Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: yVJQsVs+Gz0WXUyfjiFgPTJTL8xsQdGEup3v+cGUjNY=
Subject key identifier: 8F:11:7D:79:66:07:13:FE:04:7A:A3:9B:4A:51:41:52:93:B5:8B:5E
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 0198D4A7A5B372A4D168E34F8CC363CB1DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: DUeztC_9OSU5_baS7RpA8PIrChA.roa (hash: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=)
2: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: yCxBN54sVZDJmKm3Jj3Cq7vdZNuvPo+Q8yFMc8cZESE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a5:b3:72:a4:d1:68:e3:4f:8c:c3:63:cb:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=8f117d79660713fe047aa39b4a51415293b58b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:68:c4:4f:b1:a9:7c:bf:a4:1b:59:0b:1e:
2c:f2:cc:2b:34:75:72:1f:07:a6:ff:d4:ac:f4:f1:
61:2a:e8:af:c0:83:65:d0:4c:23:06:46:94:16:f1:
c0:2e:a2:b8:eb:b8:c2:b0:ab:ed:9e:9d:3c:d7:8b:
de:d2:8b:c1:cd:f1:f7:63:46:c9:cb:46:82:db:df:
d0:be:78:87:67:35:a2:7d:7a:72:15:9b:f3:7c:bc:
0b:65:a7:e5:a7:af:a9:ae:c0:ca:1d:cd:b0:82:6b:
45:b6:5a:7b:89:a7:2b:93:df:3c:3d:2d:bd:09:a4:
d4:d3:3b:d2:7f:3f:1f:48:5c:13:e4:a6:70:ea:1f:
76:a3:c6:6f:0f:1e:56:16:bf:e2:e0:dd:e3:cf:b4:
ae:8f:73:89:c5:c0:38:fc:47:72:a3:fd:05:ec:03:
05:28:5a:16:dd:88:27:db:30:28:b6:42:8a:a2:f0:
fb:c5:32:91:37:e7:83:64:1e:db:57:ad:8f:c4:35:
e2:6e:d8:1f:5b:23:c1:7f:81:ad:16:4c:5e:14:6d:
85:28:98:4f:36:ea:37:71:14:07:05:8a:79:dd:1b:
65:5e:d9:6b:e6:98:81:53:f1:5b:5f:c3:b6:f6:23:
3f:cc:99:95:51:56:ad:20:ce:6c:42:03:ee:7a:d3:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:7D:79:66:07:13:FE:04:7A:A3:9B:4A:51:41:52:93:B5:8B:5E
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1c:b3:c2:e7:a5:c4:2e:4b:b9:a5:e4:22:1d:fe:aa:81:4a:
dd:dd:8b:ab:1d:6c:62:af:72:0b:fb:dd:ce:18:75:3b:4c:84:
3c:d0:b0:d4:1c:6f:21:09:95:1c:b3:87:2c:ed:66:5b:15:44:
d8:e6:ec:e6:ac:8f:4b:35:14:99:14:eb:68:45:70:b9:21:f6:
6e:45:72:19:18:26:1a:06:61:35:d0:39:da:3d:41:6e:02:0e:
84:e3:06:42:1d:ae:21:4b:02:d6:2c:ac:7c:b4:08:82:0a:68:
c4:a7:68:f7:99:6a:dd:6d:23:8d:97:de:be:0a:a4:0f:9a:08:
c8:c2:d8:66:87:ec:cf:2b:2a:bd:39:87:21:5b:13:87:97:00:
1e:22:ab:8a:91:23:29:15:48:bb:2e:3d:9f:56:d5:31:84:84:
f0:0b:d3:57:7e:d0:e4:fb:f6:04:02:bb:b4:1b:7b:b2:02:d6:
7b:b2:78:e9:a6:5c:09:95:2d:d1:3c:34:10:ae:a6:5f:65:f6:
5c:17:56:c5:de:98:74:e6:12:60:c9:1f:49:1e:fd:1d:b4:c1:
79:12:34:09:26:65:95:35:6a:17:ab:be:d0:d1:6d:38:39:a1:
e1:d7:d4:35:56:fa:db:8e:ce:7f:d8:fa:9a:e3:7a:48:35:d4:
5e:4d:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:48 2025 by rpki-client