
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier: tNE9MDhOktsqt2YKZjW5oMTPlJFEzCnWHYaj/RKYu48=
Subject key identifier: 2E:F0:3D:32:BB:85:80:86:0C:92:C6:62:CB:36:17:45:F3:CD:65:D0
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 0198D5BBC5120103B901BB7D2B9373FF5CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (hash: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=)
2: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: t3gLUSKnIjCpjGc9wlk/3/Cnoo1qoHM2JfDodj3nvKs=)
3: WaCtt5UwOfSFSXfG87VM_1liKlY.roa (hash: Xrq/MM8eS57x76XViCgsXlzExdGspNWHwUxtlx/0OhI=)
4: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (hash: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c5:12:01:03:b9:01:bb:7d:2b:93:73:ff:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=2ef03d32bb8580860c92c662cb361745f3cd65d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:7e:12:8b:cc:bf:84:a7:5f:03:5e:66:a3:
9e:25:de:9b:01:32:ef:a6:ab:eb:f9:41:7f:c9:ce:
f1:86:8d:a4:d6:09:c3:13:86:f3:5d:95:8b:fc:93:
d7:ce:99:b2:5b:0d:36:da:42:65:4c:5e:6b:6b:4c:
92:0e:d7:d6:c5:31:5e:f8:67:7c:56:19:a1:eb:9f:
20:f6:12:ce:be:9a:c6:f2:4d:f4:17:08:53:8d:b4:
d2:cc:b7:53:9b:e1:c7:8f:09:6b:ca:5d:ca:aa:bc:
7b:a0:b2:d7:1d:07:32:a0:bc:97:58:03:f2:fe:12:
a2:a7:da:f1:e3:83:50:b1:5b:99:0f:c3:08:68:9b:
16:14:2a:fa:75:22:53:b4:e6:65:33:dc:78:49:37:
e1:20:90:58:c1:3a:54:72:8b:f6:f3:a2:6b:b5:a1:
2b:79:14:c8:a4:f5:f3:ff:5b:79:f1:28:e7:ff:28:
54:35:eb:35:f6:ba:62:89:b8:30:ce:e7:59:26:00:
67:7b:75:4b:cb:99:1a:40:b3:2b:cb:31:12:74:f6:
55:e7:a1:05:4f:1e:97:c1:3a:8b:f9:d2:f2:3e:3d:
1e:74:0d:53:4b:cc:8c:65:7d:5e:3b:bd:64:5f:3b:
ba:c3:ff:8c:b6:a5:98:c5:f3:15:96:dc:4c:e9:60:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:3D:32:BB:85:80:86:0C:92:C6:62:CB:36:17:45:F3:CD:65:D0
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:71:3e:bc:6b:6d:4a:62:d0:a5:8e:a9:52:bb:ad:16:a8:
65:92:c2:e2:c5:ee:c2:8c:4a:02:c2:95:46:5b:4c:e5:95:5d:
63:fb:ea:94:a8:b0:96:a2:ca:9b:9f:c9:5b:ed:0d:73:71:38:
13:ea:09:c3:de:62:73:80:2a:e5:54:9c:db:d9:0a:fb:c8:e7:
72:8c:ba:58:42:c3:1c:95:d7:e3:ec:81:b5:02:67:e4:3e:81:
12:af:fc:19:11:b2:49:42:92:52:f6:68:16:34:89:cc:d0:cc:
45:67:82:e3:c2:04:93:3b:b2:f5:07:f7:48:fa:6a:33:eb:3f:
d1:c9:06:ed:90:18:55:79:32:99:cf:ca:37:f1:bc:2a:cc:46:
54:e7:ad:1d:bd:54:57:59:2a:13:5f:04:40:fc:5d:0f:93:cc:
e1:ce:56:5f:69:b9:b2:5d:ae:24:ce:f0:dc:ca:29:96:9d:16:
ed:f1:4c:f8:93:1e:85:80:b0:00:70:d1:0c:f1:3a:9a:4d:3c:
b2:0c:e8:d1:b5:e4:b8:86:00:da:81:3c:f6:79:fd:67:46:1e:
56:1b:1c:76:14:76:a0:58:88:7f:34:b1:3f:70:57:a5:61:62:
31:4a:11:d1:3e:39:5b:1a:53:8c:c2:83:65:1a:d6:59:37:8a:
55:d8:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:32 2025 by rpki-client