Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: FZVU9QFp6WgN4SNwR27Aip8OOVLdJuBIiJwy7Se5e6E=
Subject key identifier: 7C:42:B3:39:ED:CD:C9:9F:F0:9E:E4:FD:B9:11:17:0F:CD:5B:89:84
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0198D51625294A463C9B6FD6A0F9B3886D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 0572
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: jMwLkV+UHErFF7FyyBIwwG76E47uqAOHXX/hN2z72Zg=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:25:29:4a:46:3c:9b:6f:d6:a0:f9:b3:88:6d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=7c42b339edcdc99ff09ee4fdb911170fcd5b8984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:af:f0:f5:b8:b0:2f:12:93:62:ad:43:0c:
4a:1c:30:e8:4d:24:79:04:17:69:9c:46:ea:d1:77:
cd:07:cd:79:a6:d9:17:bc:ab:ab:67:d7:39:3b:c3:
6a:4e:37:ee:7f:d4:29:21:5e:9d:94:ff:94:eb:b5:
88:4f:ce:9a:92:d1:2c:11:b6:ef:72:d2:4a:91:43:
3c:e4:7f:23:f5:d3:27:1c:4b:51:61:91:5d:8a:0b:
a8:c9:fd:3e:54:79:28:89:64:dd:68:6a:ce:1d:96:
9a:83:d0:5c:6d:37:79:a9:a7:98:22:dc:4d:a6:17:
02:85:fb:5c:09:40:20:11:59:49:e7:27:3a:d0:f3:
f1:38:aa:8d:5f:11:38:ea:64:04:a7:21:48:63:87:
e4:4e:6e:1e:89:a1:92:0e:5e:0f:22:67:14:f6:2e:
35:51:02:22:ff:39:a0:a2:d3:ee:59:86:27:78:f8:
4f:4d:17:72:76:44:ba:7e:29:2b:d6:ae:45:5a:85:
24:6a:b8:ec:7a:12:0c:50:a8:14:2f:1a:c9:40:66:
7f:ab:e4:45:f0:7c:2e:56:03:93:72:87:af:ad:55:
a8:bf:2e:09:eb:d4:26:ee:c8:55:ad:d3:d8:72:b8:
1d:99:2a:1a:43:59:c2:ba:0d:54:b0:e2:9f:d8:d3:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:B3:39:ED:CD:C9:9F:F0:9E:E4:FD:B9:11:17:0F:CD:5B:89:84
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:59:67:64:8b:c1:0a:c2:86:05:06:a4:d9:28:42:65:67:89:
a9:34:9a:35:e0:59:5c:6e:66:42:09:58:53:80:3c:e6:bc:cb:
6e:6f:15:06:bc:01:83:77:69:c1:a0:e3:dc:f3:8b:28:35:48:
93:8a:36:56:26:dc:ec:06:26:53:78:c4:11:e5:41:d3:a2:af:
df:6a:42:17:a5:14:0c:5a:39:c6:0c:2c:7e:b8:5e:d6:db:47:
4b:14:bc:c8:d9:af:c9:88:22:12:7d:54:ee:41:29:a5:bf:bb:
9e:24:6b:67:95:3d:7b:14:16:42:df:23:13:6a:e0:85:64:fa:
a0:4a:be:9a:dd:e3:c1:d2:0f:09:76:a6:35:db:d8:6d:45:4e:
66:63:fe:22:91:25:64:b2:0a:6e:27:df:da:a9:4d:15:68:a7:
2e:5c:9c:d5:6e:93:6a:b7:09:6a:24:b8:76:e4:4d:dd:6c:bf:
a8:57:f6:15:b6:b5:56:00:ff:38:a0:89:0f:5a:17:28:16:25:
48:5d:04:e7:67:4b:4b:a4:00:aa:6c:98:fa:ff:aa:6d:87:99:
b9:91:95:23:af:4e:b1:5e:d9:22:d5:4c:97:f4:36:df:a6:7c:
c2:e7:3c:23:1e:00:dc:2f:12:8b:da:2b:77:e5:a3:b9:3b:71:
b9:59:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:08 2025 by rpki-client