Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
File: eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json)
Hash identifier: L+HeFFJI2yu7VCixCqqXBOYEKazSawMBCuym8usbwdk=
Subject key identifier: DB:60:F5:97:E7:8F:04:60:93:30:AB:3D:C3:59:F8:CC:C2:56:B2:81
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial: 0198D5BBD11F1923581B88EA959E1F8AB1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: V2Nx4N7p2yDD90D1vcRw0zSQO9D2I3DeZWN1z3D634I=)
2: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (hash: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d1:1f:19:23:58:1b:88:ea:95:9e:1f:8a:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=db60f597e78f04609330ab3dc359f8ccc256b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:eb:39:36:16:bf:74:98:71:2c:76:c5:c2:
5f:6b:c8:a3:c7:2a:5f:36:ef:7a:d2:6e:7f:7e:f4:
ea:21:09:3f:e9:21:c3:f7:a1:0d:e9:28:bf:7c:fa:
55:5e:68:d6:48:40:fd:59:33:3e:5c:a9:47:46:22:
82:ec:6d:40:54:7c:d3:24:dd:3f:9b:e9:a9:42:0c:
8a:bd:5e:5f:4d:2a:44:6b:f5:25:fe:39:f0:00:ba:
00:f4:18:e1:73:ea:db:26:0e:92:f5:d4:a0:1b:13:
6f:a5:69:84:26:b6:ca:de:a2:d3:5c:84:d1:40:ab:
41:4f:f2:8a:e6:e2:79:41:41:8b:a3:60:84:97:e8:
eb:cd:63:88:5b:4c:2c:de:83:95:a1:89:7b:db:58:
ed:b7:c7:ce:af:c8:9d:69:42:9c:11:b8:60:af:77:
0d:01:6e:71:2a:ec:29:7a:e6:40:30:78:80:39:88:
c4:f9:2a:13:70:dc:b1:3e:e3:08:65:9d:ad:2d:74:
d7:66:60:39:69:f5:5f:3f:a8:64:8b:0a:fa:94:51:
44:59:85:93:6d:a3:50:c8:04:dc:a7:4e:86:f4:29:
f7:37:da:e1:14:08:68:a9:cc:9a:bf:b7:94:5d:31:
ac:63:91:2f:88:45:43:67:ff:c9:a4:12:6e:9a:36:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:F5:97:E7:8F:04:60:93:30:AB:3D:C3:59:F8:CC:C2:56:B2:81
X509v3 Authority Key Identifier:
keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:aa:65:45:6e:83:9f:34:61:00:32:e2:e2:25:e7:91:01:
67:92:d6:ad:51:24:73:62:6d:0f:ad:c9:ae:9f:9d:9d:b3:7e:
58:62:5f:3a:60:ed:ca:4c:e5:fd:66:9f:52:3b:16:df:1a:8b:
23:7d:eb:0a:2b:7e:d0:1d:06:7c:76:9b:94:16:97:ea:13:82:
d0:aa:44:24:f7:67:9e:8a:ee:65:01:06:3f:d8:0f:8d:d6:06:
b9:90:52:91:cb:81:d1:ef:1b:65:ea:01:db:70:f4:e5:8e:f9:
16:28:59:58:67:3e:39:44:72:cd:5a:9a:1a:1f:bb:30:61:8f:
7b:ef:60:83:cb:f0:be:80:02:4b:ce:d7:f4:a6:40:56:35:89:
ab:6c:dd:42:02:29:bf:fb:54:a4:87:0d:ba:82:8e:09:19:d5:
25:0a:d1:fe:14:61:4a:e2:6c:55:d3:8c:0d:2b:96:c9:81:bd:
af:6a:64:fd:1c:e1:6e:dd:de:60:cd:a9:ef:c9:ad:79:7d:90:
73:bc:87:a9:11:8e:b3:61:5c:c8:ce:61:b6:eb:17:89:c5:3d:
4d:c5:64:83:90:5b:3f:08:58:2a:72:65:27:0a:c4:49:f4:10:
a6:b3:05:99:88:f8:11:2f:a4:35:3a:7e:51:c6:40:cc:90:e1:
10:92:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:22 2025 by rpki-client