Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: 07ppvcX7L4nvTiv6hnp8yK7xwj61ZdlMQhyLeryZuB8=
Subject key identifier: 40:9E:9D:FB:2C:82:03:56:6E:E7:54:0F:68:8A:C6:F5:8F:C7:8E:49
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 0198D4A7ABDA1D8E24DFADC67F71648E56F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: bprfdNbiusraacxAcnNdJ0YQHdO946UEXHzDfcgq3sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ab:da:1d:8e:24:df:ad:c6:7f:71:64:8e:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=409e9dfb2c8203566ee7540f688ac6f58fc78e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:c6:f2:3d:18:b6:c5:06:3c:13:95:b7:c0:
3d:8f:0b:b0:c9:a6:a8:cd:9e:82:af:98:82:33:15:
90:b1:ec:21:90:19:1a:85:19:7f:ce:6a:fc:90:51:
82:ed:26:f9:3a:c5:02:05:3a:74:07:d2:a3:ef:4e:
25:50:4a:47:c5:47:d6:fb:ff:94:1c:bf:98:11:e3:
72:57:29:52:e6:46:e0:c7:5a:fe:d1:30:3b:bc:8c:
e8:2d:44:2d:33:16:7b:2e:a3:4f:da:18:34:a1:18:
79:33:cf:7e:61:d2:58:d0:ec:31:f2:cf:b6:ed:00:
f4:c9:9a:c5:6b:dd:71:e7:41:8b:e2:fd:72:57:8c:
5c:c1:25:f2:75:ad:e1:40:f8:89:53:0f:b7:b7:f5:
a9:20:94:0c:d2:01:73:4b:21:ec:78:d2:a2:ad:a5:
7c:bf:ed:28:3d:85:90:80:a5:49:c8:b4:2e:29:37:
48:06:5c:b0:44:64:68:22:23:60:be:b9:a5:f8:ac:
51:b2:9b:99:3f:55:a4:fb:b0:d0:ff:11:8f:7d:1f:
34:c4:de:1c:33:b9:4f:07:dd:9c:ae:67:20:b1:cb:
d0:77:af:f5:3f:3a:49:2b:e0:9d:5d:6f:8d:bf:74:
29:34:ea:eb:9d:7a:e5:65:ef:7e:07:9a:8f:ab:37:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:9D:FB:2C:82:03:56:6E:E7:54:0F:68:8A:C6:F5:8F:C7:8E:49
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:64:cc:9a:cf:70:ed:b2:bd:14:0c:93:d5:15:40:2d:9f:
09:c5:95:d4:8f:07:7b:51:36:5b:43:fc:21:b1:93:e6:bd:d7:
63:65:e0:28:7a:a5:49:f1:70:9a:ad:be:35:59:2c:2f:a3:4f:
1d:62:ac:40:c9:4c:26:a3:3b:62:e7:b3:5b:cd:44:70:a8:44:
f6:6d:d7:61:82:89:09:eb:ea:4f:88:aa:bf:26:cb:f7:06:ad:
17:8c:03:a0:24:b8:59:98:c8:31:17:00:3c:15:d8:6f:22:60:
0e:71:b9:d7:cf:82:5b:bf:a5:b2:46:47:bb:82:d0:ae:a9:b6:
be:60:ec:3d:68:1e:1f:e6:b1:9a:cf:50:26:8a:93:32:1e:89:
17:70:ac:ee:3f:0a:c1:bc:62:c3:07:9a:41:36:a5:27:00:71:
1b:7d:83:e5:84:32:a2:af:ee:f5:37:87:32:d0:7b:bb:47:01:
0b:f4:48:68:e2:ea:91:cd:b3:81:1d:74:e6:ee:f1:5f:a1:cf:
7c:97:29:55:e2:4d:f3:cc:13:09:b8:fd:92:b1:08:29:07:ae:
93:b2:3c:90:46:74:b8:27:e5:1e:c5:aa:e0:a5:35:50:23:09:
7c:8d:86:d1:cd:ff:8c:34:41:a0:41:07:30:3e:3d:53:a7:02:
13:ff:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:51 2025 by rpki-client