Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: GzWppVEgzmcjz16yGXdnc7ioD1kzcdLdJZpt+4nhGpw=
Subject key identifier: 5F:54:A9:13:CD:DE:C1:8D:07:AF:72:83:1A:4E:CD:4E:86:08:5B:BC
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 0198D8BD82BF7BE754A620D161B64E48FEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0F41
Signing time: Sat 23 Aug 2025 21:02:35 +0000
Manifest this update: Sat 23 Aug 2025 21:02:35 +0000
Manifest next update: Sun 24 Aug 2025 21:02:35 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: fbw4opYRcToZ/Tl9j/MqsDzo6G0HLu7bwggkky9a41g=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:82:bf:7b:e7:54:a6:20:d1:61:b6:4e:48:fe:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Aug 23 21:02:35 2025 GMT
Not After : Aug 24 21:02:35 2025 GMT
Subject: CN=5f54a913cddec18d07af72831a4ecd4e86085bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:ee:53:05:00:7c:62:cb:1f:0b:0d:ac:9b:
43:48:13:d9:dc:4e:25:62:f5:d4:40:a7:61:cb:c4:
02:11:fb:b5:14:f9:df:c7:ab:54:8b:74:8a:d3:5b:
a1:f2:c3:6d:95:db:a2:71:98:58:ae:55:11:2c:c0:
a5:34:bc:49:53:82:ff:e5:ba:79:dd:dc:51:3e:5a:
7e:07:c9:bb:f8:02:75:55:5a:1a:74:93:64:58:85:
1c:38:bc:ae:45:03:c5:03:ce:d9:ad:24:60:f7:02:
ec:0e:61:c5:fe:b1:91:a7:10:a5:ec:ff:86:37:bc:
3c:41:6d:02:42:28:60:02:82:90:b8:44:8a:ec:24:
b9:dd:2a:26:f0:4c:64:a3:20:ee:2e:15:14:0e:12:
11:0c:04:63:0e:9f:df:90:2c:47:3e:dd:f0:bc:47:
58:23:63:9e:28:78:a3:32:86:2c:74:ea:93:ba:2d:
5b:92:fb:fe:46:0e:04:42:14:78:36:f4:87:09:72:
67:94:49:67:cd:ea:6c:00:df:ee:95:37:30:23:01:
52:88:24:f5:bf:cd:fb:e4:b0:2e:3e:b2:1e:9a:c8:
f6:f6:32:b7:d4:9d:86:a0:32:5e:fe:d9:64:f4:b1:
0d:10:46:8c:ec:f8:92:3a:26:ae:eb:9d:94:5b:3a:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:A9:13:CD:DE:C1:8D:07:AF:72:83:1A:4E:CD:4E:86:08:5B:BC
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:c9:e0:9c:57:5f:ab:89:80:59:ca:d0:5f:55:36:91:04:
dd:cb:8d:13:2c:7a:04:00:11:87:4b:ef:3d:0d:4d:02:30:97:
21:95:a4:e0:7b:e2:b7:41:c0:1d:0a:74:bf:c1:cb:5c:65:12:
6a:d3:0d:f0:bc:d7:ce:b3:40:02:63:98:d1:87:c1:a3:5b:ae:
bd:95:22:bf:36:1a:21:ae:c0:d3:9c:e9:6c:72:e0:78:db:55:
b8:84:82:df:de:27:3e:4d:23:73:77:c5:6c:6b:d5:3d:a6:7c:
89:db:52:9e:d8:a6:b2:74:d5:ad:c3:4d:16:92:53:82:05:d2:
21:4e:b1:78:a1:a9:23:9f:f1:fc:24:74:82:13:d9:c5:6d:25:
8a:f9:4d:02:33:20:df:35:cd:0c:77:ac:ae:47:92:59:36:cf:
ed:b0:ef:11:d9:04:f5:c1:98:a0:30:91:c6:fd:68:17:70:28:
0e:f8:6d:f0:a8:69:fb:47:4b:3c:61:90:df:18:c7:ca:4f:52:
50:f1:35:29:12:d3:56:ab:80:17:84:f5:fa:dc:43:2e:7e:67:
ec:57:ad:ee:71:60:ca:c7:e5:1e:c6:06:6b:50:bd:6d:d6:c4:
8a:11:21:b5:21:22:d7:bd:72:d7:e5:55:f6:c2:92:86:a8:27:
70:00:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:37:45 2025 by rpki-client