Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: GnpyM+sDmUMr0ioBQhW6+OkAlTefNa3cVVzPc1SApvs=
Subject key identifier: 67:D4:B0:30:95:AA:81:3A:2A:C7:9C:BD:7F:12:B7:A7:F6:4E:A2:6F
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 0198D65FBAC0D84742940F0A110ABD16ED86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0458
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: /5yz+bFFj54YMI1nAicSt3PMjjYXVeIldMtpRhztfOo=)
2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ba:c0:d8:47:42:94:0f:0a:11:0a:bd:16:ed:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=67d4b03095aa813a2ac79cbd7f12b7a7f64ea26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:0d:d0:3a:fe:d3:4b:42:e5:2a:56:af:50:
45:f1:14:3f:d9:e6:4c:fa:2d:36:e4:19:19:ef:fa:
c6:4a:f4:94:7c:93:1d:dc:25:80:c3:7a:f0:3b:6a:
68:9c:9a:be:55:b2:b7:a8:51:3d:4e:80:b8:e2:92:
8d:31:17:98:02:c3:2f:e0:ff:c8:15:28:7e:6a:d2:
1b:ee:b2:3d:85:3d:df:29:a6:2e:d1:d7:c7:10:2c:
25:98:ac:03:74:7c:44:86:c8:f9:3c:09:18:a5:0a:
76:ea:1e:69:67:d6:6d:91:2e:f8:a9:f5:d3:1f:f3:
ff:b6:01:72:60:13:cd:3c:e1:82:98:7d:0c:86:87:
9a:f1:38:0e:8e:86:22:61:45:74:7a:ee:ff:70:53:
0d:1f:fc:fb:50:fd:08:2c:cd:31:18:e4:5c:ff:d4:
8e:a2:67:41:d6:80:88:93:40:70:a6:9b:38:a8:1c:
ad:54:85:18:10:9e:a1:55:86:f9:4a:ba:fd:69:fe:
c5:19:16:7f:c3:fc:41:32:e2:f2:31:4a:04:d6:c0:
a0:b0:7b:ff:aa:eb:cc:77:b6:08:aa:a4:f4:79:67:
06:06:bf:de:e3:9c:91:ba:70:1b:b7:a3:b1:8f:b2:
5e:17:f0:64:78:5f:49:be:83:f2:5b:ec:ac:be:73:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:B0:30:95:AA:81:3A:2A:C7:9C:BD:7F:12:B7:A7:F6:4E:A2:6F
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c0:dd:0b:bc:f0:3a:3f:47:64:ea:fc:3e:af:f6:f4:dc:d6:
f6:a7:64:e9:73:59:15:b8:32:61:2b:4d:70:9d:5b:fb:d0:e1:
b1:bd:a9:50:3d:03:88:e5:b2:5d:f6:2c:ec:a5:7f:1e:d9:6e:
09:03:01:fa:9b:fa:ec:51:5e:91:51:c5:11:b3:80:e9:27:9b:
75:bb:ad:5b:8a:fc:da:41:a8:6b:ad:16:d2:55:16:96:df:51:
fa:e3:77:a9:a0:68:c6:f2:85:cd:83:0a:18:c6:ba:bd:89:2d:
19:50:51:d8:d1:83:56:7f:0f:39:17:16:05:6d:0a:98:71:21:
85:3c:2f:a7:21:e0:6f:ab:eb:c8:77:c1:c3:e2:bf:12:4a:5a:
30:6e:5c:14:3f:30:d0:0d:3a:2b:63:97:d5:b3:54:bd:4b:2d:
59:0a:c0:f4:96:49:c3:65:ba:16:f8:16:d2:9f:89:a7:2f:56:
82:1e:1d:31:b4:ef:76:3b:5c:af:4f:64:77:f1:08:c4:8e:bb:
90:da:4b:3f:0a:3c:1d:99:35:70:42:1d:e0:18:50:f7:99:fc:
fa:db:7a:67:1d:ec:f4:a6:20:84:c3:a9:0c:af:75:7a:8a:ed:
b4:9e:82:8b:6e:05:35:02:fe:0e:b3:d5:09:ed:93:a2:81:95:
47:3a:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:33 2025 by rpki-client