Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: TS4MD7dxqA5w268JZagmuj+CI43DAH50n169LKD6nws=
Subject key identifier: 70:76:25:E2:29:51:B4:44:F7:29:7F:11:F2:58:C7:02:7A:B5:A8:51
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 0198D65FB0EE509787B1AFED8186EFF9A4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: 0BMwLUQVDMx9fBcPw4amVb/lDjle5NO6S4ZOAvnIl9M=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b0:ee:50:97:87:b1:af:ed:81:86:ef:f9:a4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=707625e22951b444f7297f11f258c7027ab5a851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:18:d3:9b:d6:4b:42:14:b1:70:90:1c:97:
05:62:5c:6d:d3:b9:82:2d:f3:57:bc:4b:db:ca:66:
ec:dd:53:e4:4d:9b:f7:b5:2d:e1:b8:87:f4:4b:34:
e1:7e:dc:11:5a:f8:46:6b:e7:df:a9:8e:46:ee:e8:
b1:2e:4f:aa:b5:bf:8b:f1:c1:28:19:cc:8f:08:5d:
13:3e:20:0e:8f:46:32:0e:4d:7c:54:76:3c:88:f0:
00:b6:e4:f6:2b:c5:d5:8a:87:b3:6f:86:0f:4b:1a:
5b:73:5b:d9:19:1a:56:ec:9a:f6:d2:8b:32:ea:cf:
5b:8b:55:fd:d3:e1:1e:02:a6:37:a0:8b:06:f2:e6:
1e:02:6c:68:9a:d9:28:4d:0d:db:4c:04:0c:fd:9d:
e4:34:df:72:5c:19:3a:88:49:f7:fe:3c:bb:2a:3d:
49:92:b1:dd:8b:62:10:1b:b4:e3:5c:24:8d:f6:45:
7f:48:d2:7e:3a:a1:3e:c4:f3:73:c4:60:ff:c4:83:
36:da:c1:0f:3d:92:54:4b:70:bc:ff:01:a3:2c:da:
30:83:27:28:49:b4:15:90:cd:19:0c:3d:32:3e:c3:
e3:ae:51:19:ec:3a:16:02:e0:22:56:bb:6e:9c:de:
94:30:16:6a:ec:eb:da:e2:53:f1:46:bc:52:be:99:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:25:E2:29:51:B4:44:F7:29:7F:11:F2:58:C7:02:7A:B5:A8:51
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a9:3d:7f:1e:34:15:8f:68:85:c7:be:51:1e:60:08:a8:6b:
86:3c:d8:7e:cd:16:2e:bc:03:03:b4:07:34:2e:d4:1f:47:75:
08:f4:e3:be:a0:ef:f0:1b:6d:22:34:20:0d:54:ae:a2:90:79:
41:55:97:f8:6c:6e:d1:a8:4a:e2:7a:41:59:31:32:b4:59:f8:
49:e9:6c:aa:2e:6e:60:eb:35:d7:89:cd:93:70:44:89:75:0f:
53:74:10:e0:5a:89:9c:7d:b0:3b:83:30:96:fd:80:6f:e7:92:
7a:07:ed:45:a7:ec:4c:f2:07:3e:02:71:40:78:37:6a:2e:9b:
a8:6c:83:8e:9c:57:a4:1a:2b:96:62:ff:af:24:94:7c:d3:82:
0d:91:92:b4:6f:e7:c6:c8:8c:5c:5f:18:e9:2c:57:88:c3:31:
22:9a:b1:d8:f6:56:70:76:4e:a4:70:7b:8e:ef:81:92:cd:44:
98:df:f8:a0:81:8f:bd:72:ec:de:52:3a:e1:01:f1:a2:46:2e:
2e:1e:03:72:d8:23:52:7e:85:c6:03:61:a2:dc:9d:8e:f4:48:
ed:a2:fe:78:fd:94:50:2e:85:27:c8:c6:fa:9a:29:e1:08:db:
c9:f4:c9:d2:d6:75:9c:d3:c1:69:7e:0a:56:8b:bd:68:99:f8:
d7:10:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:32 2025 by rpki-client