77:18:4a:c6:04:
ce:7e:48:49:50:a8:e0:22:7a:6c:db:3e:e0:a6:d9:
aa:d0:22:ff:52:ef:b1:89:de:91:d6:6d:de:4a:6a:
09:9e:f8:a9:5c:32:bc:40:d2:d0:8c:7a:09:ff:32:
26:23:f5:30:04:9b:4f:7b:e3:e9:39:51:fc:f6:3e:
5e:ef:10:cb:5c:81:68:c9:2f:b9:de:6e:4b:95:29:
4e:ca:7f:81:a5:53:70:07:ef:cb:a1:01:57:50:fd:
5b:19:7c:b4:be:d9:06:53:71:61:36:cc:06:8b:04:
6c:ec:1e:57:96:19:bc:c8:e0:a4:0d:0e:0d:bd:38:
0f:dd:6b:c2:78:f3:ea:3d:3f:d0:4f:dd:88:ad:1d:
9f:8c:69:72:4d:4f:91:6b:18:1b:c0:ae:b4:ff:06:
e6:71:cb:09:65:bf:48:cf:24:83:3c:68:ec:0e:7b:
ad:06:7b:ea:60:db:0c:db:d6:55:d8:8a:64:9e:e2:
8a:e4:15:de:96:c2:84:1b:bf:9b:ce:75:e4:7c:75:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:1E:FF:95:49:C5:BB:B8:85:CF:C7:26:35:0B:02:C8:5F:C9:FF
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8e:b0:2f:a6:60:04:64:c5:cc:f0:98:44:bc:e9:1c:39:58:
c8:7c:d6:08:1c:88:a0:15:85:93:79:4c:72:f0:7d:fd:b3:38:
d8:4d:9b:79:63:b0:e8:38:17:1a:82:ab:35:f9:3b:cc:7f:b7:
20:1d:23:48:3c:07:f1:58:9d:25:10:b2:74:f3:17:0a:e8:15:
27:f4:c4:3f:1c:35:e1:a8:c5:20:2f:cf:de:86:3b:45:d4:7c:
6f:95:bc:5c:a8:59:0a:b5:78:f7:33:da:e1:ee:89:3e:54:2f:
d3:9a:2d:cb:b3:39:c8:1a:db:14:68:35:db:1f:ed:07:eb:6c:
58:86:d0:65:3a:e7:2f:dc:72:01:68:8a:25:7a:04:bb:8c:0a:
25:dd:56:b6:d3:b9:67:b2:82:d1:dc:8c:14:ac:ed:61:7c:92:
0e:1e:39:f4:6d:e3:9a:f4:c2:6a:c6:71:e1:73:bc:8a:4a:89:
24:63:46:2a:42:c9:18:4b:c4:2a:5b:59:9e:47:58:01:39:c0:
d1:e0:20:09:2d:1b:0f:cd:05:43:38:74:e6:20:51:c8:06:5d:
fc:b1:4b:fe:dc:3f:10:26:5a:3f:a4:52:63:16:81:a4:e8:1a:
bb:be:99:a0:49:6c:f5:6e:7b:98:28:6d:16:62:5c:c4:e4:91:
89:48:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:29 2025 by rpki-client