Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File: 1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier: NqbGTb9sLDQSr74l8RhXp7+9GVHp3T9vnde763yo9FA=
Subject key identifier: ED:9F:D3:7C:30:0C:BD:DE:73:07:15:9A:8F:B8:F4:F5:95:D7:17:15
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial: 0198D73B58ADB054A34F4D04B4099B05E6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: vVk48/pcnqM7yQuQjJS0zFzmLXSX7D1Vh1WcQjVbtS4=)
2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:58:ad:b0:54:a3:4f:4d:04:b4:09:9b:05:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=ed9fd37c300cbdde7307159a8fb8f4f595d71715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:bf:2a:8e:27:b2:16:f1:e5:65:07:f6:aa:
31:35:bf:46:b6:ef:73:2f:ea:f7:76:60:19:4c:62:
3a:f2:54:71:93:c3:57:a9:f0:89:9a:cd:2d:a3:16:
aa:ea:28:09:e8:f9:b4:55:ea:63:7c:f9:a0:35:c1:
0c:5e:a5:c2:5c:9d:8b:b3:8f:4c:3b:dd:85:dd:95:
f5:25:85:58:80:3d:83:01:fe:1d:7f:50:47:a7:d5:
5b:90:86:0a:34:bf:8a:fe:df:39:a6:6a:1b:b4:53:
a5:5a:d3:db:f4:0b:50:eb:e5:db:46:76:f2:9b:01:
3f:65:37:04:a5:7b:be:b3:f9:54:ee:31:f5:eb:25:
fe:92:2b:f8:db:3f:55:f7:18:a6:d7:3c:43:7c:0b:
88:d6:aa:ff:0f:42:66:6a:ab:96:31:87:ad:86:10:
83:f6:ec:5c:d1:6c:85:46:91:c3:f2:79:a6:c5:25:
2c:b3:83:d1:f0:51:6d:24:c6:e8:c4:02:c9:b6:30:
6d:20:98:a8:b8:6a:82:8b:91:3e:11:47:51:76:35:
5c:d9:a2:80:40:88:0d:ca:5d:6a:63:80:96:d6:34:
6b:a6:e1:a0:da:7a:b2:0e:bc:da:29:ca:39:b6:e7:
12:40:1f:48:1a:c8:b2:57:76:b7:55:36:28:39:53:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:D3:7C:30:0C:BD:DE:73:07:15:9A:8F:B8:F4:F5:95:D7:17:15
X509v3 Authority Key Identifier:
keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ee:73:d4:9c:df:77:4f:90:c5:b7:7d:ee:8f:fc:80:61:d8:
0e:8a:16:48:74:5f:82:3e:ad:19:e2:6e:07:16:3b:e3:2a:62:
f5:d5:28:b9:43:7d:a4:ab:59:ea:1e:37:50:cb:bb:bf:5d:05:
a8:47:a9:31:77:72:90:f7:4a:2c:95:f4:54:85:a8:8c:c7:b4:
bb:b5:8b:fa:fe:f3:db:c2:c6:0d:8c:84:16:f7:5f:9e:83:22:
50:7c:35:a8:30:c6:49:9a:bc:d4:0a:38:67:ae:3d:ac:e6:61:
eb:ae:06:6c:a1:04:04:e2:a5:89:2d:a3:ac:b2:b9:7a:8e:7f:
c3:5f:48:45:be:4d:b8:4e:42:4b:6b:33:00:18:9b:e1:3b:1a:
cd:56:b1:dd:08:25:1a:56:89:d3:19:09:dc:09:86:f8:79:0b:
2b:ac:65:37:37:50:5c:b3:50:d4:97:ff:62:ce:bb:90:ad:96:
b2:af:65:bf:ab:36:86:4a:49:1c:be:24:dc:2b:0c:87:13:a8:
68:dc:89:b6:b3:58:ea:01:1c:42:df:84:c4:45:fa:81:4b:12:
2d:21:40:05:82:10:f2:96:37:62:6c:86:07:79:66:68:aa:c3:
22:b6:b2:ad:47:21:10:d5:04:f6:f6:b2:a7:eb:26:78:79:32:
4b:75:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:23 2025 by rpki-client