Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: xYrblaG10zo2c9agw1LlAaj8nIbZOVruYuimxXTcwC8=
Subject key identifier: E8:17:85:40:42:2E:31:F3:93:8B:15:30:C8:08:C7:9A:08:1A:D6:D7
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 01984BF818983552BFF568215D821972BE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 1452
Signing time: Sun 27 Jul 2025 13:00:06 +0000
Manifest this update: Sun 27 Jul 2025 13:00:06 +0000
Manifest next update: Mon 28 Jul 2025 13:00:06 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: c11cktTexQF7/zgQTGq9r7B++WU9lL5nRFuZb9GljTY=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 13:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:18:98:35:52:bf:f5:68:21:5d:82:19:72:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jul 27 13:00:06 2025 GMT
Not After : Jul 28 13:00:06 2025 GMT
Subject: CN=e8178540422e31f3938b1530c808c79a081ad6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:67:e1:5f:d6:76:34:fe:1d:d1:a4:3d:2a:
8d:c2:7e:0a:cb:dd:e7:01:64:7a:60:27:e6:89:bb:
28:8d:d4:00:0d:5a:b3:8f:9c:bf:8f:1f:65:6d:98:
dd:cb:5c:ee:ca:3e:99:6d:1d:8a:fc:28:a7:63:56:
22:cf:43:b3:f4:92:2f:29:bd:cc:38:b8:21:23:84:
e0:68:ac:bc:2a:1e:43:3f:84:78:77:86:22:4e:61:
29:05:60:c0:e9:6d:99:0c:f4:a4:1a:a9:06:11:05:
e1:6e:81:e7:4d:f9:9c:85:ae:14:b3:26:ed:91:0b:
74:96:bc:85:f1:bc:7d:1b:ce:7b:20:ee:0e:00:64:
44:47:b0:ad:42:61:4e:a0:76:14:2a:2a:fb:fc:0f:
b5:35:bd:7e:ed:c1:e4:6a:0a:14:b6:33:bc:06:18:
39:09:5d:c5:de:8d:15:28:5f:99:81:33:f2:39:48:
56:7d:e1:f6:cd:79:ce:87:95:f0:93:0c:75:7b:3f:
88:2d:78:1b:b4:50:2e:18:21:ff:d7:16:65:b4:3d:
ea:0f:49:a5:35:16:48:39:4a:ad:11:5d:92:a2:29:
53:ab:39:a2:41:4d:d2:23:5f:8b:69:62:74:db:d5:
5f:92:47:3b:c0:71:60:78:e3:23:0d:3a:8b:2f:9b:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:85:40:42:2E:31:F3:93:8B:15:30:C8:08:C7:9A:08:1A:D6:D7
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:57:49:6c:bb:a0:2f:69:db:0b:86:2d:a7:97:0b:47:ad:61:
12:23:d6:0a:9d:78:3d:03:78:69:46:7e:1c:b9:92:50:dc:90:
5c:f8:18:63:2d:a2:50:09:f5:89:12:da:09:a4:21:d0:2a:87:
31:ea:63:4a:fb:3d:64:6a:fe:a5:31:28:ba:39:c6:f1:63:1a:
3a:b9:da:80:71:b6:de:1f:49:49:29:b1:0d:01:5c:ed:f8:18:
f1:0e:cc:03:bf:77:63:2a:e5:69:ba:f4:73:1c:b6:14:89:fe:
5d:7a:93:4c:28:ff:4d:3e:0c:57:99:a5:93:a0:ce:9a:17:eb:
fc:a0:2c:80:dc:9c:ad:a0:40:9a:0a:02:94:70:a5:7d:be:14:
b8:45:d3:f0:93:f9:80:f5:e3:bf:fc:95:85:dc:2a:8d:0a:2e:
e1:4f:80:97:28:8e:fa:ee:9d:d3:ad:85:2f:69:b8:e0:6f:27:
6d:b8:a8:f7:8f:7f:e6:97:0d:19:c1:24:57:25:60:8a:8c:6a:
77:79:c8:9b:c3:c1:b6:69:a8:f4:e7:cb:29:a9:a6:d3:5b:44:
da:b8:6a:94:7d:9a:f0:cb:5e:c3:a7:bf:e5:bb:50:df:a3:c1:
1c:20:96:af:23:eb:1c:c7:6f:54:17:af:94:cd:df:87:d3:9b:
54:2a:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:53:57 2025 by rpki-client