Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: Pdi4hiT3vBfV8W/A9RJa/oiGGFuRa5pnBIvy53Y/Iwk=
Subject key identifier: 28:22:D9:DB:D2:00:8A:A8:D7:A6:B6:C4:E5:C5:16:0A:C8:EB:A5:CB
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 0198D5156CE6598F1A00742796D037B86690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: +CoU4V5zbKxUswP2Kh4N51gYw7Ao/0FBxfL353CCrBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6c:e6:59:8f:1a:00:74:27:96:d0:37:b8:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=2822d9dbd2008aa8d7a6b6c4e5c5160ac8eba5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:75:f9:00:f2:34:39:4d:b9:1c:64:8f:ec:
38:97:03:05:cb:57:97:c8:80:b3:2d:16:28:54:8c:
bd:b0:01:7a:02:c7:ec:b9:80:03:0b:96:4f:42:84:
cc:5b:31:b2:d5:c6:9d:0b:3c:e4:b2:27:f3:1f:06:
d5:7a:8f:36:9a:fa:ba:a3:e2:96:69:61:bf:9a:fd:
bd:9d:2d:0e:05:d8:d8:79:7a:00:e1:d1:66:d8:68:
24:76:fc:af:71:72:33:20:98:16:f7:3e:62:ed:43:
ef:0c:32:33:0d:28:24:9b:7c:5c:c1:59:27:20:10:
fe:ab:5e:b1:1b:0c:71:10:1c:0a:f0:f7:03:08:bd:
61:95:1b:2f:8a:e6:41:dd:96:51:0d:a1:78:26:78:
91:83:49:49:b1:d9:94:fd:ec:fc:55:95:85:8d:5d:
4f:b1:03:6e:96:e7:82:04:16:c7:38:c2:09:f9:56:
38:49:20:b6:da:d8:2c:12:5a:98:f2:46:b7:cd:75:
f5:35:8c:2e:7e:46:06:30:75:af:57:e0:9b:51:c3:
9a:fa:ec:f5:e7:4f:79:c2:71:e6:ee:90:f7:9e:dd:
9b:7f:24:8d:24:96:56:90:94:3e:ad:62:77:4b:58:
cd:32:88:20:8e:00:cd:f5:bc:2b:50:b4:b3:7f:09:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:D9:DB:D2:00:8A:A8:D7:A6:B6:C4:E5:C5:16:0A:C8:EB:A5:CB
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:78:90:e0:9e:9b:cd:f5:e4:91:b1:d9:4f:0e:49:98:a8:
fe:45:fe:ab:3d:bb:06:4d:a1:02:1a:7c:72:56:70:26:23:25:
b1:f0:34:ba:44:ea:5c:89:bf:cf:80:da:4d:be:ed:d3:00:65:
03:fa:68:e2:46:b7:bf:3c:82:b8:aa:6e:79:d5:4f:79:57:15:
45:22:b2:d8:26:bf:02:f2:f8:fa:f8:76:95:ea:b9:77:a2:a2:
e0:5a:ad:d9:5b:cd:b5:fb:13:b5:20:18:2b:90:4c:76:4d:ed:
9c:fb:08:67:41:a6:e5:e4:93:3a:80:7b:df:c9:b1:37:6e:7a:
ee:a8:56:27:28:eb:26:2e:90:13:10:44:47:a5:66:57:a8:8a:
14:4a:e8:39:a4:1a:d4:e8:cd:10:bc:9c:ec:c9:fc:f1:d2:8f:
c1:fd:b2:06:60:e9:e2:b5:6b:d3:39:6e:56:95:a1:a2:04:17:
dc:9e:19:37:29:e5:79:9d:91:6e:8e:7a:12:64:56:c5:95:0b:
5c:6e:13:6f:12:29:b8:4b:dc:4c:17:eb:02:c2:e2:42:7d:d2:
b0:3f:dd:c9:03:d9:90:56:ce:a0:f8:ea:75:29:22:c9:cd:46:
dd:17:6d:22:87:f7:89:53:9c:b0:3a:b2:c9:9c:7c:23:db:a3:
2f:d9:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:57 2025 by rpki-client