Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: wMsRty3Aa3xDvS5Dq35Wq22MX5Y/8b1FiZftkSi6qoc=
Subject key identifier: A5:F9:CD:8D:01:AB:F3:2C:6F:50:E0:16:12:E2:E6:6C:66:92:BF:74
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 0198D5BB93686F9533DE2123C7DCF9DE3C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0F36
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: l0jiMmHqr/IhVPvJqdBMX4F4CJVj6t0lLF0WbNin3K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:93:68:6f:95:33:de:21:23:c7:dc:f9:de:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=a5f9cd8d01abf32c6f50e01612e2e66c6692bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:eb:5e:25:c8:98:47:28:44:8a:db:11:46:
f8:c8:63:ae:ff:14:7e:b0:a7:89:81:81:f9:60:59:
df:ac:e5:65:0f:5d:b4:b4:53:71:55:68:6a:33:75:
6b:ee:97:77:4b:37:10:7d:dc:d0:67:13:92:1a:ec:
b8:42:7f:22:11:2c:cc:2e:7e:4d:68:27:cb:9f:98:
6d:1e:12:f8:87:06:46:a8:5f:59:09:22:f6:18:18:
93:d1:1e:13:96:59:3f:59:fc:50:8d:41:01:ac:1b:
69:6f:7a:a6:47:0b:36:9b:ee:f5:7b:14:74:a4:81:
3a:cf:d6:75:bc:98:06:8d:1e:5f:de:55:ca:9f:45:
14:ef:aa:ed:3b:5c:7a:91:c9:30:7d:08:98:a8:1e:
c6:04:99:98:83:6a:84:1a:a2:05:f6:33:f2:71:1f:
77:40:8e:3b:d5:99:d7:4a:9e:7b:eb:13:75:95:36:
68:5e:86:20:2c:a2:5e:64:31:e5:17:27:d9:08:0a:
af:cd:af:18:3b:46:fb:67:5d:d5:f4:e9:e3:2f:d3:
d7:20:4f:96:99:95:10:cb:0d:69:15:d1:d7:10:6d:
60:50:0a:6e:f7:d3:98:48:7a:f0:be:fd:d2:9a:c5:
0d:be:cb:ca:d2:fa:cb:7e:cd:4c:82:b4:8d:fa:24:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:CD:8D:01:AB:F3:2C:6F:50:E0:16:12:E2:E6:6C:66:92:BF:74
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2d:b6:82:c2:92:ff:bf:19:36:51:66:aa:d2:e2:aa:a6:64:
22:c6:8e:f9:d5:ee:8a:90:c1:82:39:44:11:8b:35:4b:58:ac:
e6:43:ac:11:de:78:43:72:11:68:8a:35:7f:6a:65:ce:e6:60:
ea:17:d0:84:58:b0:73:e3:78:a6:3e:e2:1f:91:4c:09:d6:35:
4a:3f:ae:a6:9e:ce:ad:68:f7:61:bd:97:c2:94:03:64:57:ad:
d5:98:a5:d0:05:72:0e:f2:57:79:41:bd:9b:7a:aa:d1:70:6d:
7a:6a:2f:30:0c:98:16:ef:4e:0a:b7:00:3c:26:aa:8b:42:6c:
26:84:16:41:19:f4:47:79:79:6d:35:9a:7a:54:0f:fe:ea:dc:
60:bc:b4:a5:ec:da:24:c1:c7:66:05:59:73:5c:2f:aa:8e:ec:
19:1f:a4:b0:a5:74:ad:a7:cc:51:25:04:bb:70:13:94:73:8c:
00:d9:65:f6:54:20:8e:c8:35:fa:ae:f3:23:fa:ad:dc:56:7c:
d3:39:d1:d6:1f:f5:d3:cf:fe:b5:36:cc:be:23:e7:c5:46:0b:
ec:4d:fe:65:83:b6:b8:1a:57:36:f8:b1:e0:15:b1:77:28:3d:
7e:4b:6d:27:e7:4f:43:b0:a3:96:2d:01:00:d2:90:36:c5:ef:
42:11:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:34 2025 by rpki-client