Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: wRAWy8GgBuNwPwWr5IjT7dLg7Yu12t5wnHEMnFGi83E=
Subject key identifier: 11:66:6F:36:46:5C:55:7E:79:8D:9E:95:7A:8F:1E:9F:9D:9A:AB:3A
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 0198D4736ABE2FB5F135723482DA763C3902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 158F
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: 9I8dngV1JT7KKjRI32gIyKSSyUk.roa (hash: mTvlNqWvha6TIOSslNPhqnseo6bfcEXwllcJxrieLVA=)
2: WIbpjNFgyL8FweUsKsihkm_PI28.roa (hash: VoeMP15IKS+YATCW5k8jloGWeOvqG6TTy+tPBwoxnfM=)
3: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: wGOMxM9iazPCpvoOZf9Nm86BpjeIN5SYtUHWh5oui54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6a:be:2f:b5:f1:35:72:34:82:da:76:3c:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=11666f36465c557e798d9e957a8f1e9f9d9aab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:45:72:8e:1e:03:65:82:6b:5f:e0:c8:ee:
55:90:0c:fc:35:11:68:68:89:9c:21:71:5c:4a:16:
d5:d7:c2:78:6f:e5:0d:c9:b2:3b:58:5d:17:74:7c:
8e:17:23:c6:d3:4d:fa:34:90:51:16:75:74:9a:23:
b5:23:64:8f:61:d7:96:4a:0c:e2:76:71:49:49:8a:
d6:48:24:5e:e4:29:b5:2c:b9:62:7c:33:dd:80:95:
cf:f0:d1:69:df:1a:ef:94:32:b8:bf:4b:e9:f8:64:
74:f2:81:12:0e:86:fd:69:8d:e6:78:bd:ea:2b:dc:
b7:eb:e2:92:56:3e:5e:77:64:72:03:75:ec:60:fa:
ea:a4:ae:56:65:9c:c5:16:2f:59:0a:4c:aa:8c:36:
09:aa:6b:8e:c8:e0:84:83:4d:d6:a6:ae:4f:80:5f:
5b:ee:70:a0:a9:f3:ff:2d:f5:95:11:23:eb:92:f3:
c8:d1:04:f8:7a:88:e6:09:78:ad:bd:40:f9:5d:c9:
85:a0:5f:6c:39:18:6f:0f:06:df:8d:37:83:ec:9f:
94:0b:b7:ae:e4:aa:13:83:a2:50:ec:8e:ae:92:4f:
fb:2e:84:d6:84:09:ab:5c:94:0f:37:f5:ce:50:47:
24:1c:ad:19:7b:99:6c:08:6c:13:b8:d6:a7:16:f4:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:6F:36:46:5C:55:7E:79:8D:9E:95:7A:8F:1E:9F:9D:9A:AB:3A
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:dc:92:d8:85:48:73:e1:25:14:ef:0c:d9:6b:dd:ef:fa:
64:3b:c3:2e:81:11:a0:d3:6b:1d:92:21:0e:d6:df:cf:68:c4:
09:a6:07:60:06:5a:f0:0a:f3:6f:79:e1:a6:4e:87:6a:97:9a:
72:5e:04:c0:b2:ff:70:5d:a8:1e:a1:29:cf:54:62:6f:65:8e:
d5:70:11:13:e3:fa:69:67:81:56:7a:f8:f8:f4:a3:4b:84:51:
47:3a:99:85:32:55:0c:e1:8f:3b:9a:e0:80:9d:13:1a:3e:c0:
be:73:0f:0e:b6:e1:71:2e:b8:6a:43:62:b5:d6:75:72:95:6e:
cb:c7:3d:c9:62:f8:ed:fb:57:0e:e5:29:1c:ad:1f:52:2b:6c:
d2:33:c0:21:d5:7c:c7:c0:c4:4d:ff:cb:68:78:b1:5d:c5:32:
e9:b2:c4:da:f0:98:44:88:b0:25:21:83:29:c6:26:ff:97:1e:
f4:6d:54:4c:66:a7:f8:08:8c:a0:a3:ba:45:d4:3b:84:bf:eb:
8f:96:2a:fb:b7:f8:93:47:8c:ef:27:6f:23:bc:e2:a1:c1:93:
f1:43:ac:81:40:0c:5c:59:6f:d1:ca:a6:70:fa:53:ec:0b:31:
ff:07:6d:84:55:28:70:cc:fd:03:c7:4c:4a:1d:2d:4c:a6:1d:
cf:38:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:45 2025 by rpki-client