Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: nhEoUz2nf2VS+zaMMRV6c6y8aWAW3lcIWPNTeL2SOCA=
Subject key identifier: 16:7E:4F:A5:59:FF:7D:48:40:3B:BF:14:67:16:78:7B:A7:08:1F:75
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0198D705FEB0B82A8B5C9707B92CBEC5A73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 149A
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: /KaIpAhKe9hPbGWgb8T1gwGXPCklLc0qdKpBELxGSw8=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fe:b0:b8:2a:8b:5c:97:07:b9:2c:be:c5:a7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=167e4fa559ff7d48403bbf146716787ba7081f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:06:8e:57:ae:b6:78:59:04:57:ed:6e:1e:
ce:c0:4a:58:a9:39:64:67:f7:e2:f5:b1:aa:af:8a:
8a:41:92:23:67:bc:1c:a7:b7:a0:98:62:a7:06:38:
30:2d:3f:16:bf:07:58:e5:94:30:29:83:73:38:40:
cb:26:f3:54:1b:db:10:2a:e8:e8:0d:28:59:04:c6:
f5:55:ec:cc:a3:53:57:12:99:c4:cd:35:88:f7:17:
e2:f2:0f:ae:16:e6:76:72:37:50:75:bc:ff:2b:11:
53:69:6a:09:0a:0d:09:41:ba:9f:b2:f0:72:23:41:
04:49:a1:0c:6e:42:de:69:30:b6:11:3f:e1:05:c2:
df:94:4e:d4:1f:12:d3:36:6a:11:7b:7e:64:81:2d:
2c:8a:02:e8:ce:32:fd:bf:5c:2e:e4:dd:4f:6b:23:
80:20:8a:b7:3e:d5:4f:0e:74:7e:af:86:e6:64:b6:
04:b0:ac:6a:1b:b6:5e:45:b3:8b:d1:11:63:de:d8:
58:67:b7:e5:d6:c6:b0:13:ad:24:96:02:94:3f:d4:
55:53:c7:d3:0b:4b:48:ac:a5:a9:6c:aa:93:a0:3b:
3b:50:92:c4:d6:f2:64:4b:30:b3:80:98:d3:2c:c7:
96:3a:6b:97:a4:90:1e:46:be:1d:4a:93:2c:c2:a7:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:4F:A5:59:FF:7D:48:40:3B:BF:14:67:16:78:7B:A7:08:1F:75
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:e7:9b:af:92:34:6a:25:1c:94:75:24:84:2f:b9:ba:89:
d4:52:b0:58:ae:da:2b:b0:9b:7a:af:98:86:cf:7c:98:d0:2e:
87:da:5e:b2:22:0b:a8:99:49:06:6e:e6:38:19:f2:71:ed:99:
76:d1:dd:b6:50:05:b6:54:ca:88:c3:4f:8f:0f:47:a9:10:f5:
9f:ff:df:3a:03:e5:8e:a8:ba:c4:f9:ba:37:11:2e:6b:8d:7d:
c9:ed:04:d4:cf:c0:ba:54:f5:4c:9f:ad:83:8f:b6:68:6b:ee:
18:ca:b5:34:72:d4:36:d4:55:65:8e:b1:b2:77:e2:29:6d:71:
60:52:93:12:f8:54:e8:f3:53:ce:c7:6f:6c:b3:2a:67:71:18:
63:b0:d7:99:d2:d2:82:54:5c:cc:a4:1f:6f:8f:ef:c2:fb:88:
56:02:1d:af:af:27:b0:c3:3d:14:f2:68:f0:a1:40:2d:79:04:
a1:81:77:09:a7:1c:c7:b0:c3:9c:12:c8:98:24:79:80:56:09:
5a:27:f9:8f:19:49:ed:5e:f1:12:d3:56:7b:27:04:80:2c:bc:
96:69:55:ee:8e:d0:c2:c1:5d:7f:33:e1:65:e2:5c:3b:8f:ae:
73:51:52:bf:85:24:6f:1b:15:d4:f0:f3:88:53:1a:c4:a2:4b:
49:6b:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:14 2025 by rpki-client