Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: b3IF7mAeTD634AkKy7gQ8Mcupg8Boz7xk1w66G0ivtM=
Subject key identifier: 9C:31:7D:1C:0A:8D:F7:9C:84:93:95:C1:7D:38:8B:CF:76:4F:4F:A5
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 0199FBEC080806EEA0ED03103BBA58EA5F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0754
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: jjsWnaTieoIUWbLinwU5wZVAqzb2fvTp+oYoUly9qpg=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:08:08:06:ee:a0:ed:03:10:3b:ba:58:ea:5f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=9c317d1c0a8df79c849395c17d388bcf764f4fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:d1:b1:54:f0:f3:dd:07:7d:6b:9c:c5:80:
01:39:92:e7:63:03:5d:88:ff:1e:05:8f:17:0f:8e:
83:5f:48:42:80:e0:19:2c:fa:0f:39:f9:fe:64:8c:
a6:e6:d7:49:16:82:02:f8:ae:f0:b5:83:c3:44:3c:
af:67:6d:78:ba:9c:70:39:80:6e:6a:15:24:be:b7:
2c:5f:07:97:04:e2:b6:c2:b4:cc:15:4e:86:32:0d:
73:d2:17:b1:ba:02:14:0b:38:6f:4c:47:38:05:a1:
08:86:d3:13:a0:8c:5c:57:22:a9:be:f6:28:65:ae:
30:20:2b:d4:14:39:0b:1e:60:fd:ca:91:bd:0a:42:
2c:19:51:d5:55:bf:34:fa:87:6d:0e:72:03:a9:c8:
af:b3:7f:2e:8f:98:16:d5:57:fe:46:df:10:64:1d:
7a:4d:8d:b4:fc:8e:4e:58:21:09:df:51:a1:77:a6:
bd:99:df:17:ae:6d:7e:a0:81:94:ce:62:bf:12:ee:
c2:e7:3b:52:61:10:f6:2d:eb:22:b6:9f:c6:2f:7a:
d8:35:c4:65:cf:cd:d5:05:4e:fb:3b:90:ed:b8:99:
75:4f:62:e8:bd:ca:c0:79:67:42:d7:ae:82:12:69:
09:cc:d7:ee:aa:08:fc:1c:8d:85:54:bf:01:48:ab:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:7D:1C:0A:8D:F7:9C:84:93:95:C1:7D:38:8B:CF:76:4F:4F:A5
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ad:c8:45:ff:9a:19:26:5f:dc:d4:ae:dd:14:f0:fb:89:96:
8d:aa:67:66:9c:c8:b2:37:33:4b:27:fb:6f:59:2a:05:69:4f:
d8:55:60:92:7a:e7:1c:8c:b4:fa:98:e9:49:92:69:eb:45:65:
e1:e9:f3:89:54:57:98:40:4d:96:a7:e1:64:8b:7f:7b:95:df:
8e:e4:29:96:af:37:a0:d6:c2:81:b1:fe:63:dc:88:00:42:90:
bc:3d:20:f6:1f:da:07:17:df:fa:3a:9a:ed:6c:85:fd:4c:23:
d3:9e:aa:5f:ed:83:89:68:cb:6b:2b:9d:d0:97:ff:d1:be:be:
28:a7:1a:3d:3a:00:96:84:a4:2d:32:5b:f2:8e:6b:86:ed:e3:
93:cf:04:d1:c6:eb:f0:68:c5:11:c4:52:c4:4f:93:4e:6a:1e:
42:cc:b2:5e:57:3a:9f:ff:be:79:ed:08:8b:cf:28:08:3d:25:
81:bd:b6:46:85:19:0f:e5:b4:95:db:85:ac:f8:92:25:58:f9:
a3:78:66:a8:5c:d7:44:b7:77:54:85:f3:78:52:b6:c6:4b:bd:
d9:70:c1:1d:47:e7:b4:cc:47:ec:05:5c:fe:d0:8e:30:dd:6b:
f1:27:d5:d6:5b:01:24:2f:19:54:2b:9e:ba:d6:dd:f8:53:f1:
55:75:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client