Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier: yvzQJtH0GJuhX6N3M+hSpZZx5PSgH7U6CXK7+tr+i/c=
Subject key identifier: 35:78:1E:F8:4C:7F:6D:E3:97:BF:B5:40:EA:18:01:09:1F:B7:30:E1
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 0198D70620DD8A64D8BF0FA3AE3A7B2DA10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number: 0838
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: VBNx6+l5PEdPne1hyk6KRYZJU0/IrksoyHw0SY6bjAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:20:dd:8a:64:d8:bf:0f:a3:ae:3a:7b:2d:a1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=35781ef84c7f6de397bfb540ea1801091fb730e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:09:52:6e:63:f0:b0:33:97:ae:21:54:b7:
55:c2:79:89:2f:39:3c:a2:e4:74:24:5a:5e:d1:88:
de:45:2f:8a:0b:82:d2:e9:28:9c:c3:41:fe:54:7f:
3b:ce:7d:a1:a4:a9:17:61:82:08:10:88:3c:25:26:
ab:4a:df:c8:18:a0:2e:e6:bb:ca:e9:4a:8e:67:23:
cd:d1:ed:39:e9:a2:80:dc:f4:f9:01:d6:d5:c5:bc:
74:a8:ae:e2:d1:82:46:c8:52:7b:7d:1a:f4:4d:c1:
99:30:9e:f0:bd:0c:05:eb:f5:c9:9a:ed:ce:be:1d:
7e:3b:16:f9:2d:30:05:95:d0:54:96:96:24:10:b1:
27:2d:4b:e3:67:a0:94:37:38:91:4d:ab:4b:b0:27:
a5:e7:97:c2:e5:a8:f2:30:f0:e5:d1:b6:16:eb:da:
53:df:46:64:a0:42:02:be:9b:a5:b4:91:a2:4a:32:
8f:48:87:4e:fb:15:79:22:0b:8f:e0:8b:36:f4:66:
cf:c2:dd:5b:cb:05:db:c5:1a:7b:85:b1:c7:79:d5:
f5:f9:96:45:76:32:28:c5:c0:f9:e2:00:2f:96:9f:
8e:9d:e3:9a:9a:be:23:8b:7c:51:f3:70:d1:19:45:
76:df:62:67:16:7d:65:13:94:3a:61:03:36:52:5f:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:1E:F8:4C:7F:6D:E3:97:BF:B5:40:EA:18:01:09:1F:B7:30:E1
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:00:19:91:2d:5b:77:d2:97:08:bf:69:6d:2b:ec:69:d9:
3a:9c:af:cc:14:5c:34:27:07:8c:23:63:91:30:d9:08:73:33:
30:96:ef:e7:8a:16:ca:63:73:c2:9c:e6:16:20:28:b9:50:23:
e0:48:e0:73:30:50:ae:4b:e9:44:78:bd:65:29:2c:f7:5d:02:
f3:82:50:47:10:cd:bf:22:c7:22:fb:6f:ea:7c:e1:38:8a:91:
0e:51:4f:9c:b5:43:66:2d:c7:e3:57:ab:e7:1e:bd:3e:0e:1a:
39:ad:8d:e5:fd:09:fc:78:1c:01:d2:a4:4a:8f:92:df:90:a6:
b9:9e:19:35:28:1e:82:99:b4:e1:91:b4:7e:f9:55:bc:8a:81:
17:89:ff:99:c6:75:bb:33:01:df:2e:fb:8e:88:18:cf:7c:ba:
e2:87:28:ff:c2:c6:62:c2:b8:ca:61:61:bd:07:87:0a:c1:04:
ad:09:3a:e7:a2:ec:61:64:98:92:4a:f2:fe:b2:78:2f:47:a3:
7d:a7:99:72:77:9c:17:07:cc:95:8a:b7:5e:6b:de:c6:2d:71:
83:38:f8:9e:7f:3b:56:48:33:fb:6a:b7:f2:04:58:09:76:4f:
8f:b1:3e:2e:48:f0:8f:27:0d:00:03:ba:6a:38:3d:50:71:ee:
d4:6f:b1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBiDdimTYvw+jrjp7LaEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1
ZmM4YzMwHhcNMjUwODIzMTMwMjM5WhcNMjUwODI0MTMwMjM5WjAzMTEwLwYDVQQD
EygzNTc4MWVmODRjN2Y2ZGUzOTdiZmI1NDBlYTE4MDEwOTFmYjczMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UAJUm5j8LAzl64hVLdVwnmJLzk8
ouR0JFpe0YjeRS+KC4LS6Sicw0H+VH87zn2hpKkXYYIIEIg8JSarSt/IGKAu5rvK
6UqOZyPN0e056aKA3PT5AdbVxbx0qK7i0YJGyFJ7fRr0TcGZMJ7wvQwF6/XJmu3O
vh1+Oxb5LTAFldBUlpYkELEnLUvjZ6CUNziRTatLsCel55fC5ajyMPDl0bYW69pT
30ZkoEICvpultJGiSjKPSIdO+xV5IguP4Is29GbPwt1bywXbxRp7hbHHedX1+ZZF
djIoxcD54gAvlp+OneOamr4ji3xR83DRGUV232JnFn1lE5Q6YQM2Ul85KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV4HvhMf23jl7+1QOoYAQkftzDhMB8GA1UdIwQY
MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt
Yzg2YzJmYzZjNjFiLzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi
LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKkAGZEt
W3fSlwi/aW0r7GnZOpyvzBRcNCcHjCNjkTDZCHMzMJbv54oWymNzwpzmFiAouVAj
4EjgczBQrkvpRHi9ZSks910C84JQRxDNvyLHIvtv6nzhOIqRDlFPnLVDZi3H41er
5x69Pg4aOa2N5f0J/HgcAdKkSo+S35CmuZ4ZNSgegpm04ZG0fvlVvIqBF4n/mcZ1
uzMB3y77jogYz3y64oco/8LGYsK4ymFhvQeHCsEErQk656LsYWSYkkry/rJ4L0ej
faeZcnecFwfMlYq3Xmvexi1xgzj4nn87Vkgz+2q38gRYCXZPj7E+LkjwjycNAAO6
ajg9UHHu1G+xsw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:13 2025 by rpki-client