Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: eM9gctgO/PN9XDoQHgonEDYXW0i8yVtXvn7fYCUDp/A=
Subject key identifier: 79:4B:DA:CF:36:8D:ED:13:23:E2:EC:EE:C4:D7:D6:20:D5:C4:D6:C0
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0198D4DFE5A0B152B8E5DC061F80B878DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: uMjFnFcx2wWY78+r8gFbPss+1I+5qzuuOaiqlwsSwCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e5:a0:b1:52:b8:e5:dc:06:1f:80:b8:78:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=794bdacf368ded1323e2eceec4d7d620d5c4d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:13:63:73:6b:12:50:d7:cb:f1:84:65:7a:
df:3e:87:e0:9d:0d:b9:5c:06:da:cc:15:97:a3:92:
1e:75:e4:79:23:94:3f:82:72:84:2f:71:28:f6:e5:
a1:76:7c:17:ba:0b:96:d7:49:60:f5:91:cd:ba:b4:
74:03:95:5f:d5:30:b4:4b:f3:b0:0d:9e:e0:a4:0f:
71:34:4d:28:eb:76:e6:f4:b1:5c:74:d8:e9:f2:3b:
0c:b0:0b:c6:15:54:85:12:63:e8:67:24:ae:08:3c:
d3:d2:fc:7d:f4:ad:84:bc:2b:89:e6:d7:29:74:eb:
26:46:6d:e0:9b:73:d9:eb:c3:8d:2c:2a:34:93:45:
97:82:d2:8a:b3:df:d8:7e:b3:37:01:02:6f:fb:0f:
3a:0f:9d:9b:96:22:59:0e:12:40:fe:a4:f8:02:9d:
d1:68:f2:e0:12:68:6a:c3:a8:d5:e2:cc:1a:81:a2:
b7:e0:e7:a1:79:eb:f3:b7:f0:f6:d8:45:14:98:0c:
57:e0:ea:35:a3:fe:9c:c5:43:3d:d6:d9:8e:f4:26:
c4:3d:de:bc:9f:58:56:69:4b:e4:1e:85:38:9e:05:
27:a5:55:32:0f:2d:00:e6:03:9d:25:50:78:ef:aa:
0a:01:ab:c5:58:19:a6:69:ed:8a:37:db:89:12:af:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:DA:CF:36:8D:ED:13:23:E2:EC:EE:C4:D7:D6:20:D5:C4:D6:C0
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d9:92:a8:9d:59:2f:ad:0f:29:e3:6a:8b:81:ab:73:28:7b:
9a:b4:09:62:8c:8e:6a:d0:dd:52:40:99:e9:b9:b3:2e:87:ce:
be:1e:8b:31:e4:51:59:d3:ce:a9:07:56:76:ab:e4:c0:21:4b:
18:b1:da:f3:98:b4:79:ba:09:04:87:5e:22:0a:34:ba:62:37:
03:31:cf:40:10:26:fb:d0:96:2a:c4:5d:f3:45:f9:d1:ce:11:
39:a3:db:57:47:66:4c:3a:cc:d9:01:ca:ff:57:93:57:2c:91:
72:3c:4f:5a:88:64:a4:12:97:54:ef:4a:7c:93:22:ad:f6:08:
bd:4f:37:2e:58:18:59:7f:a7:d8:f0:d5:cd:a5:1a:22:9d:0d:
b5:a0:5b:8a:59:f2:97:80:33:da:07:df:bf:16:73:29:58:66:
15:a6:22:fe:9c:4b:cc:07:ea:cd:4f:b0:e8:d4:43:08:56:f8:
b6:d4:24:1d:62:ba:6b:4b:10:9e:b7:c5:b3:e5:53:37:43:4d:
3c:13:80:61:1d:97:fe:cf:15:b4:b9:81:fb:83:92:f1:fa:96:
ac:88:43:07:2b:13:3e:9c:08:6a:f9:96:73:a4:14:8c:42:34:
e3:ef:29:e9:3d:b8:2b:3a:d8:a5:24:76:b7:54:2c:69:04:c9:
ff:21:69:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+WgsVK45dwGH4C4eNwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzllYjlkZDYyZDUxYWZhNTAxMmVmYTFhOWQxMGM2NjQw
MGM0NDUwHhcNMjUwODIzMDMwMTM5WhcNMjUwODI0MDMwMTM5WjAzMTEwLwYDVQQD
Eyg3OTRiZGFjZjM2OGRlZDEzMjNlMmVjZWVjNGQ3ZDYyMGQ1YzRkNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6sTY3NrElDXy/GEZXrfPofgnQ25
XAbazBWXo5IedeR5I5Q/gnKEL3Eo9uWhdnwXuguW10lg9ZHNurR0A5Vf1TC0S/Ow
DZ7gpA9xNE0o63bm9LFcdNjp8jsMsAvGFVSFEmPoZySuCDzT0vx99K2EvCuJ5tcp
dOsmRm3gm3PZ68ONLCo0k0WXgtKKs9/YfrM3AQJv+w86D52bliJZDhJA/qT4Ap3R
aPLgEmhqw6jV4swagaK34Oeheevzt/D22EUUmAxX4Oo1o/6cxUM91tmO9CbEPd68
n1hWaUvkHoU4ngUnpVUyDy0A5gOdJVB476oKAavFWBmmae2KN9uJEq/MswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlL2s82je0TI+Ls7sTX1iDVxNbAMB8GA1UdIwQY
MBaAFHh5653WLVGvpQEu+hqdEMZkAMRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQt
NzRhY2Y4MmFmNTk2LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQtNzRhY2Y4MmFmNTk2
LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdmSqJ1Z
L60PKeNqi4Grcyh7mrQJYoyOatDdUkCZ6bmzLofOvh6LMeRRWdPOqQdWdqvkwCFL
GLHa85i0eboJBIdeIgo0umI3AzHPQBAm+9CWKsRd80X50c4ROaPbV0dmTDrM2QHK
/1eTVyyRcjxPWohkpBKXVO9KfJMirfYIvU83LlgYWX+n2PDVzaUaIp0NtaBbilny
l4Az2gffvxZzKVhmFaYi/pxLzAfqzU+w6NRDCFb4ttQkHWK6a0sQnrfFs+VTN0NN
PBOAYR2X/s8VtLmB+4OS8fqWrIhDBysTPpwIavmWc6QUjEI04+8p6T24KzrYpSR2
t1QsaQTJ/yFpUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:16 2025 by rpki-client