Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: LbAS5tiRk5lxSJbtTU7SGbjcHShQgV1pipfwNEIpqNY=
Subject key identifier: 09:10:29:8D:CD:7D:8D:48:CF:94:B3:69:88:6F:77:31:32:60:7E:1F
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0198D5BC3241533A163F7A3798D331C87371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0AA6
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: Uv/J0B4AfQuwlwA3OE+/EDNU2eMmc8ybxP4oqgceqig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:32:41:53:3a:16:3f:7a:37:98:d3:31:c8:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=0910298dcd7d8d48cf94b369886f773132607e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:db:e7:ed:dd:3b:27:32:d9:ca:39:8f:a2:
f2:9c:c6:ed:f9:20:d1:61:ef:3c:b5:99:d1:b4:45:
69:80:a8:d0:78:aa:52:bd:a2:b5:b6:ef:d4:8e:7c:
3a:4f:b3:f1:4f:f2:f3:0c:ae:d5:ff:09:dc:e7:e3:
41:67:77:95:6e:ce:14:20:c1:1a:0c:5f:53:84:2f:
12:69:01:9d:45:0f:98:5a:56:a5:3f:ad:56:97:72:
0b:4b:f0:a0:fe:cf:1d:17:65:0b:35:aa:5d:50:da:
44:84:08:48:65:75:ef:d4:e5:32:6a:10:b6:b7:6a:
02:33:32:c7:e6:d0:ee:a4:0e:57:3d:4b:0c:62:f8:
41:5a:27:7d:d0:cb:1e:7f:38:3a:66:0b:1c:9e:cc:
b7:d1:2f:29:50:0d:e0:3e:13:ec:5e:f8:87:28:e6:
8b:4f:a8:60:08:9a:31:0d:81:7a:24:58:d9:b6:58:
52:e9:23:45:5b:44:04:4f:cb:5b:78:a0:ca:da:5f:
88:85:7a:87:db:87:a4:7b:e5:cf:d6:00:f5:1c:d3:
01:92:d0:39:5b:dc:b9:86:ec:ea:45:fd:2e:1e:de:
38:ce:97:33:94:d5:b2:8f:08:dd:29:e4:4f:6f:58:
95:10:5b:56:aa:85:0f:e8:0c:3e:8d:a9:c0:08:9e:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:29:8D:CD:7D:8D:48:CF:94:B3:69:88:6F:77:31:32:60:7E:1F
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:97:dd:09:7a:89:91:10:57:50:96:dc:18:c3:35:ff:4a:
d3:cd:03:b4:fd:2c:3a:c2:2a:06:8d:11:fa:f6:0f:4a:51:44:
06:c1:ee:bc:1a:3a:0e:ad:a9:3f:d2:0d:9e:c2:cd:3f:58:3c:
ac:a0:e0:97:80:ff:f7:04:82:33:16:08:c5:70:ce:88:fb:8c:
8e:94:89:58:2d:07:d8:5e:bd:bd:06:0c:ed:be:99:a9:ca:c1:
1f:6d:b7:65:95:e0:9a:37:6a:99:0c:6b:96:4e:05:b0:da:b3:
61:6f:95:87:b3:ff:9c:b2:d2:b1:46:8e:da:00:8a:19:09:54:
30:f7:f4:2b:a5:b9:fd:22:da:ce:30:b9:67:f2:b6:ce:ee:0b:
54:d5:14:69:0c:a6:11:72:7f:f5:1c:99:da:65:80:ca:a4:da:
62:55:ec:54:22:05:54:df:55:f3:fc:2e:bd:49:20:8b:64:9d:
31:3a:09:8f:0a:5f:3b:4d:0c:19:d5:dc:28:05:d4:38:c2:e7:
39:9b:a1:75:62:16:d4:15:f0:5f:e1:a6:7b:34:f9:5c:0d:e2:
ce:32:9a:c0:2f:82:c5:33:7b:26:ab:a5:d2:25:1c:58:fd:1d:
8c:d5:d2:f6:1d:f6:c4:6d:b6:29:f2:65:76:16:fa:06:6c:90:
48:ad:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client