Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: LRt1B62QzWje19kEK3IkBf4bHGkoCA+5fPK4xGpwFOs=
Subject key identifier: 4B:C1:2F:DC:50:50:08:CE:DE:BB:7B:6D:A2:0D:23:A0:7B:C7:BF:F8
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 0198D6600DDB790723AEB4C6936B7DDBD097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 1125
Signing time: Sat 23 Aug 2025 10:01:15 +0000
Manifest this update: Sat 23 Aug 2025 10:01:15 +0000
Manifest next update: Sun 24 Aug 2025 10:01:15 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: dVTCV7R6YFUhQJuOJUxqUElbiXp7ZkTXUDDQ3EZHlkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0d:db:79:07:23:ae:b4:c6:93:6b:7d:db:d0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Aug 23 10:01:15 2025 GMT
Not After : Aug 24 10:01:15 2025 GMT
Subject: CN=4bc12fdc505008cedebb7b6da20d23a07bc7bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:5a:df:17:5f:b5:28:d1:76:68:d6:51:c9:
90:b5:5e:23:4e:dc:ae:1e:6c:ce:09:fe:b7:2a:cc:
db:c4:35:b8:39:51:13:c6:b7:f5:e6:e9:9c:0a:64:
28:48:60:c0:0c:2b:d4:b4:5c:ec:78:e3:ac:37:1c:
50:55:61:aa:08:55:d8:96:ea:5e:24:da:3d:03:4d:
e6:e4:a7:7e:20:6e:89:7f:d1:a5:32:50:e4:20:22:
19:b9:ac:15:c3:96:cf:5c:8b:42:c6:14:18:c6:de:
7e:dc:40:70:07:b8:79:ca:56:10:8b:4c:d9:90:52:
5e:58:7a:79:f9:45:61:1d:bb:01:59:9a:23:24:71:
17:8d:a8:4e:18:b8:b3:7c:e8:71:bc:8b:b1:ec:a6:
c5:c0:51:0a:4c:2d:e2:38:9b:53:7d:04:2d:b6:23:
52:73:30:d0:38:2b:2f:82:ed:61:82:f5:73:af:56:
27:ba:69:7b:11:1e:fd:4e:67:42:0e:50:2f:0d:a7:
95:38:aa:af:eb:43:62:36:ec:89:78:ad:df:23:b6:
38:db:9f:c6:0b:58:d9:c0:6c:99:52:b3:63:4d:57:
97:7c:8a:ff:fc:8e:c3:6a:d5:8c:fe:a8:e2:79:10:
7b:69:bc:1b:3e:c0:d9:3f:5f:b9:da:1e:73:f3:6e:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C1:2F:DC:50:50:08:CE:DE:BB:7B:6D:A2:0D:23:A0:7B:C7:BF:F8
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:06:9b:fe:e2:f1:78:56:81:00:3f:a8:56:48:03:0b:b6:50:
dd:2e:a6:fd:89:ef:65:5e:96:ff:e6:9b:a0:87:21:70:33:3f:
cc:5d:d7:92:c9:3f:b5:85:7d:7c:2d:74:d3:9d:12:85:77:58:
ac:ab:8e:c6:4f:d9:fa:31:a1:63:d5:b6:c2:b0:4b:9a:2e:b9:
a2:fd:54:39:cb:1b:0b:7c:45:24:db:39:e2:85:20:42:95:ff:
81:47:0b:c9:92:52:02:87:1e:76:06:93:f2:29:a5:ca:ba:76:
4e:1c:c4:6b:6f:43:fe:59:68:6f:6e:3d:b6:ba:0b:de:92:51:
ca:38:c8:88:33:56:0d:d3:6c:bf:30:a4:b9:e0:ad:1d:09:bf:
39:6b:6c:9e:22:13:61:3f:87:7f:b4:3a:9d:13:af:53:09:ab:
2d:21:86:69:bd:5a:8a:ed:61:3d:a3:52:c3:b7:c5:d9:f5:28:
1a:84:0a:1c:dd:a8:8b:61:e7:64:86:77:09:93:a2:93:20:c8:
78:9f:ec:94:6e:a9:0d:61:2c:d6:90:dc:bc:64:a6:ed:f0:92:
bc:a2:64:2c:2f:b5:ef:dd:de:df:a0:19:23:fa:f8:d7:8f:4a:
d0:1b:fe:fb:a5:41:85:b1:0d:19:c2:63:38:c1:58:65:0d:20:
4a:b7:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:00 2025 by rpki-client