Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: XoVT+k5bzse3xY09UIGG9AtNGGvJAiHqDS3ZBejaJSg=
Subject key identifier: 94:98:AA:D4:52:F5:72:EF:36:63:46:68:C9:76:FC:7F:4A:40:7A:D8
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 0198D9995E715F7EA61AED84B1EF0441A9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 1668
Signing time: Sun 24 Aug 2025 01:02:43 +0000
Manifest this update: Sun 24 Aug 2025 01:02:43 +0000
Manifest next update: Mon 25 Aug 2025 01:02:43 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: IPxLAI3F2GCbjanHEC+2I0O88nsBIOM4rfAQSdJZ164=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:5e:71:5f:7e:a6:1a:ed:84:b1:ef:04:41:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Aug 24 01:02:43 2025 GMT
Not After : Aug 25 01:02:43 2025 GMT
Subject: CN=9498aad452f572ef36634668c976fc7f4a407ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:6e:c4:af:ee:c4:5b:a8:5d:82:90:c4:77:
2e:5c:fc:68:d3:13:fc:98:a1:ff:69:86:91:91:f5:
6b:4b:17:38:b7:45:75:a9:6b:db:e3:be:90:81:61:
35:97:0e:b0:f3:32:50:a7:86:b7:1b:85:74:bb:ea:
10:0b:a3:2c:5a:3d:6b:74:3a:7f:cb:36:32:6f:be:
69:f2:aa:3b:dd:ee:88:89:e1:b5:33:13:12:3c:5a:
6a:d5:d6:bc:1f:10:9d:b4:8e:d4:eb:74:5a:d9:39:
78:d7:d8:3f:f1:c6:b6:9a:40:a4:99:0d:16:26:d6:
53:1d:3c:1e:7b:73:d9:cf:15:57:57:25:de:81:5a:
ad:25:70:08:22:84:84:ba:5c:6e:65:19:53:99:53:
6a:48:c4:20:c5:f8:46:06:61:3a:b2:d6:27:6f:9c:
44:87:6e:67:c3:b4:b5:3a:02:46:f6:8f:43:1b:f5:
c0:15:02:0d:47:ec:19:5d:e7:6f:be:f3:9f:8c:f2:
17:0d:5d:5b:62:5a:16:77:7a:12:dd:ef:20:19:59:
f8:25:87:f5:29:89:37:3d:25:d0:da:d1:ae:2c:55:
34:45:19:ea:c4:5d:3a:fd:0f:12:ef:3a:75:22:6f:
30:c7:fa:0d:07:e6:44:d8:ec:ed:ac:72:0d:fb:9b:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:AA:D4:52:F5:72:EF:36:63:46:68:C9:76:FC:7F:4A:40:7A:D8
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:ca:d2:8a:52:ec:11:07:bf:27:f4:ba:af:4e:60:0b:62:
95:08:94:38:d0:99:f1:97:0d:db:c4:3d:2f:f7:44:d4:09:f6:
6b:03:5d:d1:0e:ba:92:a7:55:e8:05:da:3f:ba:0b:b6:79:f5:
88:3d:c1:00:c7:5f:ab:84:fc:8c:95:5d:12:8f:19:c2:22:62:
f5:cb:7d:ec:9f:25:ed:91:c7:c5:45:b8:57:29:19:78:6b:59:
79:d7:3c:49:cc:19:0b:85:17:ca:d6:e7:d6:8b:35:c9:ba:0b:
6d:7f:a5:1a:94:cf:74:91:32:4e:d4:b5:2e:4b:65:e8:47:89:
85:e2:b3:aa:f4:93:65:7c:dc:31:6b:97:3c:ff:74:0a:aa:b3:
db:78:3e:16:a3:81:45:45:f4:30:69:6e:f7:37:a4:1d:54:41:
43:73:9f:41:58:ff:be:d2:4a:06:df:af:45:db:9f:80:31:d8:
ab:04:b3:aa:e9:1d:5c:d1:25:6e:3e:43:65:cc:8a:92:b0:98:
be:b0:3e:d8:9f:8c:e6:eb:22:33:ce:55:b3:c4:e1:27:1e:d2:
6c:22:3d:a0:c1:0e:d8:04:54:3c:06:96:95:c5:03:5a:4e:ac:
fd:b9:dc:d7:5b:b1:b5:9b:2f:fa:c8:28:0a:01:b9:48:16:db:
9a:f9:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:34 2025 by rpki-client