Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: NpZdc2YUGGIE77TMwpgJ9xdJC8r8JAnGTSUpeasVrxw=
Subject key identifier: 3C:AA:8A:08:7B:9A:30:3A:43:3D:E1:BD:F8:43:95:36:DF:3F:E7:84
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 0198D5F164FC2A1B5A4E1DC3EBAEB69B73B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: 6FiwrYau5Js5K+liHkkatJLkVe/2F5C6rwcdjuc3zpE=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:64:fc:2a:1b:5a:4e:1d:c3:eb:ae:b6:9b:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=3caa8a087b9a303a433de1bdf8439536df3fe784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:01:d6:c7:6a:c8:25:a2:30:9e:ab:49:8b:
70:c1:1f:d2:2f:05:bb:8c:91:f0:4b:73:8d:42:fc:
ad:95:d9:aa:60:e0:a9:43:2a:de:75:61:3e:e3:5e:
4a:c4:88:52:94:ae:70:e0:f6:4b:5b:9d:e8:0b:62:
f2:c9:ad:6d:80:3a:93:d9:63:44:4b:0f:76:74:a0:
43:51:37:05:4a:02:39:0b:b1:f6:de:b9:b0:56:65:
17:cb:a5:63:23:b9:ac:c1:6f:a7:cb:3e:22:4e:4e:
4c:7c:50:88:d9:bd:9c:ae:30:a0:6a:1b:3f:06:dd:
c5:ab:bd:4d:cb:5a:ba:64:4d:90:33:73:b8:1e:c0:
d1:9c:0b:ed:1f:68:91:87:9c:e4:0c:05:e5:bd:fd:
3c:d5:72:a0:55:c3:8c:32:00:e3:3f:6c:4f:5f:e2:
a2:da:d9:b7:af:a0:57:cf:3b:51:d4:c2:b4:39:79:
2a:73:1d:37:c9:c6:ea:8b:2e:01:c7:26:71:40:2f:
e0:5b:80:a9:63:93:04:5f:fb:5a:1d:56:ab:b7:51:
28:65:2c:f6:32:86:29:d3:33:b4:f5:60:8e:63:ef:
8d:7c:22:c5:fb:4e:5f:00:76:56:fd:c2:12:21:6f:
0d:0b:29:6d:6b:c0:9c:20:78:68:1d:e3:2f:5d:b7:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:8A:08:7B:9A:30:3A:43:3D:E1:BD:F8:43:95:36:DF:3F:E7:84
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:16:94:bb:ba:e1:fa:62:ba:7a:a6:1a:ca:a1:be:02:22:11:
cb:20:b5:c1:dc:df:91:92:33:2d:a8:ec:06:93:07:9d:8d:95:
3a:ad:69:02:67:de:16:ed:1e:ca:b8:03:f6:0e:0c:2d:f4:bd:
aa:e8:29:17:6f:98:b0:6b:8c:a0:0e:20:a6:07:ca:d8:d7:8f:
7d:24:58:98:e5:18:dc:0d:5c:2b:e7:57:21:05:63:34:ab:89:
20:c6:7f:0c:a7:dc:23:fc:66:90:4c:7c:7f:54:cf:a4:42:54:
99:f3:29:6c:49:f5:7f:16:21:90:64:87:1c:27:31:e5:62:b6:
17:65:6a:73:cb:b2:3f:56:60:6a:bc:ee:ee:cf:0c:ba:a0:a8:
57:92:f1:04:bc:74:54:c4:69:fd:ff:03:86:31:dd:6a:6d:9c:
cb:d4:01:e5:c3:8f:ad:79:8c:a0:58:bd:07:8c:90:15:0f:3f:
43:51:02:1e:04:24:42:07:b4:3f:ba:04:dd:ac:91:71:92:ad:
ee:d9:2a:fe:67:10:b2:d1:50:93:f3:33:9d:47:a6:f3:e7:63:
82:36:e2:34:f9:81:c8:7a:a3:d4:d0:7e:12:46:cd:43:fb:71:
27:34:ed:5a:10:84:01:c2:88:a5:b9:99:de:c1:0c:cd:68:fd:
47:4d:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:54 2025 by rpki-client