Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: x6Yj02SXZNRjwmZVkngCMNsEH3uqIP9ilAr35PtJDUA=
Subject key identifier: F8:BE:70:46:C9:16:FB:ED:B1:A0:8B:C0:B0:0F:84:E4:FF:3E:01:2C
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0198D54EB9E31418F2A35A01EE0F6B3723EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: btqCYXh2zmS9Qv05u0NHxpdhwGxM/CsoNIbJzkPAb/k=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b9:e3:14:18:f2:a3:5a:01:ee:0f:6b:37:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=f8be7046c916fbedb1a08bc0b00f84e4ff3e012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:4d:b5:1e:c3:c2:a0:24:f6:bb:56:0f:64:
74:b9:28:6d:d0:6d:3a:77:ad:12:15:60:a3:c7:a0:
fc:2d:4c:91:5d:80:bb:46:5b:4c:d6:38:86:15:a9:
6a:9f:95:26:9b:bc:ce:55:12:50:c3:df:cb:5b:4c:
3f:e0:64:ab:6a:d1:80:b8:bd:8d:2d:7c:4c:ee:55:
67:09:05:9b:95:41:73:5f:67:4f:cc:c7:00:3e:3f:
2e:1e:90:13:57:cc:a0:45:f3:6f:ca:8d:ce:7c:5f:
67:db:30:51:0e:43:e0:44:67:d4:d7:75:bf:25:a9:
6d:68:67:73:e9:d1:33:9c:59:34:6b:b1:5e:de:f3:
59:f5:bd:da:ec:cd:f7:d5:80:d2:80:84:c5:e9:ac:
74:07:52:56:92:a9:0b:7b:72:0b:b7:2d:11:3a:92:
34:96:11:70:9d:bc:7c:80:d1:7f:32:52:8c:e9:26:
62:56:36:fb:d2:82:37:25:bf:61:b9:e3:00:f3:be:
9f:24:ca:9e:50:5e:83:d7:fb:c6:95:3a:0c:cd:79:
9a:4d:57:d6:cf:0c:aa:3a:b0:f7:dd:64:7d:75:ed:
9d:6d:72:e8:50:05:de:47:5c:5f:75:26:a7:31:83:
8f:52:ac:75:34:93:7b:b8:d6:23:08:cc:0f:ad:44:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:70:46:C9:16:FB:ED:B1:A0:8B:C0:B0:0F:84:E4:FF:3E:01:2C
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:12:65:fb:06:a4:ff:e7:f5:16:2b:9e:01:07:8e:3f:36:
3f:05:45:b6:d8:22:10:79:4b:26:e7:70:3f:ac:f4:d9:c5:2e:
e9:f7:35:47:98:03:21:7b:b1:ca:88:bd:4f:52:32:16:95:7d:
fe:bd:f4:38:4a:7a:87:8e:e6:fa:f3:2f:81:81:cb:07:a7:0a:
b6:c6:c4:7b:e1:79:a8:cc:6e:d6:c2:0d:6d:cd:c3:cb:c0:56:
6a:3e:dd:02:6f:7b:3f:e4:6a:2c:64:b2:ac:51:cc:f8:67:4c:
e7:46:82:f3:88:c6:d5:32:cd:2b:d3:25:8b:cd:66:2b:a0:aa:
09:26:2c:53:c0:27:0b:e8:17:25:cc:1e:9d:68:dc:5a:53:d5:
20:2b:95:16:f5:a9:ea:0b:3b:ec:7f:28:4c:42:aa:9e:6c:52:
f8:76:94:a9:a0:67:e7:b8:e1:90:8a:8c:26:f4:65:a5:4d:56:
32:bc:2f:89:1b:10:d2:04:63:49:48:c9:0d:28:b4:da:2c:02:
19:71:c0:ec:25:68:4c:e0:33:e2:f5:b1:95:1b:6c:f8:8a:b3:
22:39:5a:09:8e:f1:b5:3d:4c:52:8f:18:11:91:6c:06:fe:57:
0e:9b:6b:bf:53:ef:66:33:bd:55:3a:48:8f:65:b4:3f:9b:55:
e7:6c:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:01 2025 by rpki-client