Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: 2f2hEvMOce1EttNsSYG/rSmwabYKYgTF/nMBAJHJco4=
Subject key identifier: 6A:ED:B1:CD:FE:F0:E5:4F:2A:A5:E6:35:5E:25:3E:B4:2F:80:2F:2A
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 0198D73B5F34FDA96815A6E265E8F5873A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 0296
Signing time: Sat 23 Aug 2025 14:00:49 +0000
Manifest this update: Sat 23 Aug 2025 14:00:49 +0000
Manifest next update: Sun 24 Aug 2025 14:00:49 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: p09njjPqAS4wUkAyjlnGE/T0DizjVCzg2X96IOHb0Ws=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5f:34:fd:a9:68:15:a6:e2:65:e8:f5:87:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Aug 23 14:00:49 2025 GMT
Not After : Aug 24 14:00:49 2025 GMT
Subject: CN=6aedb1cdfef0e54f2aa5e6355e253eb42f802f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:15:6e:ee:1e:00:21:aa:e1:c2:e0:3d:2a:
03:f6:b7:07:4b:44:54:6e:03:30:d5:8b:48:46:5b:
d9:ac:70:7c:13:e4:d6:7e:c8:ee:c7:c4:47:35:9f:
0c:0c:43:c1:de:85:24:c9:6b:33:48:4a:29:1b:c0:
ad:7a:87:86:42:77:fc:e8:f6:87:56:0f:d7:7f:c1:
b7:f4:80:b9:29:a1:75:26:53:cb:6a:65:a7:21:bc:
74:f7:1b:d8:7b:24:07:71:32:af:f6:a8:a2:2a:03:
e0:0d:77:97:d6:d3:8e:38:95:6f:2b:81:f2:a6:41:
dd:87:eb:1c:ab:e7:c4:22:81:6a:13:d8:a4:f5:80:
0d:9e:73:a7:c8:a1:22:d7:23:8e:2c:fb:d1:8e:2a:
0c:0f:d6:b8:99:10:58:d5:38:c8:dc:e5:e0:5f:d3:
ef:58:08:66:6c:f3:90:b3:f1:ba:a1:ff:aa:47:d2:
67:8a:54:f9:e1:68:d1:a0:ac:5b:7b:cb:5b:15:f2:
e3:33:6f:d7:2c:b9:b0:0e:75:d1:42:b5:09:59:93:
9e:b9:89:64:43:a1:69:f6:e2:1d:2c:3a:ad:08:34:
45:8b:eb:41:f5:26:cb:56:a6:34:f9:fe:f7:2d:8f:
14:5e:cc:90:4c:18:43:43:69:a2:04:3a:e4:fc:d9:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:B1:CD:FE:F0:E5:4F:2A:A5:E6:35:5E:25:3E:B4:2F:80:2F:2A
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:00:13:9d:26:6e:fa:52:95:f4:ab:e0:84:ea:7c:c0:88:fa:
17:ca:2e:04:a9:3c:fb:7b:c8:29:d8:7f:f8:ce:37:f0:25:f6:
46:29:03:a5:9a:41:c2:2a:a1:c8:9f:d0:7a:3b:7c:f9:3f:64:
1a:e0:08:36:ea:9f:9a:ff:1d:c4:62:0e:a4:1d:81:75:45:2e:
f2:09:be:ef:be:64:d3:de:19:54:5e:f1:cd:e9:b8:bf:bf:11:
e2:86:84:60:fd:10:22:81:26:d5:7a:95:33:7e:42:22:19:66:
39:e0:0d:4d:8a:da:d2:54:65:0a:39:24:d1:d8:b3:bf:d8:b9:
ef:29:4d:55:52:e5:2e:ef:31:dd:2d:53:d1:64:81:4c:64:7a:
5f:1a:a0:de:1e:03:aa:66:33:b4:ca:72:53:6b:1d:5e:9c:09:
5a:0f:88:f3:10:fa:30:73:ff:db:fe:e7:1a:08:8d:89:79:f0:
73:d1:f3:35:28:22:94:cb:1e:1b:c2:18:e8:a6:69:1c:88:4c:
b1:f0:b4:3a:8c:e3:87:f5:7e:8a:15:13:42:5b:8d:94:b4:3b:
71:b9:79:de:a1:65:88:98:a0:b7:c3:e2:80:58:69:e3:ec:da:
08:8e:c8:82:c2:b1:06:a2:b2:0a:cd:56:7a:ce:74:3b:8a:8f:
ea:d4:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:18 2025 by rpki-client