Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: DrtNRVeh2ritk2S2iyPMBO6nSbq6VAee/daqnWeP4bc=
Subject key identifier: 67:5B:CB:63:23:2A:06:F3:FD:11:DB:79:70:A8:29:2C:F5:2A:22:C1
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 0198D660FC37BCDF362C0E4C35D13FC1E115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: C8EZ3tGe2WQLUryV9+HOyfKUMOalV28t5GvlABwMOOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fc:37:bc:df:36:2c:0e:4c:35:d1:3f:c1:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=675bcb63232a06f3fd11db7970a8292cf52a22c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:6f:8d:c5:41:84:45:af:b5:bb:d4:62:5e:
2c:c9:50:32:8f:91:bc:2d:68:a3:f6:e7:cc:c6:ed:
60:17:32:fa:c1:6b:98:91:4c:29:34:31:76:41:da:
60:87:7f:d9:fa:5a:89:63:10:37:dc:6b:37:53:07:
4c:12:78:00:21:f0:24:38:c1:57:54:57:4a:7c:a3:
d4:3a:e6:74:5d:d7:b3:32:50:65:19:ba:52:a3:a3:
6e:ac:22:8e:9f:fe:f5:69:fc:46:fe:e4:90:0d:ec:
b6:c2:20:0a:7c:ed:8d:cc:31:04:59:1b:9c:09:f5:
c8:a1:ab:2d:5a:f1:b4:59:e5:96:71:58:da:ff:f9:
1b:55:bb:91:05:8a:98:81:88:e0:dd:91:1e:0f:09:
77:ec:10:a4:a3:be:7c:74:b7:4f:76:1c:d2:35:85:
54:08:12:e5:c4:3c:dd:a2:58:24:4a:73:45:03:d7:
11:c6:b3:0e:0d:f0:b3:d3:d0:bd:7c:1e:ed:03:06:
c4:7c:15:57:1e:a8:3a:77:96:71:8a:78:44:84:ca:
9d:40:e5:3a:ce:55:a7:1a:30:2c:ea:a2:58:27:70:
f2:13:23:6d:9f:a0:5b:69:19:22:5d:d5:a1:66:14:
13:a0:3d:65:54:1f:1f:0f:fe:2d:62:d4:80:65:74:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:CB:63:23:2A:06:F3:FD:11:DB:79:70:A8:29:2C:F5:2A:22:C1
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:ba:cc:1a:15:86:93:d8:df:91:3a:d2:a5:58:8e:1e:d5:
03:d0:83:62:09:15:a0:14:f8:e7:7b:54:cf:fb:2b:b6:3f:1f:
97:a2:9e:35:be:4c:61:8f:e8:a7:b6:ee:02:2a:0c:9a:b5:93:
5d:3b:cc:02:3b:af:3a:b9:5a:2c:f3:6c:96:9f:28:84:77:1e:
3d:6b:44:f9:11:ea:1a:df:37:39:f4:27:ff:f5:20:ac:a1:d0:
fd:30:69:8e:64:d6:73:8f:7d:4e:e5:c3:b2:85:60:18:c8:6b:
17:b0:03:d3:22:1d:21:f9:8c:52:0f:e4:f3:44:5b:26:80:df:
5b:05:37:05:7e:47:23:fb:38:54:06:17:9e:c7:a2:0a:59:60:
84:f7:e9:0d:fa:d2:7f:46:73:a5:e3:41:34:7f:cd:62:d0:a0:
3b:cb:53:31:a7:27:15:c4:14:6f:27:90:6f:d4:33:d7:5c:21:
fa:78:c7:81:b2:50:e5:c1:6b:2e:da:69:8e:09:a1:b6:19:8a:
cf:e4:31:f4:39:26:c0:85:77:d0:e7:93:4f:ef:5d:0d:36:e9:
30:91:ce:25:64:89:84:96:50:7e:0d:41:82:79:1f:8e:03:90:
95:91:22:f6:54:b6:17:a3:4b:26:4c:7b:26:ae:ee:d9:9c:ca:
69:d6:15:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:01 2025 by rpki-client