Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: 8J2XXD8x0BsfkqvDG8PrisYBAkp3qVmxjHiSDJL/YEs=
Subject key identifier: 95:23:85:D0:81:CB:39:0D:9B:9D:1F:56:F1:C4:12:F3:5F:97:95:A3
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 0198D54DCFDF9E92C57DFC47C92E3D08EC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: rUSILdsMLE99xw0NHYIwUIFosYusKTdUiB7sfNgxn5k=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cf:df:9e:92:c5:7d:fc:47:c9:2e:3d:08:ec:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=952385d081cb390d9b9d1f56f1c412f35f9795a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:52:09:a9:d9:8c:d7:13:a4:3a:78:ed:f6:
0c:2c:0e:c0:96:c2:0f:bd:d4:91:d0:dc:3c:1d:d8:
2a:2e:da:3a:38:40:bb:dd:2f:99:fa:b0:38:da:a5:
93:d5:78:1e:ec:a9:81:36:f1:73:82:34:35:74:a7:
d0:f1:9e:da:96:b5:1f:6d:e9:51:dd:53:50:4f:77:
c6:6b:af:f5:b9:93:18:3b:ae:bb:c5:9e:b3:1b:49:
7d:e6:43:25:7c:46:d1:c6:b0:9c:f8:ac:e5:60:a6:
e6:e0:d0:f3:60:6b:81:e7:a3:af:4c:cc:9e:c8:ab:
1e:08:b3:6f:3f:6d:26:ba:d9:ee:2c:05:42:af:7c:
bc:81:6e:90:90:26:44:d2:c3:42:aa:76:68:e3:5d:
9b:a7:53:13:4f:a0:0b:c6:64:0f:b0:47:42:e0:a2:
f7:8a:60:ee:f6:00:c0:84:19:80:21:d7:f9:f7:63:
3a:fb:2f:1d:65:00:2b:ce:4a:39:b5:0e:05:f1:89:
dc:6e:b5:14:65:a1:b2:50:29:73:97:dc:c3:d9:3c:
9b:bc:30:de:d5:5c:66:82:bd:22:ff:f2:41:59:da:
b5:89:bf:06:12:01:f1:11:12:8b:3e:f2:8c:1d:73:
98:5d:8b:12:08:64:43:fc:dc:a5:7c:85:d8:b6:74:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:85:D0:81:CB:39:0D:9B:9D:1F:56:F1:C4:12:F3:5F:97:95:A3
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f1:3a:ed:0b:6a:4a:b3:29:2f:fe:fd:ab:fc:f9:d5:bc:0b:
2d:99:01:fb:0d:65:f6:8f:5a:c1:2b:17:b2:29:b2:f3:1d:9f:
0d:67:9e:58:7f:b5:30:09:b5:01:6b:64:99:9e:6a:bc:eb:68:
4a:95:53:8e:11:f5:62:7c:2c:c4:b8:1b:2c:20:33:06:69:b9:
87:9c:7b:a7:0c:c4:bc:67:45:fa:5a:df:5d:ba:f8:f0:36:52:
27:fd:d1:ce:d8:80:57:fe:0a:c0:4e:e1:05:f3:11:ec:01:db:
d4:82:c1:48:39:e8:df:38:a3:46:2a:83:8f:81:92:9d:04:78:
91:8f:72:2a:de:55:3e:1c:d6:c3:5c:e1:72:bd:5d:9b:57:6b:
86:66:84:ad:df:fe:80:ef:ef:3a:0c:05:d2:69:72:0b:ea:3d:
4f:7c:c9:d8:e5:ee:94:59:f8:38:ac:bf:90:fa:d1:af:86:1e:
a7:c4:6f:ac:dc:f3:fb:ad:be:ff:f4:5b:25:3d:79:1b:57:af:
ad:7e:24:62:b6:e2:e9:c3:2a:d5:3a:fb:23:9c:f3:11:e2:7e:
7e:97:a1:e2:ae:31:cb:98:51:7e:45:89:34:8d:c8:19:14:fa:
41:70:24:cc:96:32:82:d3:15:02:96:9b:04:16:12:bb:bc:19:
46:51:c9:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTc/fnpLFffxHyS49COxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjUwODIzMDUwMTQyWhcNMjUwODI0MDUwMTQyWjAzMTEwLwYDVQQD
Eyg5NTIzODVkMDgxY2IzOTBkOWI5ZDFmNTZmMWM0MTJmMzVmOTc5NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupZSCanZjNcTpDp47fYMLA7AlsIP
vdSR0Nw8HdgqLto6OEC73S+Z+rA42qWT1Xge7KmBNvFzgjQ1dKfQ8Z7alrUfbelR
3VNQT3fGa6/1uZMYO667xZ6zG0l95kMlfEbRxrCc+KzlYKbm4NDzYGuB56OvTMye
yKseCLNvP20mutnuLAVCr3y8gW6QkCZE0sNCqnZo412bp1MTT6ALxmQPsEdC4KL3
imDu9gDAhBmAIdf592M6+y8dZQArzko5tQ4F8YncbrUUZaGyUClzl9zD2TybvDDe
1Vxmgr0i//JBWdq1ib8GEgHxERKLPvKMHXOYXYsSCGRD/NylfIXYtnRVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUjhdCByzkNm50fVvHEEvNfl5WjMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPE67Qtq
SrMpL/79q/z51bwLLZkB+w1l9o9awSsXsimy8x2fDWeeWH+1MAm1AWtkmZ5qvOto
SpVTjhH1YnwsxLgbLCAzBmm5h5x7pwzEvGdF+lrfXbr48DZSJ/3RztiAV/4KwE7h
BfMR7AHb1ILBSDno3zijRiqDj4GSnQR4kY9yKt5VPhzWw1zhcr1dm1drhmaErd/+
gO/vOgwF0mlyC+o9T3zJ2OXulFn4OKy/kPrRr4Yep8RvrNzz+62+//RbJT15G1ev
rX4kYrbi6cMq1Tr7I5zzEeJ+fpeh4q4xy5hRfkWJNI3IGRT6QXAkzJYygtMVApab
BBYSu7wZRlHJYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:26 2025 by rpki-client