Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: E9DgSY8RMjsk1gaLLZ0SWckdZfcsItZSnWZ/0ga9l7w=
Subject key identifier: BB:3B:AF:FF:5E:3A:06:8F:D7:6C:D7:21:7D:C6:EC:F0:62:32:FD:80
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 0198D65F10775B911C09BA8286BB161C90E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: cYaGQ8Y0/bBef0q9I+rpvGlnlvimNgGhFf4IWrnrtqo=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:10:77:5b:91:1c:09:ba:82:86:bb:16:1c:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=bb3bafff5e3a068fd76cd7217dc6ecf06232fd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:5d:59:f1:75:30:01:46:33:c9:8a:13:a6:
70:71:b4:c7:50:b5:f1:90:ea:1e:f8:71:7c:08:13:
b7:80:27:5f:16:52:f7:a4:6c:ca:77:3b:be:d9:22:
19:00:b8:2f:fc:a8:08:c3:b3:49:a2:f1:09:e0:11:
6c:bd:91:c5:62:5b:70:ca:8b:a3:43:21:32:2b:53:
1b:17:1d:30:77:94:26:13:6d:3a:c4:9c:53:89:93:
c0:b2:2a:7c:22:11:4a:4c:9c:75:fd:f7:ec:0f:ea:
10:1a:75:1c:ab:00:63:a7:50:25:d1:7b:f5:21:6e:
69:9d:9d:a9:8f:1b:21:37:e0:50:a8:c8:bd:17:6a:
f2:b3:f0:38:20:75:27:3d:37:a2:dd:b7:3d:a3:4a:
04:b3:19:73:49:49:57:08:d7:27:94:e1:5a:0a:fb:
86:cd:0c:f4:88:ab:82:e4:80:67:13:83:1f:48:bc:
aa:af:e7:62:63:bf:9b:83:d8:07:8e:0f:4c:e2:59:
84:b8:bc:80:05:ce:44:4b:5a:38:c3:83:e9:3f:7d:
32:e9:69:c3:4d:dd:39:89:69:f6:ab:1c:8d:58:ac:
ff:db:31:b6:2a:a6:bd:2a:01:1f:d9:bd:05:42:e3:
2a:69:09:1f:79:94:ba:98:a7:5b:6c:c3:f6:66:76:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:AF:FF:5E:3A:06:8F:D7:6C:D7:21:7D:C6:EC:F0:62:32:FD:80
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:e7:05:16:7a:4e:d7:93:ab:4a:7c:3c:7c:ef:bd:a9:fe:
89:48:f8:85:0b:86:cb:cd:04:7e:39:96:35:fe:ab:e7:a6:04:
90:ad:2b:4e:2e:42:86:8f:b0:cd:fb:c9:9b:97:56:da:c8:de:
07:f7:83:28:3c:36:84:a9:61:a0:d1:12:b4:b1:6a:16:d6:ec:
3d:34:02:4d:03:8b:65:aa:29:98:a9:e3:73:ee:12:4f:55:2d:
e9:ef:96:c1:8c:b0:5f:2c:ef:7c:f8:2b:26:df:ec:8f:6f:5e:
f8:85:ac:3d:cf:40:fc:8b:57:d9:97:16:6a:ed:26:fd:d8:d2:
16:8e:80:e7:08:71:03:18:ca:2c:03:ef:e1:fb:40:be:9d:fa:
19:02:ef:e0:dc:9b:25:f2:53:5f:d8:9d:82:95:64:11:92:74:
56:57:8d:4b:fc:b1:e9:81:f3:50:56:19:85:c0:5a:7e:2b:0e:
0a:42:d7:96:ac:73:80:78:f0:a8:51:5c:e1:0c:ae:df:15:01:
98:38:f1:53:90:20:29:74:a2:73:e6:e0:e0:84:85:d8:58:74:
a4:0a:c6:82:57:ea:3e:e1:b9:cd:d1:98:ef:a5:44:fa:5d:af:
7e:d6:0d:4c:35:fe:ab:a3:74:a5:e0:a0:5c:70:d4:47:ea:d8:
0a:23:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:21 2025 by rpki-client