Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: qOfd2oXMMJ7aPrW5gTOHsiuZWm35vgXF1HJYg/KLGbg=
Subject key identifier: A3:72:EE:B0:97:16:E5:B7:B6:54:CF:2D:DB:A7:6A:77:D5:9E:65:C1
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0198D62988A9290AD5697C7F9B30B4A33889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: Sd9KABI9BM5Wi5AzQPJlcrl7nPs.roa (hash: lKvMF4u6rkezbu3Z5i73n84s97j8vHpTtirCLh73hlM=)
2: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: Fktvnvh8HgeXDcw5KQY/VSuqq0PNTRI9fVonYdFZjpI=)
3: kSpbiRk0tTr4djqnevnKIRm6iXs.roa (hash: xVdA6H09ACZm0ElsIIOCMigLDnOmLnWWYejsNkcvUwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:88:a9:29:0a:d5:69:7c:7f:9b:30:b4:a3:38:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=a372eeb09716e5b7b654cf2ddba76a77d59e65c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:bf:78:07:c4:af:1c:ee:87:d7:69:47:06:
58:e1:c4:b8:5c:18:58:9c:24:0a:c5:23:0e:ef:ff:
db:53:12:6e:e1:09:62:6f:f3:fd:db:ea:0a:c7:d7:
b6:08:a1:c6:3f:3d:22:7c:1a:d1:b9:b9:de:8f:fe:
f6:9b:ed:df:a3:43:4f:87:22:71:2b:d1:45:e1:46:
29:eb:73:61:0f:b8:7b:9a:74:72:ea:d7:71:c8:4d:
37:30:2e:5b:cd:cc:92:da:31:2b:44:9a:97:e5:07:
0b:6a:a8:53:66:a0:a4:a1:59:6d:39:94:13:56:52:
c1:05:31:eb:d6:cd:f6:88:2a:6a:5d:ce:be:98:8a:
ff:4f:0d:c9:2e:61:09:c0:27:5b:83:03:a4:b5:a8:
9e:5b:7f:91:5e:33:c4:e3:07:a8:a0:b6:05:aa:fc:
69:54:30:58:55:05:34:d6:3d:6b:1e:c8:18:b2:fa:
0e:23:09:f6:88:c5:a1:3f:ca:30:4a:4f:b5:14:e0:
a9:80:b3:57:51:e6:e4:4b:24:dc:49:1b:4c:a1:fd:
84:34:70:78:f9:fd:d6:52:70:d1:c9:10:52:02:e7:
d7:0e:cd:4c:e3:0b:07:ae:ef:6f:15:fe:04:46:6f:
2d:34:c2:bb:a7:75:cf:8f:cf:ea:b3:aa:e1:b7:bd:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:EE:B0:97:16:E5:B7:B6:54:CF:2D:DB:A7:6A:77:D5:9E:65:C1
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:ab:35:d8:be:2e:0d:36:53:bd:74:2d:c3:d3:70:d1:95:
28:6d:0c:df:d7:04:3d:93:0c:65:9f:a2:54:b3:dd:4f:ab:46:
c2:38:6f:39:dc:0e:a9:71:e0:a5:cd:55:48:33:99:9e:6b:c9:
07:64:a7:09:cd:dc:af:c7:22:0e:1b:cb:c3:3f:2f:66:85:c1:
96:6d:3f:39:90:b7:01:0b:92:6c:6f:f2:70:91:cc:b2:80:c9:
87:d5:e9:3d:7e:19:ba:60:9b:85:89:af:fd:62:45:13:d9:bb:
c7:79:e3:9a:18:b2:04:bb:40:c1:55:23:48:6d:3c:75:9f:e5:
f6:40:2e:be:04:38:89:0b:c3:b3:65:36:62:77:a8:2a:1e:78:
a1:c1:87:8d:7b:10:cb:3d:1e:16:99:76:fb:84:17:66:22:d5:
54:ee:b4:d4:11:7d:2b:b2:09:2d:f5:60:88:23:f9:68:40:08:
0a:d3:6f:80:e3:05:d4:04:90:c0:81:74:f8:35:ba:0e:35:c8:
67:69:39:bd:66:8d:c7:da:8f:df:0d:a3:1b:fd:79:c1:5f:0e:
0b:92:fa:9b:11:73:c3:1f:37:91:25:30:05:2f:45:68:69:04:
8d:50:3d:e9:81:81:36:9a:82:f5:82:cf:fb:98:6a:d8:ed:16:
21:9d:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:29 2025 by rpki-client