
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: kNJ2wpJNOFGV3me4WtXu8uJlcMFJusT29e5a8WvWtQQ=
Subject key identifier: 41:4C:56:4D:FC:25:C4:3B:1E:CC:F2:E8:42:81:CD:99:4C:7C:19:0B
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0198D7A8A766003C8C03BE0A64AFBB3E94F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 16:00:11 +0000
Manifest this update: Sat 23 Aug 2025 16:00:11 +0000
Manifest next update: Sun 24 Aug 2025 16:00:11 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: TGuojIh6akeOMB3XNQCxyqw+SQJQ1DTm2i73/bAoPnY=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a7:66:00:3c:8c:03:be:0a:64:af:bb:3e:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Aug 23 16:00:11 2025 GMT
Not After : Aug 24 16:00:11 2025 GMT
Subject: CN=414c564dfc25c43b1eccf2e84281cd994c7c190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:ae:b2:ba:57:31:a7:14:1e:8b:9c:4e:b3:
e8:be:fa:fb:8c:95:d8:d0:ee:08:5e:70:bc:61:f5:
3a:ee:8a:86:a2:02:b7:87:c8:e5:b5:c2:ba:50:25:
40:f3:5f:35:2f:2e:17:d4:b7:0f:b6:79:5c:84:6b:
a8:80:ba:89:29:41:df:d4:41:50:d9:ae:56:0c:6a:
8f:74:1e:71:67:fa:5b:9e:33:09:8f:01:e7:5f:38:
10:9d:7c:4d:14:fb:1f:57:30:a0:e4:ee:62:41:03:
af:88:b3:59:aa:4d:61:4f:12:c4:eb:51:50:47:40:
17:f9:7f:2f:ce:9b:a9:f0:19:8a:16:1a:b7:20:33:
31:63:58:05:62:7c:f2:ba:7a:41:06:9e:c3:3a:88:
e5:e8:38:3e:9e:46:be:e2:e7:b3:a3:77:bd:ca:be:
1e:a7:46:60:38:4f:cc:ac:38:56:81:67:ee:6d:54:
93:a2:65:20:c5:c0:11:c0:61:0b:cc:c7:19:a3:d5:
bb:9e:db:dc:67:a1:55:a7:2d:22:fb:a1:09:ca:ba:
3c:c2:ff:24:c6:dc:08:3e:9e:e5:2d:da:19:8d:d7:
83:cb:2d:ff:0b:39:19:48:3c:f9:5a:e1:ba:58:87:
ef:83:9f:6e:16:fe:ae:ae:79:cd:f0:6d:4a:cd:66:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:56:4D:FC:25:C4:3B:1E:CC:F2:E8:42:81:CD:99:4C:7C:19:0B
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d9:8d:9f:85:e7:fa:6b:71:9e:c5:de:07:f5:34:6d:19:b2:
27:1e:95:5c:0f:e9:26:72:04:47:6d:fa:c2:75:a0:bb:43:dc:
d2:df:d4:08:13:98:be:c6:3b:8c:9e:c5:69:03:c0:9c:49:2e:
ea:6e:2d:16:9e:67:ea:e2:56:e1:3a:4d:4d:f6:33:28:8e:f0:
fd:1c:5b:8b:dd:41:a7:49:54:67:92:d5:c5:90:cd:d8:db:7b:
ff:e5:6a:30:6c:ae:51:8d:b7:e6:5b:1f:83:67:0a:c5:af:26:
cb:f3:07:d3:a3:a0:04:33:f5:f4:18:fd:32:f7:6d:57:87:8b:
ba:96:d5:c6:f7:a2:cd:93:0a:80:22:31:0f:a0:d5:e6:23:6e:
ad:5f:ec:cc:db:0c:74:f3:c0:54:68:e7:d6:63:4c:0e:bf:24:
59:9e:67:a8:6f:81:df:6d:4a:fd:88:33:6a:c4:9a:e0:7d:86:
73:c1:86:45:19:ba:83:6c:68:da:d0:4a:4b:a5:b4:7d:23:67:
87:b7:54:7e:4e:8e:a3:2f:b2:00:74:74:20:31:b1:19:aa:09:
28:52:f5:44:98:25:10:c5:0f:7b:25:1a:26:36:d5:35:cd:ed:
0b:bd:76:23:61:13:24:30:dd:3c:2c:8a:44:1a:af:46:33:79:
e4:c2:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:09 2025 by rpki-client