Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: yn4Uy2520bJLy3qdCKtLyrnKOJ3glq4lRa8nDP7BUCA=
Subject key identifier: A7:24:1A:56:EB:33:F7:03:96:59:78:E6:46:E9:B5:75:6E:3C:0A:70
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0198D66142B8ACB84D504AC35DD3192E8B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: JLsYsxfEV8qLlnhAvuysRnkUUYbxcA9O5O2z4iPuEy4=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: iDJMZTn0ZQsbFebdZO8EqvngV-M.roa (hash: DFTmsPgWe97cJSGWeErnYcp9qELmEJE971RJTfF9FUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:42:b8:ac:b8:4d:50:4a:c3:5d:d3:19:2e:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=a7241a56eb33f703965978e646e9b5756e3c0a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:fe:2a:84:33:45:fb:82:92:e7:09:59:b9:
86:81:aa:d1:96:15:dd:f8:e6:44:75:08:45:2b:2e:
56:9c:cc:13:50:6f:b4:15:29:c5:fd:64:8f:54:0e:
62:e9:c5:b8:9d:df:d1:16:f8:c9:08:65:a2:1a:e8:
fd:20:c0:8a:36:4e:63:2d:cd:58:ce:86:7b:87:c6:
2a:49:ae:bb:7f:61:db:8c:e5:98:77:ed:50:97:1d:
4a:a6:2c:77:19:50:09:0e:89:6f:7b:c3:e4:ee:f9:
01:87:ee:3c:51:1f:1c:fd:f0:ca:07:d0:65:e0:85:
ac:8e:d8:c4:c7:58:8b:0b:ef:f2:c0:95:2d:29:dd:
56:f5:56:2f:57:42:db:cc:04:b0:08:6b:8e:f2:0f:
d5:68:45:17:85:83:6f:b9:cb:48:84:ad:b2:53:d2:
f3:bf:6d:59:e3:a7:37:43:70:a4:49:4f:0a:bf:17:
51:e6:b6:11:cb:43:e8:4e:29:87:76:f8:ef:1e:8b:
8f:e1:fd:e1:77:0c:37:29:63:dc:95:98:43:db:f4:
3b:4a:e1:9b:18:ec:97:41:05:f4:dd:44:5a:af:55:
21:f5:ab:0f:40:bd:c1:94:b2:a8:86:e2:ff:cb:c7:
13:89:7b:93:9b:ec:9f:7a:12:24:79:64:fc:94:8c:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:24:1A:56:EB:33:F7:03:96:59:78:E6:46:E9:B5:75:6E:3C:0A:70
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6d:d2:4f:bb:7c:79:33:86:ea:fe:85:3a:f3:86:e0:85:59:
54:63:e0:4f:49:e6:85:09:98:57:d8:13:56:2f:27:7d:fd:f0:
0a:8c:e5:0e:71:84:67:06:b0:82:2c:37:b6:96:68:fd:8f:f9:
62:94:16:29:2b:89:c6:f7:99:ef:90:3c:61:a5:5f:d0:f7:5e:
b6:f0:b2:43:d8:f6:03:c0:60:13:50:30:6f:8c:a4:1f:10:c7:
3a:8d:ea:de:f4:df:25:12:5c:4c:b3:26:0b:dc:b6:fa:1d:a3:
b7:47:db:83:8e:5a:49:40:48:b2:90:db:cf:71:a6:a4:5e:0f:
ed:70:a9:a8:4d:37:e8:09:26:e6:ae:08:f1:fd:6f:20:ff:d4:
c4:05:fd:7e:05:27:56:16:5d:aa:f9:df:7f:a1:3c:ed:73:cf:
97:eb:39:c0:92:ba:f2:8f:8e:63:6b:dd:3f:eb:da:8c:7f:8f:
f3:1e:a1:4c:61:18:8f:92:87:ff:04:1a:f8:78:12:9e:55:2d:
bb:2b:35:31:9f:41:db:d5:b9:a2:42:5c:ac:ac:cf:00:0d:83:
0b:a5:e3:3c:14:45:c5:d8:d6:64:8c:37:f2:0c:67:ec:82:bd:
81:1e:04:73:d5:e9:0e:4b:f0:5b:96:b7:4b:fb:ac:9d:0b:58:
a1:67:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:04 2025 by rpki-client