Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File: eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier: VgoVtKXYP0A2+aENDz+jxPcJCObdjbf8N3P26Ec/sn0=
Subject key identifier: 35:3E:D6:4E:C8:9C:28:BB:90:7B:F9:5A:A5:B8:5C:71:92:1B:B4:BE
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer: /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial: 0198D5158921467AE45011BC8E350D027245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number: 15A7
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 87kSYonFcZwIXqn-oUHMTUjS7ZQ.roa (hash: r4G2JQElUAKaln7jVsL6rlmZ7oG6sWqE3/UqSsTnjMU=)
2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: /yRusYZMTlKo73PG3Yz/IizdY2O2XjXxA+cZaj9k0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:89:21:46:7a:e4:50:11:bc:8e:35:0d:02:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=353ed64ec89c28bb907bf95aa5b85c71921bb4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:86:6e:43:52:f0:43:83:1d:5c:bf:c1:0e:
8f:a7:f1:7b:2a:b5:c8:62:86:24:c5:97:82:40:28:
8c:df:98:ee:8d:e9:3b:fe:68:23:3d:77:1f:c4:ef:
da:0f:b6:89:60:25:c1:04:a4:00:fb:1e:58:91:a4:
b3:f6:fa:2d:e7:28:e2:b9:42:54:47:99:3c:6c:ff:
2d:14:2b:88:0c:60:28:06:94:89:8b:e6:99:9a:24:
92:0a:b8:7b:ac:f1:e9:9a:8a:4e:25:94:9b:61:32:
83:7d:39:9a:c1:b3:a4:45:b3:00:15:1e:92:5c:ae:
10:44:74:52:9c:48:32:db:44:94:3b:3a:ed:db:17:
a8:04:a6:4a:dd:01:83:a7:01:9d:ad:6d:92:2c:fc:
ae:fa:72:22:2d:ca:11:06:95:15:d2:a5:b0:d0:fd:
25:38:a7:95:c6:a0:dc:be:df:40:74:76:85:e1:de:
be:8f:26:b8:c8:26:3f:9e:3c:18:18:05:8e:24:e3:
d3:40:35:79:cb:06:4e:9d:93:0d:f0:19:44:ac:27:
2a:56:f0:c6:59:55:c1:08:bb:ec:71:cf:90:9d:94:
b6:de:18:16:a0:e4:c1:07:2a:a2:b2:5c:ae:f9:2c:
b9:2c:c9:24:0e:e8:ec:fa:f7:d0:69:f4:ca:6d:e0:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:D6:4E:C8:9C:28:BB:90:7B:F9:5A:A5:B8:5C:71:92:1B:B4:BE
X509v3 Authority Key Identifier:
keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:f1:ff:43:32:27:0f:80:83:20:fc:20:a2:3d:94:63:f4:
2c:4f:98:6c:38:04:b9:66:2a:9c:8d:03:7b:03:3b:b4:9e:8c:
6a:d7:ea:46:31:c7:d1:e6:03:18:bc:a1:28:e1:0a:46:71:92:
2d:c2:4a:1e:4b:45:48:35:9b:44:33:10:ed:67:fb:02:a8:a2:
9f:83:a8:c4:f1:d2:62:9f:6f:45:80:54:04:73:4e:8a:bb:2b:
5c:c8:a1:25:f8:ac:2e:a4:56:86:d2:36:93:8b:cc:c9:ea:15:
dc:9a:27:c5:5f:b4:3c:a8:de:9e:4e:5e:9b:58:40:f8:77:3e:
5d:56:a6:48:ad:68:ac:50:9a:28:eb:87:27:38:50:13:d2:48:
e3:67:93:0c:07:67:3d:2f:84:17:8e:fd:a6:29:83:b9:23:a7:
fc:95:24:4c:39:c0:f9:c6:9d:66:6f:bc:7a:82:84:7f:27:4e:
e5:88:b1:e5:12:01:3c:dc:73:1e:62:32:03:3f:52:57:e6:08:
2a:f1:b4:1e:91:90:48:e4:46:d5:5a:6f:9f:7d:87:ac:55:ca:
b6:62:7a:19:99:b9:8a:40:21:51:7d:85:17:9b:81:f0:c0:4b:
89:b6:9d:ab:8f:60:bc:70:ab:b1:e9:58:7a:e7:11:1f:98:9f:
a1:17:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:45 2025 by rpki-client