Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: IdkztkpQ+bxeMVrIOZ6q1FvklCsrZQY1VeFeD3tNVuY=
Subject key identifier: 8C:01:43:36:EC:32:10:F6:62:07:EE:46:7D:3D:54:51:30:EF:E1:CA
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 0198D70584013CC96BD3331C7D672B8E1BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 135B
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: ZUgG/eQzAcU//2j8LPy8B6fYygUQXMo7702LneP44Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:84:01:3c:c9:6b:d3:33:1c:7d:67:2b:8e:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=8c014336ec3210f66207ee467d3d545130efe1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:23:96:41:33:51:60:5a:17:a8:e8:21:c2:
45:2e:09:f0:32:0d:13:29:ea:b9:23:62:98:b3:34:
7e:08:a2:c2:3a:22:e3:36:0a:15:3b:d9:10:fa:f2:
19:0b:ed:be:8d:0c:bb:fe:a8:eb:4a:d8:6f:7b:d7:
70:50:22:9c:aa:40:b0:cc:1d:7c:72:55:b8:2e:43:
f1:13:ff:33:ff:22:41:37:e6:95:f6:8f:33:c3:cc:
e3:91:3e:ce:6c:0b:ce:90:95:6d:e9:6b:46:fc:a2:
b6:6d:5d:66:13:e5:4f:cc:fc:93:2a:7f:c3:5f:ea:
b6:98:7f:6d:f0:c4:19:1a:34:ad:f0:2e:bb:87:d6:
32:d1:4f:32:5f:ba:a0:bf:a4:a5:ef:c0:db:c4:3f:
e0:a4:51:fc:57:87:bd:e8:7a:79:20:7e:6e:7c:07:
9d:aa:79:b4:b9:19:78:e4:0d:da:02:8f:b1:47:87:
c6:43:fd:02:4d:89:c1:05:7f:00:bd:f3:cb:dc:c6:
e9:d0:b7:44:b9:28:9b:b9:54:97:63:50:94:00:92:
57:eb:f1:4c:64:50:d7:56:4b:62:c8:31:80:60:9e:
3f:c2:26:85:d6:9b:4d:9e:7c:03:c9:d2:01:83:be:
dc:29:1a:41:b9:58:e3:40:98:87:0c:be:68:71:37:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:43:36:EC:32:10:F6:62:07:EE:46:7D:3D:54:51:30:EF:E1:CA
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:7b:74:99:83:2a:94:dd:1a:44:6c:83:e5:b0:38:71:6d:
66:bd:20:2e:87:ab:e2:e8:b0:16:1f:7c:f6:a6:bd:c0:ab:ac:
87:55:b4:66:e6:49:a9:ce:7c:be:3f:ed:4a:ff:56:55:1d:91:
76:d1:66:b1:02:01:5f:cf:c3:ee:db:8a:d4:2a:72:7f:fd:e8:
28:3a:50:a6:50:a5:bd:2b:05:7d:05:db:5c:de:c0:8a:7d:ec:
e9:85:aa:d3:5a:e2:1f:90:75:fa:f8:e1:76:97:7d:24:75:ba:
5c:ab:6c:12:bc:92:61:c4:92:b9:02:a2:6f:de:1c:10:a3:18:
a0:e6:97:1f:20:29:03:37:e0:d2:d1:34:c9:fb:27:8f:54:89:
aa:56:95:3a:dd:de:1e:8c:98:d6:c0:29:d1:3e:bd:6d:ff:ec:
77:d6:3d:09:f1:5a:01:29:68:ce:23:45:78:36:75:8f:3a:f7:
71:7d:7d:45:47:02:9f:f7:76:a0:c7:1f:22:cb:76:2a:37:d6:
02:88:8d:94:42:13:70:a4:6e:9b:b7:2f:c8:27:de:41:11:45:
fa:76:8c:92:87:73:7b:4e:33:87:ba:d8:0c:13:9d:69:fe:43:
a3:b4:a3:0d:56:e0:10:dd:f0:f1:28:b6:77:2d:02:32:11:5b:
69:bd:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:01 2025 by rpki-client