Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: tliJiOrdkRtUZi6aafT0BoD/faKXYojGnO9QbfBbxb0=
Subject key identifier: D3:E1:21:29:59:E9:4A:99:6A:21:7D:87:CC:D2:2B:D4:07:84:9C:CD
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 0198D69864E1799B8E2C9597E6ED89E7E34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 08A7
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: PKJgBLPm5ctJI/Be9N1kdVmJiNHR2Fo+oQcNWk7tHBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:64:e1:79:9b:8e:2c:95:97:e6:ed:89:e7:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=d3e1212959e94a996a217d87ccd22bd407849ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:50:5a:8b:24:51:c8:32:13:fa:95:14:ea:
04:b3:7e:43:0f:a7:58:ef:e9:19:ec:71:90:37:e9:
cc:e3:65:fb:e3:b5:e3:e7:72:66:5e:75:06:71:2e:
31:c3:21:9a:96:09:4e:bd:a0:07:ea:86:0d:44:d1:
b6:c9:0e:ab:e4:94:91:b6:e8:17:8c:cd:6c:a9:a0:
e8:eb:a9:64:c4:69:5a:04:6a:f9:45:f6:d4:9b:b3:
57:25:09:46:b3:3d:67:4a:c8:8c:07:4c:b8:f8:28:
00:c3:6d:a8:08:60:9e:d3:07:9a:c1:c9:65:8b:2a:
d9:59:b0:0c:34:23:6b:30:c0:41:ee:2b:c0:ca:60:
d1:22:5e:aa:73:2e:57:18:b4:53:51:37:92:cd:71:
9a:44:60:f5:fb:c3:da:0d:3c:b0:3c:2f:6b:78:c8:
6e:ce:03:98:3c:e4:3d:33:c1:16:91:2b:e0:a0:ec:
46:a5:b8:67:24:f4:0e:ea:3c:a8:53:1b:84:3f:39:
91:e3:26:5a:ed:22:9c:3e:f4:06:ac:89:a3:33:8a:
5a:d9:87:fa:16:b7:95:2c:c8:59:be:4f:5d:66:ba:
8a:63:75:5f:ab:89:e0:3c:7e:36:29:ef:66:1c:44:
a1:20:86:6f:73:fa:7c:26:b1:5d:ee:ac:ef:95:e2:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:21:29:59:E9:4A:99:6A:21:7D:87:CC:D2:2B:D4:07:84:9C:CD
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6f:ae:ad:12:f1:af:b5:36:c5:df:8c:fa:03:e9:31:48:e4:
5f:8b:f0:51:8b:6b:95:c0:d0:13:20:4f:65:ba:2a:5d:0c:30:
91:19:f0:e6:be:7a:0f:f7:32:dd:9a:21:9d:c6:be:61:51:01:
ad:9b:2b:e6:b6:58:6b:3e:63:34:01:a8:ef:4e:16:97:c1:2d:
5a:fb:54:1a:35:6c:3a:27:7d:71:98:fa:c2:22:3a:6a:a2:97:
d4:a8:5c:11:fd:b9:f3:72:dc:f3:96:e1:e3:87:83:32:b1:6f:
cf:01:35:a2:3a:06:1e:51:c9:c0:5f:b8:5b:1d:34:5a:b3:52:
67:dd:92:9d:89:a9:7b:78:db:4f:f8:99:0b:5b:52:43:5b:9c:
ab:2b:0d:6d:5b:72:0e:6c:1a:dd:fd:15:7e:14:e2:fe:18:93:
87:ab:53:26:6d:6e:34:14:53:2b:ab:f4:63:f9:85:cc:79:d0:
f5:79:f4:ba:2f:9f:32:75:60:8b:bf:4c:32:09:55:3e:03:d1:
2b:cd:18:d2:24:53:bb:6c:ba:a5:bc:56:3a:10:f6:3e:a9:9d:
6a:ce:2e:2c:a1:2b:e7:4a:df:7d:18:62:18:b9:aa:89:1d:ec:
31:b5:af:a4:6d:30:e6:cd:11:71:08:4f:77:85:af:9b:28:86:
a4:9a:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:37 2025 by rpki-client