Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: DvlcPxiIvVEsp80IMXoOTK7K3eZ6R9zJiv3QDkUIrvY=
Subject key identifier: 80:6F:D7:20:5C:FB:BA:88:60:0B:18:B0:DE:92:2B:D6:DB:C3:9A:CC
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 0198D54EAAAB047CD99BDC7B0F36B11D03AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 1011
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: rbabrwXoE0+tQPQ2+6ztSbIufv7UKU2YlnTyJbVwb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:aa:ab:04:7c:d9:9b:dc:7b:0f:36:b1:1d:03:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=806fd7205cfbba88600b18b0de922bd6dbc39acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:f9:3d:12:55:32:7c:22:95:90:d7:4f:12:
67:45:b8:a2:65:e4:39:f4:9b:43:fe:04:b0:f1:30:
53:1a:5d:73:82:13:1e:77:ca:29:58:b1:51:45:24:
1e:eb:04:f1:a8:06:c1:01:7a:5a:c4:ef:f8:b6:0e:
68:c5:60:02:3d:b3:77:dc:e3:72:2e:b8:64:bc:32:
49:f0:57:07:e5:74:ae:2a:06:78:a0:51:38:ca:dc:
4d:6c:42:ea:94:eb:07:51:aa:09:19:f8:6c:86:a5:
c3:fa:a0:98:1c:ed:3f:0e:ee:05:f3:07:d4:0f:89:
97:aa:fe:ab:e9:e8:38:f2:38:7f:64:8b:61:89:f9:
35:2e:68:95:a8:7f:5f:9b:af:50:1f:2a:49:bb:a3:
c0:c7:55:fb:06:09:2b:d7:e6:48:0b:92:91:ca:3d:
34:66:99:e7:4c:d3:8a:09:91:14:aa:21:c4:ed:1b:
41:26:04:cc:43:9f:50:9c:27:8f:86:e6:36:06:37:
02:33:b7:7c:0b:a2:2e:05:f9:67:7b:96:7a:ff:cb:
14:74:bb:87:09:63:8a:36:71:22:93:a3:25:4f:8f:
f8:91:50:ba:f4:80:d2:2d:71:e5:72:49:34:3d:ab:
0f:64:a4:95:9b:d7:43:59:76:c7:59:0b:12:b8:53:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:D7:20:5C:FB:BA:88:60:0B:18:B0:DE:92:2B:D6:DB:C3:9A:CC
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c5:33:c6:e6:49:bb:41:1e:fc:7b:04:aa:aa:a7:bb:8f:87:
8e:a6:91:c4:40:f4:8c:da:fb:2a:49:1e:e7:68:65:0b:90:48:
8f:cc:0d:45:99:b3:11:ba:55:0d:bd:ca:0b:a8:bd:ba:f2:cc:
f1:04:11:d9:18:6c:73:5d:f3:6c:6d:ab:95:cc:0d:0e:2a:af:
b4:be:50:43:2d:b2:e5:c3:ed:34:7e:c0:b5:bf:58:d3:e9:21:
62:96:5b:63:db:41:c2:71:eb:09:08:06:92:a3:6c:34:77:72:
d8:d4:c3:36:22:5c:d6:2e:75:d1:1c:55:5d:ad:f7:de:ff:16:
9f:3e:45:4c:cb:7e:d7:df:99:9e:68:2c:43:08:94:3b:f0:fc:
01:f4:49:8c:33:3f:50:3a:dc:2f:6f:4d:c3:78:92:cb:cd:ac:
be:20:3e:d1:e6:3f:00:75:ec:58:c4:93:89:e4:dd:db:1e:a3:
3d:9c:66:80:a2:cb:20:e1:86:52:60:d8:34:c7:c0:f2:f4:34:
f1:bc:11:c6:97:3a:c3:0f:fd:d1:a8:ad:60:5e:a9:62:5d:f9:
8f:ef:76:51:8f:ed:5f:bf:3d:ef:c5:35:15:a8:df:00:24:2d:
ce:92:63:99:8c:74:8f:38:9f:dd:9d:6b:11:54:6e:58:df:ab:
66:f9:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:47 2025 by rpki-client