Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: A9mGYrnHpy3ndTlJBaJ8hJlHL5SfsgF5nlDmxe02ANY=
Subject key identifier: DC:B4:C0:64:F1:A0:45:A7:1A:F6:6E:78:A3:2D:10:96:01:4F:9B:CA
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0198D54E3852C6E13BE8D406676F932B371C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: VJsU5cYHb/HLgNG6oWZsV9i7thn0guDhm/erhfWA4Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:38:52:c6:e1:3b:e8:d4:06:67:6f:93:2b:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=dcb4c064f1a045a71af66e78a32d1096014f9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:19:8a:16:7c:5d:6c:2a:f3:6d:04:16:24:
bc:92:83:bb:fc:6d:ab:07:96:6e:25:e1:08:39:d7:
19:da:87:52:32:c2:a5:44:e3:3d:e5:1d:26:6a:8d:
0f:c1:8e:0b:12:1b:cb:70:d2:2c:b9:5c:8c:1e:4b:
44:11:94:e3:1c:f8:19:93:a1:a4:6f:42:d5:36:f0:
15:a8:fb:d2:4a:6b:08:f1:1b:8c:2f:d0:9e:d0:b8:
8a:df:70:06:6f:60:6a:56:51:88:65:a3:2f:6e:5d:
36:1c:2e:3d:40:b0:17:7c:47:55:e7:e6:ae:12:3c:
af:f0:27:7e:50:c4:d9:f0:a5:50:99:17:9c:9e:fc:
db:d5:59:61:13:fd:36:a9:22:f5:5b:8e:6f:8c:d2:
0e:89:ac:60:7a:4a:eb:0a:8c:2c:b0:42:e0:ad:0b:
3e:70:e6:4b:53:34:51:c4:5b:3f:1a:50:a6:61:a9:
42:2e:ca:d2:aa:6d:11:81:65:ce:17:d2:8c:f4:02:
74:46:f3:6c:e0:74:07:4a:24:7f:44:94:0f:90:bc:
80:34:e9:4a:a9:3d:21:83:9f:9d:c9:51:82:7d:ae:
9f:4d:5f:38:57:d3:ff:0f:be:59:4b:74:a1:7a:89:
36:30:f2:4c:47:c9:35:b6:2b:60:3e:69:61:ae:b2:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:C0:64:F1:A0:45:A7:1A:F6:6E:78:A3:2D:10:96:01:4F:9B:CA
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:80:04:0e:cb:ec:d8:59:c6:56:ea:79:2e:48:f7:b3:cc:ac:
91:dc:6b:46:76:5c:39:c6:d8:99:3d:14:42:f7:8e:20:f9:1d:
88:54:f7:c5:9f:49:6d:b8:12:c4:48:9e:62:e1:6d:c9:30:b5:
8c:42:f6:7b:60:61:17:e0:5a:47:3a:bd:64:98:c5:a0:2d:17:
03:72:02:d4:11:62:b1:43:82:e1:f9:a9:0c:fb:21:fe:ff:76:
2d:be:0a:27:3e:c1:a7:74:66:34:7d:28:d8:48:9f:30:f6:42:
62:6b:16:cd:8e:7e:1d:3a:60:24:58:49:af:e3:51:a6:0c:0f:
2f:fc:2b:94:04:50:31:f5:3b:e7:79:f7:c3:97:b3:78:68:0c:
6e:f0:f3:96:3f:d0:f4:00:6b:80:37:a0:f7:64:31:a5:3a:f2:
d2:d5:53:de:01:98:61:44:4d:ff:c1:92:56:c2:f7:a5:8a:00:
3b:be:75:cc:6d:3e:d0:8b:0f:12:f4:1d:c2:65:7d:81:b2:bf:
cc:40:3a:01:69:7e:9a:20:2c:e2:ff:ed:74:3c:60:6a:e7:0c:
84:e8:15:f6:27:0d:dd:54:7a:45:81:63:2b:3e:e4:f7:4f:a5:
e9:3d:f2:76:b4:8d:4a:0b:3d:4f:ad:b7:e6:d1:94:15:4c:cf:
0f:04:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:57 2025 by rpki-client