Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: REG8vIWarD9sVEwLLZCOXPl51F0k2L+sFwTSgPm0qig=
Subject key identifier: D5:78:2E:B2:90:F6:76:9C:41:BE:D0:81:5F:80:9B:5C:22:8A:5F:C9
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 0198D6602B84EAE3CAAF49B0E2731D4E0EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: 8miE+LnAaZiHZ8k1GWNl//ArvKnPBM50kXPYjL08Q7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2b:84:ea:e3:ca:af:49:b0:e2:73:1d:4e:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=d5782eb290f6769c41bed0815f809b5c228a5fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f9:cc:ea:29:06:34:5f:aa:99:68:69:30:
86:ca:b0:0f:d5:30:94:9e:99:97:c8:22:b7:09:90:
04:83:d2:de:92:27:75:d2:8e:31:7b:60:7c:4e:19:
d6:32:d4:6c:39:9b:68:ef:83:69:b0:d0:d1:1b:76:
74:47:d0:54:f3:e9:7f:9f:c6:c4:fe:97:e0:b4:4d:
16:af:10:70:8e:26:91:03:2c:a5:4f:4d:7e:69:d5:
c3:cd:87:e7:27:cb:4e:02:e1:c5:5f:f2:94:13:68:
8f:9f:1d:28:b0:5f:c6:b1:2a:55:94:b6:b5:14:da:
91:97:86:5e:9f:67:3d:10:81:89:5d:ef:07:cf:b8:
88:80:e7:ca:dc:dc:39:94:ad:a9:21:25:a0:0d:ca:
ba:35:bc:56:65:29:79:09:d4:f5:57:b1:f6:b7:9e:
0e:79:73:8c:84:67:b2:35:06:b5:d0:85:1d:24:62:
f1:c0:05:c2:f3:5a:df:47:a1:19:83:3c:c0:9e:74:
f3:3f:21:4b:e7:74:45:bc:4d:ac:80:d2:2f:cc:d6:
dc:06:3b:10:ca:95:c8:5c:99:b5:f2:47:aa:a9:d3:
93:df:ba:17:72:26:cf:b8:70:97:c8:e0:19:a7:8f:
27:e3:83:49:9c:72:d2:c9:62:9a:eb:b7:52:d0:7e:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:2E:B2:90:F6:76:9C:41:BE:D0:81:5F:80:9B:5C:22:8A:5F:C9
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8a:d9:ec:33:f2:a9:6d:7c:fb:b8:d4:f6:e1:d9:18:25:53:
ae:7c:82:82:e6:5c:20:16:39:59:ea:78:11:78:7f:45:8c:15:
a4:57:70:cb:ea:7b:28:04:e4:db:da:ef:12:99:7f:26:37:76:
f1:1f:99:90:db:04:ae:ac:19:9d:9e:50:cc:9a:14:bd:16:6a:
87:5b:17:2f:7f:e1:8f:34:28:97:c7:d7:78:a5:e8:0a:87:61:
ff:1a:87:e6:00:a5:e8:94:29:c7:0d:1b:e9:cf:5e:be:9d:03:
45:ae:82:05:18:31:a3:0d:37:1c:17:1e:e2:6b:35:65:a4:32:
8d:5d:41:6d:9f:13:27:db:fd:81:de:af:00:4b:9f:8e:1e:b9:
c6:08:73:02:67:34:16:ce:38:81:db:2b:93:1f:c4:fe:92:7f:
6e:b2:6d:8d:de:b6:79:e3:aa:b7:8c:9d:54:45:ff:a6:59:2d:
24:6e:31:13:15:2d:f6:46:fa:42:04:a7:e9:c0:0f:92:3c:65:
f3:25:9d:3d:c0:56:ad:69:d7:41:14:37:59:70:cd:38:7b:9f:
fa:38:01:71:81:af:45:70:74:db:f4:f0:60:a9:4d:9e:44:0c:
e5:98:84:11:f3:73:28:75:57:e4:62:8d:29:37:4c:b0:b4:09:
8e:ce:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:43 2025 by rpki-client