Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: caUCps94Pob+cWoaWPcbSnTe2lSD+eY6xzx/tFiciSI=
Subject key identifier: D5:02:27:CC:18:9B:66:69:8E:9C:16:C4:7D:56:DE:21:E9:51:AB:70
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0198D51569DD98F180ADA3150644EE2B63FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 02A4
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: P9qjVrGQ4u9tDfWduA4gQOWrLDnW77uvSaf/IKPR/lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:69:dd:98:f1:80:ad:a3:15:06:44:ee:2b:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=d50227cc189b66698e9c16c47d56de21e951ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:2b:b0:1c:85:2e:70:57:56:d9:26:a7:91:
e3:11:a3:4c:15:a1:6d:47:c9:f0:18:33:57:3b:20:
dd:a4:a5:c5:45:db:29:5b:02:03:67:f2:5b:8d:a8:
e3:ac:fc:a6:26:bc:c0:6d:99:a5:23:f2:de:d8:3c:
79:e8:82:50:fc:0b:34:85:d9:f9:ef:5c:0e:c9:2b:
9a:00:9c:5a:01:df:f5:5a:0d:23:a4:7d:15:83:79:
09:cb:71:97:47:d7:23:62:53:13:d7:5d:02:13:c4:
a9:4a:6a:cf:c2:fc:a5:c8:ae:61:51:31:d6:b1:85:
b1:d2:73:e1:03:2d:6f:43:da:b4:3d:82:e9:f1:e5:
05:81:65:84:2b:9e:56:e3:52:ca:e8:99:c5:39:43:
13:67:c1:12:db:47:69:9d:87:6c:d2:17:08:e9:f6:
ed:d7:ed:f3:10:a4:6d:12:6c:79:3c:fc:45:2b:f9:
b1:a1:e6:5d:ab:7d:39:34:3b:0b:5a:35:01:4e:df:
5e:81:78:40:41:f4:bc:99:bc:06:bc:2a:01:0b:b2:
79:de:1a:54:84:fe:94:fd:a8:83:84:50:c3:2b:4f:
5c:8e:34:fd:92:b5:c8:60:75:47:16:ea:9d:db:45:
fd:d1:af:d0:88:36:75:26:18:11:52:40:c9:46:a8:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:27:CC:18:9B:66:69:8E:9C:16:C4:7D:56:DE:21:E9:51:AB:70
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a9:d9:d6:55:5a:6d:5d:02:8a:07:67:f9:5a:69:cd:50:3e:
8a:f6:5c:6a:06:c3:cc:61:f9:48:62:2d:c9:4d:da:09:c0:b7:
d1:82:fe:5e:7a:2d:69:8b:e0:47:46:83:8c:ba:46:bc:ca:81:
04:8d:55:e7:8b:29:81:38:1a:d4:8d:ec:be:7c:f2:10:b8:22:
48:8e:e5:04:2f:cc:f1:81:6e:40:4c:6d:e8:e2:7b:3b:ed:6a:
c8:85:e2:34:a4:fa:11:a2:4f:fa:ed:6b:91:b3:d8:b2:2d:a2:
8a:11:f8:6e:c6:98:88:4d:71:65:ab:45:53:4a:50:07:7e:94:
14:12:51:70:fa:ed:43:c6:d5:8a:7a:f2:1a:06:c8:40:11:37:
7c:65:d7:d5:a5:72:73:7f:57:e6:19:28:f9:b6:66:c0:49:b7:
98:54:95:c2:60:17:5d:1c:77:a4:18:53:fa:ec:e1:55:b7:86:
91:12:e2:d7:ce:a1:3a:6d:f9:c7:8f:b3:6a:3b:87:b3:a6:fd:
b6:12:8f:f6:c0:4b:a3:3d:04:3b:06:5f:b6:ec:f4:fe:ad:2f:
37:70:5c:ae:c7:c2:3f:5f:35:ac:41:a2:82:b7:fa:98:b7:20:
b1:da:a1:c3:12:3f:62:cf:dc:83:25:71:8f:ac:69:95:30:2d:
bc:24:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:21 2025 by rpki-client