Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: TNY8pul67thMR3Nw9ALE9vG2F36rIYrrp/58u83RxqQ=
Subject key identifier: E8:CD:02:E2:CF:8D:73:6C:DC:58:5B:2F:54:A1:38:C9:D5:8D:8E:61
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0198D6981080EA02584C6994F962064594E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1270
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: m/a7lipyR5O52KEEg6dwJzQ0s8Ny90PHaoglTQ0/mtY=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:10:80:ea:02:58:4c:69:94:f9:62:06:45:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=e8cd02e2cf8d736cdc585b2f54a138c9d58d8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:e5:f8:50:96:90:4a:33:21:b9:a4:18:68:
98:31:99:d5:77:08:b3:0a:54:4e:71:95:56:f5:a2:
eb:b1:bc:49:7c:af:71:d0:a1:e0:39:b6:2c:18:0b:
35:28:c2:73:b9:76:9b:e4:3b:07:e0:c9:be:5e:97:
7b:7d:8f:98:15:55:57:b2:b2:54:57:02:72:5d:91:
de:f1:c1:c7:2a:d7:cd:eb:3f:f0:93:bb:30:63:31:
c4:4c:49:6e:31:1a:f2:91:9c:da:b9:72:16:a9:97:
2f:00:d5:eb:70:15:33:78:c5:65:7b:5c:1d:f1:ed:
f1:fa:ce:0a:9a:01:39:bd:4e:20:fe:01:c3:89:df:
e1:7b:de:ca:dc:8d:1d:25:00:40:45:6e:73:38:8d:
77:5a:be:3e:77:22:a4:8c:72:43:15:78:1c:b0:33:
43:d5:68:0b:3e:7d:36:72:a7:3e:07:97:3e:75:9f:
e5:78:e6:80:33:45:e0:c6:84:35:4f:fd:ed:64:07:
9c:9f:f1:10:6b:b7:e7:f2:87:0a:0c:31:70:24:41:
58:4f:59:3e:0c:02:50:25:66:0a:51:a0:f0:ca:8b:
b4:e2:1f:fa:05:13:ea:9c:a7:a7:56:91:09:4b:bd:
72:92:c2:1e:47:4b:e9:25:f7:fb:97:9a:0d:3c:14:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:02:E2:CF:8D:73:6C:DC:58:5B:2F:54:A1:38:C9:D5:8D:8E:61
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:80:1c:f4:51:7c:1a:a0:34:09:48:38:7a:b3:25:e2:bd:
78:fb:14:53:11:12:93:3b:05:1d:14:9b:ec:49:d8:24:f3:5e:
f8:3c:b2:67:c4:65:77:26:98:84:ef:ed:5f:43:9b:08:f7:26:
ed:03:77:8f:c8:c2:a6:5c:05:ad:95:ce:e9:2e:54:3f:bf:d2:
fc:aa:f1:2d:be:e2:9f:0d:b8:73:0c:47:df:6d:08:6c:77:9e:
74:dd:9e:a7:30:62:7a:88:c4:02:5b:f1:72:78:ea:5f:b6:ed:
f6:de:65:6c:21:bb:ee:8d:ab:ec:07:4b:74:44:69:12:ca:73:
2e:9c:b3:13:1f:89:57:9e:f2:e7:2c:fd:1a:bf:13:c6:47:aa:
4b:0e:b0:79:16:e8:5d:2c:bd:c1:2c:39:0d:76:1b:6c:4f:44:
e5:d6:21:ce:b2:e8:68:8a:a1:15:85:6d:b8:a5:dd:30:43:f1:
a1:6f:39:98:81:b2:1b:47:58:6d:b4:aa:b5:f5:76:af:27:77:
76:bd:96:13:73:07:ce:42:e5:ea:eb:07:e5:b6:b4:ab:66:24:
99:04:e8:fd:58:60:77:73:bd:a1:82:e4:75:b2:30:09:da:2c:
17:50:49:97:59:b2:32:ae:78:9e:9e:0e:12:47:74:87:c5:d0:
1f:ca:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:02 2025 by rpki-client