Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: Pwd3+HxdovXu287G5U+R2JiJEtOOdsdUKn3Kg8/E4no=
Subject key identifier: EF:AF:9B:14:28:B8:24:A6:5E:01:EC:B8:5E:73:1F:1C:07:13:E1:F1
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0198D5BB9B036746FC3DE412685E947E8E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 1662
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: JTpNvFvtYsj97aVzNdWm8anKsrXS/DcBCoJ7Dd5nUiA=)
4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
8: kL7q5pWuSBxNCY9HWLe5mlUPsgc.roa (hash: pKB8WO7OB8aBBagaQrPCdtrCaJhSDJjwl1TqWIlseSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9b:03:67:46:fc:3d:e4:12:68:5e:94:7e:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=efaf9b1428b824a65e01ecb85e731f1c0713e1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bc:a2:b7:7c:ec:38:cb:d0:a2:d0:6a:73:87:
ab:25:8b:6d:c2:50:be:e3:e5:63:ad:2a:3f:df:6c:
11:1e:e2:eb:0d:fb:59:66:3f:60:df:81:74:73:69:
78:84:65:fe:37:ef:3d:3f:f2:7b:c1:70:db:0a:45:
a7:8b:4a:d2:df:f7:73:90:07:85:42:89:d6:cb:0c:
0b:11:a3:09:e3:1c:aa:ed:02:5c:7e:a9:16:33:ba:
2e:7e:d6:62:89:a7:c3:89:e4:8a:a3:3b:bb:91:2a:
ee:8c:43:fc:55:06:00:55:96:80:ba:87:a5:0e:95:
8e:c7:35:db:9d:f8:ca:6c:dd:13:b6:32:7d:93:00:
89:18:ee:66:f1:de:8c:98:d7:8e:76:41:6f:7f:2e:
36:ef:a7:9c:7c:83:ec:13:32:a1:b1:52:2d:9f:1a:
1b:82:33:a1:74:f9:18:4a:f3:9a:19:a8:69:09:ba:
34:3e:35:1c:dd:a3:35:9b:84:01:a8:d1:98:fc:d0:
ae:a4:fe:24:60:5a:2f:e6:5c:1c:7a:8c:5e:94:15:
fe:72:35:28:f2:7c:27:77:e4:3b:64:47:b4:3a:05:
63:28:a8:1e:c1:58:22:9a:aa:ce:06:ef:28:eb:9b:
1a:df:1b:65:b0:65:e4:85:d7:89:dc:17:d0:8e:63:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:9B:14:28:B8:24:A6:5E:01:EC:B8:5E:73:1F:1C:07:13:E1:F1
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:5b:5e:c4:eb:d3:30:0a:ca:67:97:8f:2a:95:d9:c5:af:
49:e5:29:fb:fa:f1:d2:af:3f:a0:a2:97:af:39:ea:34:34:2c:
4f:e6:38:23:16:b7:d4:bb:34:09:6b:12:dd:7e:dc:9f:c8:5f:
58:ab:99:49:78:2a:fc:0d:81:66:ec:80:6d:59:46:96:5c:e8:
6f:2a:78:a8:1e:8a:0a:02:c2:b5:3c:ee:74:cb:5d:9c:3d:bb:
70:9e:1e:c8:35:d8:82:07:3f:96:7a:d9:ce:d8:5a:6b:dd:aa:
11:42:1d:71:27:69:74:68:8a:97:da:d0:09:51:fe:51:3e:e2:
2b:47:82:b1:68:c5:40:6c:4a:31:78:5b:c2:bc:a0:de:ea:a2:
ce:5c:84:de:89:82:ed:07:67:fa:4f:b9:51:08:2d:f7:56:ac:
7b:ac:50:6a:88:99:a6:dc:4f:47:28:d0:d7:63:e8:c4:98:76:
aa:eb:8b:b6:9c:2f:de:ba:ea:48:50:fe:37:e0:1b:04:df:93:
f2:b6:0c:4a:79:af:ac:86:83:64:82:76:3f:00:da:b3:fa:30:
07:29:06:ca:fe:52:5c:cf:25:bd:9c:e9:d8:61:bb:c0:6d:b7:
e2:e1:f7:ef:11:7f:2d:13:3b:3c:d1:f2:df:0e:12:dd:6d:63:
ad:43:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:11 2025 by rpki-client