Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: v1bq4c4wUWQMLiByoaB7hdyYVj9ZX6LHnnR0T4eWcEU=
Subject key identifier: 8D:9D:5F:0F:71:F7:D9:1D:1D:A0:FB:9B:F2:43:1E:DA:9E:E1:2A:C8
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0198D583969D2DCCDF88C6107482160B7630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 08FA
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: VFYdZxVFCdCpkpyuxb39UT4cTZU.roa (hash: 9daq5hdLe7own+qRWKzM9da7RfcLhRIst1jMZCbP+lo=)
2: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: yH1kDeY4qCKe6mjMk8o2xIhnuG7C/8/M2G8bum1obxU=)
3: wWNImYV_qusP-8tj830GeFyHo-0.roa (hash: TFb93bClGCsSwFF6uHgZAuz4lfTVxVkQiC5YvyRCimQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:96:9d:2d:cc:df:88:c6:10:74:82:16:0b:76:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=8d9d5f0f71f7d91d1da0fb9bf2431eda9ee12ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:dd:25:09:39:fd:35:95:3a:0e:b6:74:ac:
c4:64:34:67:a9:cd:5f:01:77:95:db:cc:5a:f2:a9:
80:40:f1:b6:af:1c:89:f7:71:6b:68:e6:43:1a:30:
f1:c0:df:36:fa:98:31:f7:5c:ee:27:00:09:6e:69:
fb:87:07:6b:be:18:85:1a:1c:c4:e1:45:50:20:09:
ee:82:bf:45:7e:f9:00:00:ba:3d:11:6a:07:a7:1b:
ef:85:f6:b1:ec:4e:a7:c2:76:96:60:6b:7e:b0:45:
27:4f:c0:7b:93:de:78:87:68:d3:e3:de:b2:b7:7b:
18:ac:28:4a:2c:81:6e:d7:2a:74:36:80:72:6f:84:
d9:d9:47:06:33:36:b0:7b:89:92:0f:b1:94:e1:c5:
b3:14:e8:d8:74:69:6c:27:26:0b:29:a3:20:2b:83:
be:78:36:7d:c2:73:83:d3:37:de:a5:6f:b1:67:12:
0b:9d:1b:95:4c:43:14:67:f0:2b:7c:e9:68:97:ca:
f3:d8:95:74:d3:86:de:66:c5:46:23:dc:45:ad:c2:
7e:6a:73:b9:f2:4a:32:75:96:88:48:44:47:28:f7:
a9:ba:a5:ea:bd:f5:5d:f0:22:06:0b:1a:9b:04:a7:
f1:4f:57:69:d6:1e:c5:62:cb:bf:92:07:35:87:2f:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:5F:0F:71:F7:D9:1D:1D:A0:FB:9B:F2:43:1E:DA:9E:E1:2A:C8
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6d:a1:90:cf:16:2e:fa:de:a1:fa:fd:de:09:71:60:1b:f2:
f7:30:6d:40:8d:48:32:84:ed:e1:2c:fa:5e:5d:fe:d9:11:a5:
67:1a:2f:64:63:be:b5:ef:99:f3:a0:f8:ed:26:67:d5:b0:cc:
09:c9:43:ec:59:a1:0a:ef:59:86:9f:4f:cc:f3:a8:a9:e0:c1:
5d:78:7b:76:79:a6:85:b2:9b:d6:39:ec:ad:e9:81:e3:f1:0c:
f4:f6:12:3f:94:dd:0a:ad:3a:ec:0e:2a:fa:4d:54:f2:47:59:
84:7f:62:29:f4:6f:93:03:13:7d:c0:2e:92:f7:63:fb:7f:50:
b4:dd:12:71:a0:b0:1a:34:59:d6:af:3c:7f:7e:f5:64:32:8e:
31:60:f5:4a:3f:e3:15:64:d6:33:b6:58:2f:ff:f0:34:1c:85:
2a:20:92:04:7d:ab:85:70:0d:a1:0c:fb:81:b1:82:9f:c0:8e:
00:96:9a:44:d8:c3:e6:1c:40:98:f4:a3:f2:12:89:8f:1c:99:
3a:3c:59:e2:37:0d:63:8a:13:11:39:94:ac:83:6d:0e:6a:fc:
dc:64:b5:4a:b2:78:13:7c:89:d3:97:31:89:3f:31:85:a1:c2:
00:fa:69:51:bf:a6:8c:9b:33:c8:34:70:40:d7:94:d3:9f:8f:
03:cf:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:27 2025 by rpki-client