Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File: eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier: gf0tTwygEukdEYjXvS0I7BB27uEwVIDgP/Ua0+bbDvw=
Subject key identifier: 34:A9:BC:F5:90:0E:8E:44:45:BE:73:25:76:FF:C3:C4:E9:93:3F:52
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 0198D4E03DCDF13FB2908B5FE586902D3763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (hash: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=)
2: XrmbTB36f6No7HgE2Qb2I31Dcv8.roa (hash: HGfAozR7O/ZB1GS1OfPuLa6dsGtZ660AMEUXLcdHqKM=)
3: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: UEPsnCFE3ako6gEGdWXJcGFzsAhjBiYmLP60lmXnhPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3d:cd:f1:3f:b2:90:8b:5f:e5:86:90:2d:37:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=34a9bcf5900e8e4445be732576ffc3c4e9933f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:99:8e:33:7c:87:08:1a:8b:d4:a5:df:d3:
3c:89:fc:5d:89:9e:4d:40:30:e1:25:7a:63:6a:a4:
2f:05:b5:7c:86:a5:a3:ab:bf:87:64:0e:e7:d0:ba:
c0:09:61:8a:e4:8e:75:de:91:2a:11:cd:79:39:43:
f0:3d:28:61:9f:80:ef:2f:92:a5:79:4d:0d:02:5e:
fb:af:dd:09:81:77:0a:54:7b:9c:47:39:9f:ba:92:
96:52:fb:4c:1d:80:07:59:59:8e:04:77:0c:e2:59:
e2:ab:e8:13:e8:e1:9f:4e:36:86:51:7e:0a:69:81:
88:ea:23:e1:bd:15:c7:bf:0b:2a:23:d9:8e:ab:a5:
63:be:21:ec:8b:78:22:14:63:5a:b9:ee:04:64:4b:
48:ca:5c:a1:88:7a:04:76:93:f1:57:6f:90:90:ea:
17:0b:20:5c:1c:89:85:2e:57:bb:69:3a:88:1e:35:
c5:cb:80:5d:24:d6:1f:c3:26:00:c8:c2:e5:8a:c6:
37:28:2b:df:d9:dc:a6:d2:99:1a:f8:2a:ef:0e:14:
1c:ce:ac:44:a8:17:92:81:7b:ad:a3:a2:3c:a1:2e:
c2:44:99:26:86:53:f1:ca:5f:c2:6d:fa:20:61:ba:
59:6e:89:75:07:55:bd:d8:89:3b:88:2f:b8:a2:43:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:BC:F5:90:0E:8E:44:45:BE:73:25:76:FF:C3:C4:E9:93:3F:52
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:5f:53:86:7c:99:94:09:1e:72:36:63:17:2c:88:d5:a7:
44:da:4a:74:61:4c:4b:90:cf:76:c5:64:92:71:09:2a:d5:89:
ab:04:2c:57:ef:3b:d2:5c:4b:0a:f6:8a:fe:ee:6c:f2:66:c0:
a4:3a:30:88:df:cb:65:96:27:f3:4c:8e:7a:a8:60:b1:f3:c4:
8b:12:74:9d:6b:db:a2:9d:ec:7c:bd:94:7d:75:63:73:2d:bf:
fa:71:86:7b:ba:3e:20:2d:03:f0:fb:3f:cd:ea:a9:aa:8b:e4:
6a:a3:bc:1b:35:cc:0d:ea:3c:3a:a4:e1:d7:3c:4c:f0:09:3f:
02:6c:0d:78:ea:7f:e7:68:b7:34:9c:e0:0a:8d:06:4a:30:6e:
07:1e:db:3d:ff:ab:07:68:71:6d:3e:47:fe:58:36:6c:e4:53:
0e:f8:1b:6d:16:9e:13:24:92:ef:af:fb:df:74:14:50:5e:41:
54:c7:3b:79:db:45:95:44:f0:43:04:34:37:66:be:1a:39:fd:
ce:a1:44:32:d8:e1:6e:1b:ef:49:6f:66:85:d3:aa:5f:d0:35:
c6:4a:cc:83:aa:ea:3c:99:1a:21:c0:12:9b:83:13:4f:38:2a:
f2:a9:1c:89:c7:67:8e:f2:71:11:1c:33:d9:45:10:7e:9a:5a:
22:f3:d0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4D3N8T+ykItf5YaQLTdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MzhkZmI5ZWI5MjQwNzliYjcwNmNiNjE2ZWRhNTcyODY0
YTllMTMwHhcNMjUwODIzMDMwMjAyWhcNMjUwODI0MDMwMjAyWjAzMTEwLwYDVQQD
EygzNGE5YmNmNTkwMGU4ZTQ0NDViZTczMjU3NmZmYzNjNGU5OTMzZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOyZjjN8hwgai9Sl39M8ifxdiZ5N
QDDhJXpjaqQvBbV8hqWjq7+HZA7n0LrACWGK5I513pEqEc15OUPwPShhn4DvL5Kl
eU0NAl77r90JgXcKVHucRzmfupKWUvtMHYAHWVmOBHcM4lniq+gT6OGfTjaGUX4K
aYGI6iPhvRXHvwsqI9mOq6VjviHsi3giFGNaue4EZEtIylyhiHoEdpPxV2+QkOoX
CyBcHImFLle7aTqIHjXFy4BdJNYfwyYAyMLlisY3KCvf2dym0pka+CrvDhQczqxE
qBeSgXuto6I8oS7CRJkmhlPxyl/CbfogYbpZbol1B1W92Ik7iC+4okOeeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSpvPWQDo5ERb5zJXb/w8Tpkz9SMB8GA1UdIwQY
MBaAFHk437nrkkB5u3BsthbtpXKGSp4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQt
MDZkYTJiYjA2MDcxLzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQtMDZkYTJiYjA2MDcx
LzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJhfU4Z8
mZQJHnI2YxcsiNWnRNpKdGFMS5DPdsVkknEJKtWJqwQsV+870lxLCvaK/u5s8mbA
pDowiN/LZZYn80yOeqhgsfPEixJ0nWvbop3sfL2UfXVjcy2/+nGGe7o+IC0D8Ps/
zeqpqovkaqO8GzXMDeo8OqTh1zxM8Ak/AmwNeOp/52i3NJzgCo0GSjBuBx7bPf+r
B2hxbT5H/lg2bORTDvgbbRaeEySS76/733QUUF5BVMc7edtFlUTwQwQ0N2a+Gjn9
zqFEMtjhbhvvSW9mhdOqX9A1xkrMg6rqPJkaIcASm4MTTzgq8qkcicdnjvJxERwz
2UUQfppaIvPQBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:31 2025 by rpki-client