Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: pqri+67xt0709lanQveYjV4SDNMVxqarPLFIxrAyUqU=
Subject key identifier: 3A:3C:0A:96:62:7A:49:AD:4D:38:80:23:1F:B9:D4:90:E8:03:ED:EB
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 0198D473B6504E9ADC10228843E8C30A79D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 06BB
Signing time: Sat 23 Aug 2025 01:03:29 +0000
Manifest this update: Sat 23 Aug 2025 01:03:29 +0000
Manifest next update: Sun 24 Aug 2025 01:03:29 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: HKjc6uKXVfTEf4VtEAQUwUJl6fTur+ilgn632BqrDkI=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b6:50:4e:9a:dc:10:22:88:43:e8:c3:0a:79:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Aug 23 01:03:29 2025 GMT
Not After : Aug 24 01:03:29 2025 GMT
Subject: CN=3a3c0a96627a49ad4d3880231fb9d490e803edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:04:b2:71:50:b0:58:94:16:ba:35:dd:7b:
98:b1:51:a9:38:aa:9b:22:a1:00:24:f2:b0:11:4d:
a5:76:11:c9:c2:7e:28:26:ef:2b:87:a1:2b:67:4e:
dd:5a:26:d4:8b:4c:fb:ce:f2:7c:62:60:4c:c0:ad:
3e:83:20:44:d6:db:a4:26:18:d7:d0:6b:9e:d3:c6:
75:8b:70:58:7b:9b:ec:f9:b8:98:c2:de:7a:03:f4:
65:26:ff:8e:a6:72:26:28:40:9b:bc:73:88:6d:44:
99:c0:07:d1:81:76:79:81:ec:72:f6:84:dc:dd:ba:
37:99:51:ca:89:ce:4b:f4:93:3c:e9:48:ed:28:fb:
75:43:ba:3d:e2:6d:07:58:0f:c3:10:8b:ed:71:33:
3f:80:1e:4b:29:ea:cc:8f:a4:d2:54:0b:c7:cb:f1:
57:9e:7f:58:f7:9b:6e:9e:83:fc:6c:5d:c0:85:de:
58:9e:e6:9c:58:da:79:67:d8:68:3d:33:f5:ef:f6:
3b:af:b1:ea:98:a7:8b:08:23:c7:d3:0a:1f:7d:a6:
2d:e0:4a:06:e3:a4:98:b4:da:81:6b:05:9c:30:29:
5e:04:86:40:66:16:27:7d:06:e1:a7:c0:b7:34:33:
1f:0b:ae:ed:83:89:83:53:29:9f:3d:b1:51:f5:74:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:0A:96:62:7A:49:AD:4D:38:80:23:1F:B9:D4:90:E8:03:ED:EB
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:ff:f2:d6:a2:86:79:03:91:0c:5d:ae:f1:9c:e4:86:f9:
8a:32:de:26:b3:ae:91:15:a0:99:fd:e6:71:b6:e2:95:3c:a6:
af:65:f4:96:94:f9:68:6d:47:40:6b:99:f1:20:97:a5:16:96:
01:74:8d:a7:9c:7e:ad:8d:ab:62:3b:30:c4:8f:9c:38:59:a0:
d6:b7:80:c9:f4:42:71:6a:e9:d4:9b:53:97:2b:6a:a1:b9:d1:
ea:91:e9:c7:ba:ba:5f:ac:c1:ae:0c:59:c8:6f:c6:f2:bd:00:
a5:3e:82:d1:f5:07:cd:09:bc:49:37:7a:99:eb:fb:73:37:2d:
d3:fe:a1:a7:59:ef:45:33:45:b1:9c:7d:45:d1:37:4f:10:2d:
48:04:31:1a:b1:46:8b:ad:a3:96:f0:34:e2:ec:38:63:38:4c:
c8:f5:94:32:ae:c8:dd:26:98:e9:46:ba:35:6b:a1:81:ed:52:
44:8e:93:48:2a:21:60:2f:9a:01:69:af:23:b3:a0:ca:8a:9b:
3b:f1:c9:a4:3e:4c:49:45:5c:3b:e5:b1:e0:c5:56:4d:f7:97:
79:f8:4d:71:31:a4:7d:e8:ec:4f:74:6f:7b:c7:0c:1c:ce:65:
dd:4f:a7:6f:d3:ce:16:26:3a:83:94:da:a9:61:e9:eb:1e:e0:
b3:13:ba:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7ZQTprcECKIQ+jDCnnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njc1OGJlYTY4ZjA4MjVjZjE2ZTY2ZmIwMmVlN2JjYTQ1
NGJhZTIwHhcNMjUwODIzMDEwMzI5WhcNMjUwODI0MDEwMzI5WjAzMTEwLwYDVQQD
EygzYTNjMGE5NjYyN2E0OWFkNGQzODgwMjMxZmI5ZDQ5MGU4MDNlZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorAEsnFQsFiUFro13XuYsVGpOKqb
IqEAJPKwEU2ldhHJwn4oJu8rh6ErZ07dWibUi0z7zvJ8YmBMwK0+gyBE1tukJhjX
0Gue08Z1i3BYe5vs+biYwt56A/RlJv+OpnImKECbvHOIbUSZwAfRgXZ5gexy9oTc
3bo3mVHKic5L9JM86UjtKPt1Q7o94m0HWA/DEIvtcTM/gB5LKerMj6TSVAvHy/FX
nn9Y95tunoP8bF3Ahd5YnuacWNp5Z9hoPTP17/Y7r7HqmKeLCCPH0woffaYt4EoG
46SYtNqBawWcMCleBIZAZhYnfQbhp8C3NDMfC67tg4mDUymfPbFR9XT1WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo8CpZiekmtTTiAIx+51JDoA+3rMB8GA1UdIwQY
MBaAFHhnWL6mjwglzxbmb7Au57ykVLriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEt
ZWVkNDVjOTM3NzVlLzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEtZWVkNDVjOTM3NzVl
LzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlP/8tai
hnkDkQxdrvGc5Ib5ijLeJrOukRWgmf3mcbbilTymr2X0lpT5aG1HQGuZ8SCXpRaW
AXSNp5x+rY2rYjswxI+cOFmg1reAyfRCcWrp1JtTlytqobnR6pHpx7q6X6zBrgxZ
yG/G8r0ApT6C0fUHzQm8STd6mev7czct0/6hp1nvRTNFsZx9RdE3TxAtSAQxGrFG
i62jlvA04uw4YzhMyPWUMq7I3SaY6Ua6NWuhge1SRI6TSCohYC+aAWmvI7Ogyoqb
O/HJpD5MSUVcO+Wx4MVWTfeXefhNcTGkfejsT3Rve8cMHM5l3U+nb9POFiY6g5Ta
qWHp6x7gsxO6cg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:02 2025 by rpki-client