Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: GhEGA4Ge+bqL44Tem0+kxPDZEwo61lBDNO0XjZEyZ8c=
Subject key identifier: B2:EA:38:9A:A1:33:C1:EB:02:A0:87:B7:4E:26:02:0F:66:DE:4D:E0
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 0198D4E095A9202F627A45617BB64B42E19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 03A3
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: 5LvlysBEgCZ1hR4PwKqAB4InE4qIfEE+K+dFP5MvENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:95:a9:20:2f:62:7a:45:61:7b:b6:4b:42:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=b2ea389aa133c1eb02a087b74e26020f66de4de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:b2:ea:e5:60:50:dd:74:2c:7f:34:ea:2b:
13:d3:3e:a5:9f:76:62:22:8a:0a:74:c2:5e:c3:fe:
cf:8e:3a:71:90:94:1f:5d:b4:c4:e7:6d:77:11:56:
13:87:86:2a:df:f9:e1:8f:a8:8b:ed:e1:52:90:7c:
e7:a1:c7:61:d8:77:c6:eb:e0:12:47:4a:61:31:88:
c9:62:a4:a5:d8:94:4c:b8:5e:73:7f:8b:0a:c8:a6:
4f:bb:82:ed:fe:cc:b5:bd:f0:fe:d8:01:a2:52:9e:
ea:36:ac:a4:cd:c4:09:02:d0:4a:a9:e1:0e:29:be:
d1:46:19:1e:95:b4:22:19:d0:cf:ae:40:2c:f8:15:
96:6d:20:8b:8b:ef:8c:ff:5c:4d:19:fe:ab:44:07:
64:c6:e3:b7:b1:3a:d4:ec:60:09:d2:b0:3f:2a:73:
f1:fc:ff:55:7d:98:f9:d4:9a:bd:ec:74:20:e7:a8:
58:aa:97:48:a8:a0:b0:09:8e:68:19:40:c8:46:b9:
ee:b4:4b:17:26:f4:03:10:d9:4b:b1:e0:de:7d:e1:
3d:a5:3f:83:94:d4:1a:1e:8e:1d:50:73:75:a9:32:
f7:60:77:1b:e0:55:a2:26:18:f6:f5:bb:0d:ae:c5:
c4:0a:86:ef:39:04:a2:1a:2b:de:85:75:e0:59:96:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:38:9A:A1:33:C1:EB:02:A0:87:B7:4E:26:02:0F:66:DE:4D:E0
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:50:eb:da:29:9c:d9:6d:05:53:cd:3b:a4:9b:3f:6e:9f:
c0:86:43:f0:fa:e5:30:6e:cd:cc:fc:db:01:bf:43:53:ff:b9:
f9:2f:8f:ec:6e:ce:bb:f8:4b:d5:38:a2:22:33:d3:7a:d1:44:
a3:66:3a:15:89:85:2d:78:22:1b:d2:1f:1a:04:74:6e:64:c1:
12:99:80:e7:34:61:55:ed:d2:7b:17:28:07:76:a3:77:91:34:
59:37:f9:a2:1a:d1:83:d5:57:1f:7a:16:c6:4c:8a:ff:d9:a7:
8a:a9:42:3c:17:23:84:7d:e5:44:f4:2b:6b:98:01:9f:0d:71:
39:44:4d:5a:f8:12:88:1a:6c:66:f4:2e:06:e5:d6:60:8a:a4:
2a:1f:52:96:bb:17:05:e6:1f:e0:3f:ec:40:95:92:84:f7:4e:
e2:ee:62:7e:16:07:d1:f7:58:39:58:02:1c:09:3f:19:10:58:
e8:66:be:56:d3:5b:f8:33:5a:1d:ad:24:62:fa:bf:35:18:1c:
91:ab:54:d0:40:f6:73:51:fe:72:20:44:9c:5f:fa:6d:5f:ee:
a6:f1:58:8e:06:1c:68:ac:df:63:c5:c1:c4:20:5e:76:23:ee:
0d:bd:61:71:93:88:5d:d1:3c:e3:42:04:0f:eb:ee:48:72:9f:
34:4f:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:14 2025 by rpki-client