Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: GvOQWmjiBaJX5JPXxOIDIrjWW4moIwtOdApJO/cZwXk=
Subject key identifier: 95:E7:9D:67:71:7B:D7:75:8B:8A:02:D1:65:6F:F2:D8:33:FC:E2:F4
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 0198D92B1FE8B60D46F29B4AC5E550D375F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 0229
Signing time: Sat 23 Aug 2025 23:02:18 +0000
Manifest this update: Sat 23 Aug 2025 23:02:18 +0000
Manifest next update: Sun 24 Aug 2025 23:02:18 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: uyoPp7HuZwXd16j1k0eO9w6fICNTmWrDFpCXLypvEeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:1f:e8:b6:0d:46:f2:9b:4a:c5:e5:50:d3:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Aug 23 23:02:18 2025 GMT
Not After : Aug 24 23:02:18 2025 GMT
Subject: CN=95e79d67717bd7758b8a02d1656ff2d833fce2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:1e:13:f4:26:0f:ad:b8:d9:4d:85:c4:f1:
60:ab:8d:84:c0:3a:90:bf:3f:19:27:31:72:40:26:
7a:a5:8d:71:33:a6:b9:e4:74:c4:fe:2a:38:9e:15:
d3:81:8c:a6:24:56:f3:f4:54:23:cd:69:d2:62:ae:
e4:af:f2:44:e1:60:85:b3:79:da:80:47:41:ee:a9:
8c:e0:6b:88:45:95:e9:48:0d:7c:0c:56:3f:5f:08:
d9:37:1a:df:89:1c:2e:00:1f:f3:0d:50:80:a3:8c:
b0:dc:65:5a:16:39:f8:11:0e:09:71:cf:d1:34:f4:
1e:ed:74:68:70:7f:4e:d3:b8:9c:01:36:78:a0:4b:
32:b3:4a:e0:86:e5:34:dc:fe:53:c2:7a:07:70:23:
29:2d:55:61:4c:b0:6d:8f:18:df:d4:2c:e8:d1:20:
fe:5a:68:3b:e1:1d:a5:d9:0d:12:bc:d0:29:d3:ec:
86:3b:c4:ef:0b:eb:b8:33:4c:ef:88:db:5f:e3:77:
b3:18:a6:d5:15:94:55:0d:6a:af:ed:42:d9:0c:26:
6d:6e:ed:5a:fc:09:ef:af:c7:a9:16:a1:d6:66:1d:
0c:17:91:b0:7d:08:ec:95:f5:cf:09:d6:35:ca:c6:
e4:d7:32:92:38:af:c7:fa:04:f9:f9:ab:82:0e:31:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:9D:67:71:7B:D7:75:8B:8A:02:D1:65:6F:F2:D8:33:FC:E2:F4
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c1:b8:c4:6a:2e:47:a9:c4:e7:25:c4:9f:9f:23:b7:0d:01:
4f:a1:f3:ec:34:5d:45:ca:e6:a9:de:8e:79:d4:74:d7:b6:49:
3a:51:0e:18:26:af:a9:dc:d0:34:fa:34:6d:b5:3d:ff:03:45:
46:f5:10:78:13:d2:46:2a:4d:c5:3f:21:e8:50:9c:a8:24:00:
4c:12:46:ad:27:9e:28:13:bb:0b:20:f1:ac:a8:62:97:04:36:
8e:b0:81:02:89:2e:83:42:e8:77:ef:4a:e4:cd:b6:5e:5f:67:
c9:eb:0c:e9:59:ca:a4:14:49:10:6f:47:4f:51:06:36:ab:fd:
70:17:d2:f0:9c:38:f4:fa:7e:bc:b3:82:aa:0d:92:0e:0e:b2:
ab:c7:e6:97:14:93:83:bd:fe:49:ad:c7:9e:81:18:63:78:38:
a4:f9:42:cf:f2:b6:9a:8b:9b:5d:55:51:c6:be:45:c9:61:51:
c4:44:09:39:bf:8b:2f:a4:e4:41:95:ed:21:c3:93:61:be:98:
d8:9e:4a:7e:64:78:0b:c3:a0:08:6f:83:68:b9:83:63:28:82:
9c:f1:44:b0:fd:89:67:a3:20:07:44:2f:cc:be:de:a7:1a:df:
21:06:9a:53:52:3e:b8:e1:6b:9a:09:33:7c:01:a7:1f:66:27:
91:fc:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:49 2025 by rpki-client