Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: MlGixTZgx/dEohDxrLa0Uuws6eEXoxJ8bwYroqkt6BM=
Subject key identifier: 34:5E:68:10:22:BB:12:42:D0:9B:32:9E:6C:99:F0:9C:F1:91:3D:EC
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0198D660A15B4D9D349AC4583F3064E6D20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0D63
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: HRYW2GMNza5P9EybdFYAiR8wkEeA5NkvyB92MXb+pP8=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a1:5b:4d:9d:34:9a:c4:58:3f:30:64:e6:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=345e681022bb1242d09b329e6c99f09cf1913dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:f7:73:e4:db:c3:04:21:9a:2e:65:39:16:
ec:61:9d:5c:2e:bf:9a:32:dc:87:d7:3c:c3:ed:a4:
75:77:40:f1:07:7c:6d:54:15:7d:d1:6d:d0:67:64:
85:78:2e:2e:21:a9:43:3b:4d:89:73:f4:ee:8d:cf:
a8:d1:a8:68:df:1c:9b:ef:63:07:7c:0e:52:27:4e:
aa:8b:6e:b5:16:d3:bf:2b:4f:f4:67:9b:2d:82:53:
e3:32:67:e0:ff:80:ca:98:32:b2:a1:8c:96:53:a5:
78:b3:a9:d6:51:2e:6a:b5:3d:81:17:5a:9f:ab:cf:
8a:ed:39:22:ca:1f:e6:23:19:86:d1:a3:e0:96:f3:
f6:3f:20:49:0c:81:47:18:ac:11:0d:5a:74:a9:73:
5b:8f:5b:36:db:92:d1:f6:05:ef:93:c1:2b:e4:9b:
65:02:43:bd:8e:90:19:d8:d0:b9:52:ce:36:80:0e:
b0:9c:3c:a2:4f:e0:1f:a3:0a:20:ee:a0:41:5d:7c:
9c:bc:cb:c5:f0:cb:53:6e:76:ac:15:c9:10:60:83:
86:66:ca:d2:59:0f:2e:5e:53:15:72:35:b2:c4:d1:
63:71:5f:03:c6:b4:e3:7b:aa:5b:a2:c7:75:1d:6a:
c8:a8:8e:18:39:40:d2:3a:aa:ff:f1:64:e6:e0:b1:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5E:68:10:22:BB:12:42:D0:9B:32:9E:6C:99:F0:9C:F1:91:3D:EC
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cf:5e:66:61:8c:31:86:41:84:da:fb:ea:43:d4:2e:74:e9:
c8:30:35:78:28:b2:58:62:b1:76:50:2c:29:c3:51:3f:80:c3:
f8:a7:18:91:2f:1d:ec:d5:d4:ea:85:61:8b:1a:bf:13:21:92:
7b:e3:c8:0e:cf:86:a9:36:1e:21:8e:a7:d2:74:aa:6a:23:87:
4b:53:a3:91:86:2d:56:d7:b5:fa:68:88:b8:6b:20:8f:21:ab:
a1:bb:6d:ed:c8:b7:f0:81:d1:c9:f5:e1:f0:72:88:c9:8d:86:
77:42:5e:df:77:d3:43:35:cb:6c:57:05:69:c8:db:3b:14:cf:
51:28:ce:60:b8:6d:ff:7e:8b:b0:0f:84:f7:87:e8:4c:10:eb:
70:e9:d9:7c:49:de:03:78:73:fc:26:86:0b:11:8b:f7:34:49:
f9:eb:87:92:1d:40:e7:5c:88:31:65:a1:4e:7f:75:9b:fb:e9:
57:fa:5b:b9:88:4e:c6:c3:c5:ef:d8:e5:f7:e8:44:f6:82:fb:
41:51:58:f0:02:ce:2d:0c:9e:80:73:ff:c3:d2:2f:67:76:61:
43:3c:09:a0:00:c8:89:0b:1e:bb:ee:f1:5d:e8:aa:a3:51:77:
18:22:f0:b7:72:73:4b:87:23:32:29:fb:7c:6a:12:cc:2f:e2:
48:f0:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:37 2025 by rpki-client