Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: vB4Z3/qSgOnLP3h7a+gseDjGW/vvVKWDS4pfWRFhXJg=
Subject key identifier: 90:E7:C1:22:C1:86:9B:D1:88:51:D9:7A:42:4E:88:63:A4:66:54:29
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0197B96AFE1931841663FF97CB7345C274E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0210
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: 4TNcEamcxMBJdxuRNcPnkIPobhU.roa (hash: m5tTan6cU+uoGi79hby9WpCdyKNlJQA9BZkDNvmdK4g=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: G7ZTKtwc0TYwmfrjJqPjvuM4vDwUOCo0kbFl7eSX7ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:fe:19:31:84:16:63:ff:97:cb:73:45:c2:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=90e7c122c1869bd18851d97a424e8863a4665429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:9d:ad:91:01:82:50:8f:11:34:70:dd:6c:
28:b6:6f:37:bb:0b:33:cf:2e:8e:a0:ec:79:ec:f7:
72:cd:2e:cd:c4:0b:10:d1:21:0a:32:80:7a:cd:6d:
53:9b:f5:7d:d7:fd:d2:e7:ac:94:60:a6:fb:d4:fa:
f1:00:d4:23:b1:cd:10:f0:d2:90:1c:b1:8c:1b:fc:
d6:a6:48:31:49:4b:09:66:3d:8e:29:9c:56:81:99:
ad:8d:89:c7:38:bf:d4:ea:c8:7e:6f:fa:b7:c0:2c:
0c:f7:d7:47:26:87:36:ed:e5:11:39:2d:12:bc:15:
a3:61:38:90:b5:92:96:9c:4f:2c:42:5f:e8:cd:96:
01:cb:5f:6a:6d:19:db:95:7f:f2:d9:a0:84:55:5c:
cb:c6:7a:7f:ca:eb:d1:4a:af:ef:52:ad:cc:0c:72:
2f:68:13:a9:bf:b4:94:99:62:28:fb:b3:ab:a1:cc:
e3:29:c9:c8:30:7c:45:7e:a2:2c:35:6f:f2:86:fa:
e6:11:e3:63:c8:de:69:07:c8:af:5a:b5:5c:62:76:
d0:d9:c7:d6:c8:b7:5c:5a:5d:ad:11:28:d5:2a:18:
d1:3b:ea:55:05:28:c1:00:0f:13:00:be:7e:b3:b4:
57:54:50:7b:b0:85:a0:26:71:b3:ea:cd:83:b8:f9:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:C1:22:C1:86:9B:D1:88:51:D9:7A:42:4E:88:63:A4:66:54:29
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:9c:5c:d6:1e:30:43:05:81:82:b6:a6:76:1c:fb:0e:96:
de:76:48:80:82:e0:5c:ea:74:f3:6a:33:9f:eb:12:30:1e:c6:
fe:43:fd:c4:54:0b:33:00:d7:69:ac:17:61:ac:c5:aa:62:28:
e8:a1:b1:35:87:56:fc:87:76:3b:aa:50:9e:cf:f8:1d:49:7a:
ee:62:68:62:36:e5:d3:b9:59:47:44:00:7a:4c:96:86:34:e0:
bc:df:25:9d:e0:f4:81:56:a5:5a:d7:9e:a9:74:c8:c5:07:0e:
d1:83:f5:70:79:02:41:bf:6e:fa:66:48:8f:d3:9a:73:2b:5f:
cd:fd:0c:47:12:de:49:b7:08:f8:09:39:f8:7d:a7:0c:c0:99:
59:3f:05:61:3b:3b:49:0d:17:1a:83:30:ad:54:20:67:bb:99:
7a:39:d9:d7:c6:36:d4:2f:c4:b2:3b:a1:d8:eb:20:72:09:3d:
fe:ac:ab:09:10:e5:31:2f:94:e3:4e:d7:9f:46:11:4c:ce:25:
90:99:46:d6:a1:21:c1:56:99:3d:53:d3:42:81:5d:c9:84:bd:
19:e1:4e:71:40:67:e1:6e:b8:c6:63:be:7c:18:fa:8f:7d:63:
87:f0:5b:92:d8:67:5d:8d:08:1a:f5:c5:49:6e:ca:ce:82:82:
1a:b2:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:55:16 2025 by rpki-client