Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: R0czUJ8FMer9XgHme7CVS9qDEAbskUKWDpfFvTNT1Jo=
Subject key identifier: 3A:96:95:DF:2C:C9:5A:68:8B:87:43:E5:5E:0E:D1:9F:5D:73:28:EE
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 0198D660B92EF932AA5B2754D179EB064EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 139A
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: 4mA8fHgkexkNiv+c7e3Lm2yRAeG8fEeFfORkeOLepuI=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b9:2e:f9:32:aa:5b:27:54:d1:79:eb:06:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=3a9695df2cc95a688b8743e55e0ed19f5d7328ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:5f:45:36:f3:63:81:93:13:b6:91:fe:a9:
d1:24:fe:be:1d:ab:08:89:f1:f1:e1:d2:fd:18:68:
b2:ac:35:61:e2:96:86:e3:58:c9:6b:db:95:8f:0f:
4c:9f:fa:c4:4e:ed:f2:97:ab:a0:ea:d6:0b:0e:63:
ea:43:07:43:bd:6c:b3:d2:2d:1d:e0:3c:e6:dc:8c:
64:cc:5c:8e:8c:58:a7:cf:08:7b:3d:df:0f:df:b5:
1e:22:52:74:85:0f:d6:ed:99:b8:ac:bd:05:71:cc:
4a:ab:c1:1c:ef:e9:0f:49:1f:85:2a:fc:c7:6b:41:
6f:a1:c1:fd:d7:07:51:7e:1f:11:c7:f2:06:76:b7:
0e:ba:b7:91:ef:3b:42:7c:cf:f5:c2:e7:a8:6c:e5:
6c:18:0f:10:4f:49:b0:59:64:68:15:4c:07:00:e9:
91:14:c2:2e:2e:67:3a:19:aa:ee:1a:65:e9:e4:b9:
95:a2:7b:47:d9:3e:ae:a9:a7:52:4c:55:31:af:83:
34:6c:96:ae:95:56:50:17:d1:79:6e:a8:25:2b:d4:
2b:5e:ba:31:70:f6:4f:aa:a7:95:44:57:4c:2f:b4:
96:3d:a4:de:9f:86:ba:d4:15:6a:96:8d:96:c6:b9:
32:fa:56:e4:8e:15:8a:86:79:a4:95:ef:4b:c9:1b:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:95:DF:2C:C9:5A:68:8B:87:43:E5:5E:0E:D1:9F:5D:73:28:EE
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2e:64:d4:72:07:bc:a7:97:2d:ae:bd:02:f7:90:5a:49:ee:
66:00:60:aa:71:99:d6:75:83:62:c3:78:12:41:fb:23:d5:33:
97:a4:bf:1e:39:82:3c:70:08:f7:2f:6c:72:0a:6c:40:07:f9:
c5:66:5e:f9:38:99:49:b4:7a:ca:7c:c0:ca:a5:72:1d:1f:08:
2d:53:38:1c:b9:ad:e5:44:40:a0:68:5b:ad:88:9c:db:07:f9:
3b:45:80:35:82:ef:b2:95:c3:69:2a:da:e5:dc:4e:4f:a6:09:
17:08:94:b4:87:0e:a4:b6:04:93:9b:df:ad:03:dc:d9:08:56:
7a:ae:37:4a:00:27:dd:ea:32:72:5a:27:89:12:37:77:e7:0c:
0a:dd:49:75:4e:e6:80:37:7a:6b:5d:b8:7e:07:0c:3f:2a:64:
28:82:b0:10:c9:42:2d:55:e9:bd:0b:a1:38:76:a6:6a:f0:96:
66:d4:04:9e:89:a8:a6:6c:0b:8a:af:7d:4f:e7:ca:02:c6:6e:
df:79:f8:b0:81:d8:cc:ca:f7:b2:c0:f5:33:0c:53:f5:f7:f1:
e7:0a:fb:17:79:a7:5d:39:04:37:48:4f:ac:2f:58:d0:12:69:
c3:91:fd:ab:0a:63:98:c1:41:e1:64:f3:e6:d6:d6:03:d1:0c:
3e:2c:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:06 2025 by rpki-client