Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: UdPHXdFR/vUorlUS7kqZS7CHk3NxgH5a5XtIXrN7/xQ=
Subject key identifier: 0A:AA:8D:CF:61:4D:43:8A:D5:E9:41:DF:B1:24:BF:8A:6C:F7:E7:24
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 0198D5835262E10B552730B367100E6C50FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1637
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: iONeqmuw8fQvoG4AVNwpMY+ySjubbptIQ6xMu1eV6xI=)
2: irIscEtMW7wUDwc_jX73mZGmgDY.roa (hash: GYzHbNbhG0WM1T4likEpev4kbQzCpDdQtfyeZ8vI/B4=)
3: ydbrje3UPVm8R15QS_gI4G8JkZ8.roa (hash: 9YZIlSpD5UZTI51LVS8V+r0vUFmlrJTcDfEwmIT9Rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:52:62:e1:0b:55:27:30:b3:67:10:0e:6c:50:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=0aaa8dcf614d438ad5e941dfb124bf8a6cf7e724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:48:3c:5e:1c:0b:60:ff:6c:b4:20:77:5a:
99:bb:83:69:9b:6d:05:75:34:d6:e6:be:48:6d:11:
87:42:8e:06:6d:d9:80:c9:5f:2f:c1:4a:c1:58:a5:
eb:88:df:12:56:98:bd:8a:4f:cc:39:4c:14:9a:49:
3e:72:95:06:15:37:a2:ff:97:85:b1:d5:59:1d:f6:
16:1a:54:d4:18:a6:6c:1d:ee:f2:12:61:67:c4:9e:
8d:e8:ea:26:d3:c1:aa:21:0b:68:9e:da:4a:14:ed:
c2:7f:5a:d2:f6:75:88:23:f6:ec:5f:eb:c0:62:0b:
96:ed:77:58:86:3f:13:85:fb:d8:88:1d:14:5c:40:
18:fa:6b:48:82:ca:31:7e:b6:92:56:a6:ec:49:ba:
22:84:23:ab:f0:d8:59:45:15:70:0b:12:59:24:f5:
da:66:8c:a6:4e:0a:7a:18:27:92:a6:69:22:2b:27:
61:08:19:68:57:c7:39:ef:ab:76:02:58:e6:f4:53:
f1:5a:9f:78:93:a9:ce:84:44:bf:a6:93:6a:a6:c3:
64:fe:56:66:1e:8e:ef:76:6e:66:6a:55:61:66:10:
ee:42:2f:41:62:77:6a:c9:69:a5:4e:a1:4b:38:9a:
b7:0a:70:c0:54:1a:dc:76:a6:f9:34:54:1f:0e:f2:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:8D:CF:61:4D:43:8A:D5:E9:41:DF:B1:24:BF:8A:6C:F7:E7:24
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:82:cc:0b:84:db:4a:67:b3:0a:2b:c3:4d:63:29:6d:12:5c:
ad:1c:b6:ff:80:05:8e:05:77:d8:0c:26:6e:a2:bf:61:a7:41:
da:a9:e2:a1:ce:56:e2:18:69:f0:ad:1b:84:8a:d2:8f:29:eb:
89:02:58:d3:64:51:5b:d2:b5:1b:25:ca:1f:78:2f:49:4b:20:
06:43:12:8e:fa:2c:a9:13:fc:c9:b5:9d:94:2e:ed:43:c7:23:
6f:20:0a:8a:6a:04:6a:bc:01:70:67:b9:c0:ba:4b:ad:cd:a0:
7a:cb:42:b5:41:b5:eb:e2:fb:ae:f9:a6:4b:82:5a:c3:06:7d:
90:3c:b5:72:cb:22:2a:af:35:02:2c:2b:b9:5b:fa:76:79:fa:
07:17:d2:f2:59:27:ea:d8:8d:d9:b3:c5:cb:d9:5f:6b:d0:8d:
b8:60:f8:34:d0:44:60:08:24:36:17:f9:1a:b5:51:d6:37:5d:
d4:29:e2:64:ce:64:9f:d3:f8:78:ce:ef:9d:4e:24:db:2a:bb:
93:81:4d:7a:98:45:8c:db:d7:0d:e8:46:df:83:6e:50:7c:53:
06:90:09:d7:4a:bd:8d:d3:bb:22:47:41:c3:42:0b:c0:74:fa:
bd:9b:ed:e1:f5:d6:b4:4d:f2:8d:f9:b7:11:67:72:a8:a7:10:
4e:5f:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:29 2025 by rpki-client