Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: 4WSuDiJG8FLqOfoZY4WJWmnakPqr7fyxCmEMrbThReY=
Subject key identifier: 3A:B5:FB:7A:E9:DD:F3:9F:D2:B2:69:9F:22:D8:E0:F4:C8:17:2A:E0
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 0198D7E1288FA75C66CF926440C8200E0D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 17:01:54 +0000
Manifest this update: Sat 23 Aug 2025 17:01:54 +0000
Manifest next update: Sun 24 Aug 2025 17:01:54 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: U5VU7voE9iT7C2WesLtS1sgnCJJiN7F7smpVZ4kP6TM=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:28:8f:a7:5c:66:cf:92:64:40:c8:20:0e:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Aug 23 17:01:54 2025 GMT
Not After : Aug 24 17:01:54 2025 GMT
Subject: CN=3ab5fb7ae9ddf39fd2b2699f22d8e0f4c8172ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:40:f8:58:f6:94:0b:16:50:98:98:d6:2f:
0d:c5:2e:75:5f:90:54:14:e1:db:ad:c5:79:a0:c9:
9e:3b:c1:d4:31:23:39:b4:9f:dd:3c:6b:5d:a6:2e:
6f:e2:68:56:41:9a:a3:ca:a9:1d:bb:5e:55:66:76:
27:04:03:2a:39:68:f7:68:12:cf:1d:0f:4d:d3:4f:
64:7a:1e:72:7a:92:45:8f:82:fe:ac:eb:59:a0:27:
23:c6:aa:12:9c:25:ab:02:03:7e:c6:7a:bc:69:f1:
5d:c0:be:9f:48:62:62:20:15:1b:64:94:78:e7:d2:
a7:a2:b3:7e:50:11:54:f0:d9:09:16:42:7f:74:76:
c6:73:47:71:cb:aa:5a:95:cf:c5:66:38:8d:81:ca:
43:14:01:8e:2a:38:d7:1f:e0:88:67:52:26:6c:04:
19:14:be:a1:ef:3a:3a:8b:d1:12:ef:8c:e1:32:cd:
30:07:2d:23:ee:f0:57:15:96:e6:e2:c7:66:0a:40:
cf:28:48:eb:40:4f:98:a6:97:63:51:b0:cb:af:67:
ac:4c:83:bf:f9:98:fb:ef:07:6c:5b:db:d0:bc:76:
04:f1:f0:66:65:c1:2b:8e:23:53:6d:28:be:4a:dd:
78:9e:03:80:7f:2f:43:ce:ac:8a:c3:83:d1:0f:d8:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:FB:7A:E9:DD:F3:9F:D2:B2:69:9F:22:D8:E0:F4:C8:17:2A:E0
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:bc:22:89:2d:cd:30:1a:d5:83:9f:69:b6:1e:25:63:2b:
b2:9c:bd:46:84:c9:04:13:04:4f:02:b0:9d:f2:9f:49:4c:0d:
90:96:37:2f:bf:62:94:e7:1b:53:58:00:fd:c3:1b:ea:05:fe:
90:57:4b:81:46:bb:5c:f5:79:36:97:8c:cb:fa:5d:54:a0:18:
e9:57:b4:d2:0e:a4:43:70:75:45:2c:28:3f:f9:25:c1:59:37:
4e:6f:83:07:56:3e:6b:0f:df:e9:91:74:c7:1d:84:f5:35:56:
d3:9f:39:56:c7:b2:d0:20:90:1e:f6:05:bb:6c:59:bc:46:1f:
55:29:a7:47:6a:cb:e1:fa:e1:60:83:56:b8:c2:e8:a2:82:3b:
f5:c7:f9:4a:5c:98:93:b0:fc:22:3b:76:2f:03:cd:6a:0a:15:
c4:b6:f3:5a:42:53:c2:b7:7d:2e:83:90:73:75:23:46:49:7b:
c7:31:69:70:b9:d0:38:25:42:74:3e:23:df:fb:93:f2:7e:1b:
73:47:65:02:82:42:b9:10:9c:0b:72:39:3d:f2:48:f2:e7:1c:
bf:14:a3:d7:a4:6e:58:a6:2c:a6:1b:e2:bd:7b:b1:41:27:24:
69:d8:32:33:8b:e8:fa:2d:9f:9d:55:db:2b:b2:8c:ad:9b:77:
57:17:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:37 2025 by rpki-client