Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: tmzA0veffjEXTGP3moEPn7UaKt1PEwNdFpBdnGHdwSQ=
Subject key identifier: FA:82:30:75:E7:5C:EA:3A:5D:77:69:C2:B4:EB:E0:82:13:74:21:96
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0198D5F19DECE1C59D5EDE890852B50A0F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 0590
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: syHvmTqAaBHWBIiU7amSy+hhEXzDGfHK2RM7PH4SVPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9d:ec:e1:c5:9d:5e:de:89:08:52:b5:0a:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=fa823075e75cea3a5d7769c2b4ebe08213742196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:d5:0f:05:74:e0:b4:a6:b2:80:e1:9f:99:
e1:f0:48:30:1c:09:c2:89:9b:d3:0e:02:e1:dc:21:
7e:a9:5e:30:4e:40:b3:0c:98:75:cc:33:20:de:07:
10:8e:47:b6:f6:ae:72:2a:b7:e9:73:5a:8b:64:af:
14:88:ed:ba:8b:5e:f7:46:c4:5b:99:58:d3:e1:3c:
35:8a:6a:ec:67:9f:74:86:30:f6:35:49:7f:7b:0a:
b4:2b:08:ba:53:9e:ef:31:d2:90:c6:f6:97:af:1f:
5f:b0:7d:3f:11:e5:2b:c1:6d:ea:ed:36:a9:23:ce:
d9:85:ca:1f:07:76:9a:56:34:7b:fc:d7:55:ce:26:
85:b3:3a:56:37:96:f1:77:ef:91:2c:e5:d9:55:79:
fe:4f:c0:3b:17:36:b5:cd:8b:77:79:fb:f0:be:34:
c8:17:10:b6:dc:17:d1:e6:5f:33:e5:86:cb:37:2e:
47:b3:a5:d4:f0:e0:c5:7e:03:0d:5b:92:bf:fb:b3:
56:40:3d:af:88:10:52:1d:63:fc:f5:69:d8:01:a7:
0a:e3:58:0c:41:96:83:fb:ad:e3:e7:32:59:9b:09:
ae:cf:d9:ef:81:1c:61:bb:ce:df:b9:4f:76:68:ee:
5d:13:b7:76:18:b5:e2:76:c7:47:4b:18:b6:72:ba:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:82:30:75:E7:5C:EA:3A:5D:77:69:C2:B4:EB:E0:82:13:74:21:96
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:13:98:cd:cf:e8:85:ee:d2:f0:63:f4:d3:60:9a:90:b4:
1b:11:40:de:5e:f3:2a:18:a6:63:8f:2f:ba:e7:83:4d:2e:f5:
63:1c:87:af:03:7c:ce:30:99:9a:de:76:bf:28:9c:a5:f2:46:
7f:af:e6:37:21:63:97:58:85:e0:8a:7d:c4:43:0a:33:c7:f2:
0b:e6:83:80:84:e4:86:62:19:3f:eb:71:64:40:20:8a:2d:8b:
d8:ba:4f:78:46:70:40:62:e5:d3:a3:38:0d:ac:20:31:6a:17:
6f:d7:51:58:9a:67:d3:ed:97:0f:10:21:77:76:cc:8c:5c:6d:
07:ef:56:3b:a4:5d:3a:fb:04:99:e0:54:db:1f:58:cd:15:a8:
c5:ce:05:80:c8:38:18:7f:42:f0:b9:b8:93:54:d1:89:0c:28:
3f:b2:44:d5:53:8d:e2:58:f3:1c:20:14:5c:66:13:85:3c:d0:
9b:bf:37:49:22:20:fe:22:0f:7a:0d:94:b7:82:37:da:17:a1:
50:c6:9f:82:9b:cf:f3:37:6a:b8:65:1c:f8:b1:36:b3:f2:34:
b4:5b:12:a6:ef:60:6a:da:e2:2c:fe:c4:96:9e:5f:97:df:86:
ac:64:98:2f:c1:23:14:b7:da:6a:f5:3f:50:3d:d3:4c:92:df:
73:40:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:54 2025 by rpki-client