Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: uoc1hJjIYu3c9GTks9ffAMSNhQPr8yMmpHoLKZJd/QM=
Subject key identifier: 10:98:0D:BB:20:7F:64:B7:55:7F:48:52:C8:DC:4B:6F:E0:2D:F9:68
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 0198D473DCA4F606C068325DC678DF21DBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 07D1
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: ugpYivpEbRDYu9D7HMISWetfEBf066jSjXkjmdN75NU=)
2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:dc:a4:f6:06:c0:68:32:5d:c6:78:df:21:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=10980dbb207f64b7557f4852c8dc4b6fe02df968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:7c:a4:14:59:14:27:56:2e:03:b9:46:d7:
58:d2:c5:cf:b0:f5:9d:c0:94:80:1f:03:61:3f:59:
12:87:59:6b:cd:f0:08:07:b6:ee:8b:86:28:b1:31:
be:f3:19:81:82:86:a3:29:13:3e:60:e1:2d:8f:a4:
14:74:ee:e6:11:b2:de:56:df:5e:4c:c2:e0:e7:cd:
e8:39:86:79:8d:3a:68:aa:c9:47:6f:74:2c:03:41:
b8:06:1c:c9:e6:7a:19:62:b0:ec:db:1f:52:2f:b7:
a5:0a:e0:fc:97:9a:4a:3a:a5:73:21:09:a8:c5:79:
e1:c0:8b:99:ef:df:4d:eb:ef:f7:43:dd:a9:0f:a4:
52:11:6f:68:af:ba:0e:35:0b:1a:1a:f7:99:ac:29:
06:4a:1d:b1:21:01:e3:c2:d0:4e:4e:37:90:dd:8f:
db:d8:16:71:5a:62:94:f9:f4:a3:4c:1d:b6:dd:53:
76:20:9f:7d:b3:1c:ab:da:a5:7d:fe:58:ce:96:ae:
80:d7:30:99:af:1f:19:8b:f4:a5:e2:9e:e5:8e:ea:
60:4d:2e:2d:16:a2:17:ca:b2:30:4f:3a:a0:ea:11:
29:af:24:6d:9e:ed:c5:65:14:52:4c:a3:83:bf:03:
a4:7d:d4:de:e7:37:8d:47:24:51:86:9f:bd:cb:7b:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:0D:BB:20:7F:64:B7:55:7F:48:52:C8:DC:4B:6F:E0:2D:F9:68
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:18:8d:c2:3a:fc:4c:4e:86:61:94:f2:36:61:ae:cd:a2:
ca:02:7a:4e:a9:cf:5f:78:c2:a3:84:0b:a6:73:72:4f:d1:66:
e3:d1:2d:fc:eb:a0:92:13:31:3e:39:31:6e:9b:cf:3b:ed:79:
f1:74:2e:0e:52:e7:a4:af:49:89:b2:4f:25:1b:eb:b9:04:90:
ad:84:fc:07:60:fd:14:6a:63:1e:e3:8b:8d:15:17:24:05:3e:
21:65:d5:87:13:6e:02:56:a4:36:55:42:8d:13:0c:b8:b9:f5:
54:bf:a8:ca:ed:b5:7c:c1:a6:95:1b:bc:49:26:1b:06:57:a1:
c2:67:3c:88:f0:73:23:7e:b8:db:2d:3b:43:95:43:30:ba:ce:
50:12:d0:f5:24:e2:3a:08:3a:09:ac:59:f9:66:ad:98:f8:15:
a1:74:96:6b:2a:42:61:0a:87:4c:eb:3a:3d:87:4d:38:d2:59:
1e:f0:b9:49:15:63:d3:2d:1a:ca:60:9a:6f:8e:4d:94:0b:61:
d4:9e:01:2b:bc:f5:af:f6:08:72:c7:f2:9c:7f:b0:4e:25:56:
40:45:e7:2d:d2:00:3c:b4:15:6c:e8:8f:44:71:ec:6a:8d:f7:
64:ef:ac:6a:95:de:d4:d3:cf:9a:a4:ef:43:1c:16:e3:96:86:
a7:e5:6f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9yk9gbAaDJdxnjfIdu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0
MzU3YjkwHhcNMjUwODIzMDEwMzM5WhcNMjUwODI0MDEwMzM5WjAzMTEwLwYDVQQD
EygxMDk4MGRiYjIwN2Y2NGI3NTU3ZjQ4NTJjOGRjNGI2ZmUwMmRmOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aJ8pBRZFCdWLgO5RtdY0sXPsPWd
wJSAHwNhP1kSh1lrzfAIB7bui4YosTG+8xmBgoajKRM+YOEtj6QUdO7mEbLeVt9e
TMLg583oOYZ5jTpoqslHb3QsA0G4BhzJ5noZYrDs2x9SL7elCuD8l5pKOqVzIQmo
xXnhwIuZ799N6+/3Q92pD6RSEW9or7oONQsaGveZrCkGSh2xIQHjwtBOTjeQ3Y/b
2BZxWmKU+fSjTB223VN2IJ99sxyr2qV9/ljOlq6A1zCZrx8Zi/Sl4p7ljupgTS4t
FqIXyrIwTzqg6hEpryRtnu3FZRRSTKODvwOkfdTe5zeNRyRRhp+9y3tPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCYDbsgf2S3VX9IUsjcS2/gLfloMB8GA1UdIwQY
MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt
OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm
LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+EYjcI6
/ExOhmGU8jZhrs2iygJ6TqnPX3jCo4QLpnNyT9Fm49Et/OugkhMxPjkxbpvPO+15
8XQuDlLnpK9JibJPJRvruQSQrYT8B2D9FGpjHuOLjRUXJAU+IWXVhxNuAlakNlVC
jRMMuLn1VL+oyu21fMGmlRu8SSYbBlehwmc8iPBzI3642y07Q5VDMLrOUBLQ9STi
Ogg6CaxZ+WatmPgVoXSWaypCYQqHTOs6PYdNONJZHvC5SRVj0y0aymCab45NlAth
1J4BK7z1r/YIcsfynH+wTiVWQEXnLdIAPLQVbOiPRHHsao33ZO+sapXe1NPPmqTv
QxwW45aGp+VveQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:39 2025 by rpki-client