Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File: EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier: 2/LwnswDEJs6xAMu2U2tJsynd0bW1ckhCV4FnCJo0QQ=
Subject key identifier: 32:AA:CC:8E:E6:81:CB:AB:16:A6:5A:F2:F7:5B:20:4D:8D:96:30:5F
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 0198D697EE9324C3ED66A952749EB1405D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: jnlP0Rv5bU46YpKMIWyOpVVTT+acxjKOgcO2DCF0ZQY=)
2: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (hash: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ee:93:24:c3:ed:66:a9:52:74:9e:b1:40:5d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=32aacc8ee681cbab16a65af2f75b204d8d96305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:29:a0:57:64:94:d2:39:24:65:ef:27:9c:
a6:c3:41:b9:fd:8b:d0:c6:f5:f1:21:92:a4:ea:0f:
28:45:e6:8c:61:0a:26:82:f6:01:4d:46:36:3e:f6:
1e:97:7c:18:61:4f:52:70:bb:e7:8f:e7:6e:ac:27:
5e:1d:e2:ea:fa:4f:21:c4:9a:14:ba:db:2a:cb:cc:
ca:c6:4f:f5:1f:3b:e0:4d:2e:10:89:f5:f4:9a:e6:
f4:51:d7:ff:30:57:94:d8:48:52:75:be:8c:d1:13:
0e:4c:47:3d:c5:5d:a9:9a:7f:12:dc:d1:a9:67:9a:
f6:89:89:34:69:47:da:d6:c5:ab:fd:19:d9:37:64:
9b:cb:16:6c:c8:2a:66:88:4f:48:92:e2:8f:bd:9b:
75:54:62:cf:57:50:3c:83:d1:0c:c3:83:f1:1e:6b:
0d:36:45:56:81:24:60:8b:7d:07:bd:9f:d9:fd:3c:
95:dc:d7:2b:68:2a:79:6b:39:9d:2d:ba:19:1d:e0:
50:bd:3f:b1:29:3a:6b:b0:29:24:9b:7e:4b:1c:c7:
7d:b4:e2:fc:98:fd:53:3c:73:c5:47:27:44:3f:d7:
88:ea:52:c8:b9:1b:49:e9:cb:e6:b0:2e:17:be:c4:
fe:88:7a:4a:04:03:ee:ed:8b:b4:08:86:2a:6c:5e:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:CC:8E:E6:81:CB:AB:16:A6:5A:F2:F7:5B:20:4D:8D:96:30:5F
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c2:f6:f2:04:95:ab:06:7a:a8:d0:4b:48:f9:66:37:ca:44:
7d:e1:60:fe:02:48:70:81:28:5a:7e:ea:30:68:71:bb:93:d1:
ae:7f:03:61:51:47:33:af:89:94:b5:da:c3:c3:c7:c4:4d:4f:
3f:51:ab:55:d2:cb:99:cc:ff:39:46:1b:e5:32:b4:7a:af:9f:
f7:f2:5a:15:58:f9:ee:df:a0:42:81:d3:40:bd:6b:8b:ca:44:
80:61:82:f4:72:5d:4b:4f:75:da:a2:f0:d4:b5:17:15:a0:a7:
37:5b:cf:89:f4:bb:44:53:1f:df:d6:8e:19:b8:61:3c:62:92:
29:8b:9c:b4:61:a6:5d:fa:f7:8e:7c:d0:42:3e:f5:62:79:ce:
5f:b2:52:8d:36:55:f2:4f:ea:be:c1:55:b9:67:be:2e:7d:01:
62:a0:c3:90:e7:61:ab:7c:03:5b:77:7b:7f:0f:8e:5c:dd:8d:
6d:7c:5e:da:c7:76:27:32:66:13:20:0f:69:f8:ef:de:f6:e9:
0a:e5:06:f1:18:c2:70:65:ee:df:28:a7:87:ae:39:37:73:79:
a9:61:be:e0:9e:40:09:1b:81:f4:50:57:de:61:e5:99:96:fa:
00:2b:cb:f4:01:eb:4b:b7:80:09:9f:da:05:95:97:21:cd:8e:
3a:53:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:41 2025 by rpki-client