Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier: fAk3wAuNAV1UdR05m7Qzq+dRqi8VwANCA6+f/6nGpYc=
Subject key identifier: 9B:CD:66:DA:61:19:3D:F2:BA:1A:39:B9:6F:6A:CA:59:94:FD:A6:9C
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial: 01984A41897DF6F09FB0D8D49CFAC58B9D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number: 0784
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: 1qBzBypsB8jFJRHiVOEUb+rGoB6n4f2iwGiKky3HuSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:89:7d:f6:f0:9f:b0:d8:d4:9c:fa:c5:8b:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=9bcd66da61193df2ba1a39b96f6aca5994fda69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:02:b0:1b:05:f2:43:c2:ab:af:3d:4a:86:
a3:74:72:a2:8b:e8:27:10:8a:da:a8:a4:0d:c3:45:
b7:61:d2:aa:a2:02:5d:96:2d:22:1b:44:80:7e:8b:
ce:8c:ab:27:e0:18:36:01:05:dd:f0:c5:b1:1b:b2:
19:17:b0:a5:62:88:70:ae:1d:52:0b:af:dd:36:ca:
b0:b6:66:e2:4b:1a:3f:9e:fa:8d:45:95:ca:81:a8:
c2:e9:8e:f9:d2:7b:4d:26:d0:c9:23:1d:59:8a:3f:
c8:d8:b8:a5:de:5b:0a:90:9c:22:bb:bf:d1:68:d6:
5e:83:b9:b9:ca:b8:a0:af:3f:99:df:67:ee:32:9a:
1b:9b:52:51:b9:fe:56:b9:2e:23:89:65:db:77:60:
6b:65:15:5d:de:f4:6f:d6:92:57:38:3d:6e:22:72:
aa:a5:9e:c9:9e:9c:96:64:7f:87:2f:2a:0e:69:19:
ce:67:24:98:af:07:53:50:07:6a:83:18:f2:e1:71:
20:d4:4e:27:21:b7:b4:a9:80:c2:cc:57:97:75:73:
8c:2a:16:f0:63:ab:7c:ef:d2:73:4d:2b:58:9a:e8:
73:7f:79:58:7c:b0:a4:00:69:34:fb:63:7f:9d:07:
aa:78:a4:a2:9c:a9:d5:ac:2f:2a:86:e3:69:c7:35:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:66:DA:61:19:3D:F2:BA:1A:39:B9:6F:6A:CA:59:94:FD:A6:9C
X509v3 Authority Key Identifier:
keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:e7:aa:5b:84:7a:24:29:e7:9c:ed:3d:a5:5d:20:bb:0a:
f5:91:7a:af:75:fc:ed:01:ff:2e:41:88:ca:09:b7:bc:aa:1c:
8d:09:d3:94:07:68:9b:ae:38:b6:3b:ef:81:bd:5f:38:cb:50:
06:d0:91:3e:1e:f1:6d:2c:28:08:c2:f2:9f:6d:e0:cf:38:5d:
9d:32:36:4b:6a:83:63:b9:fb:e1:78:34:ae:9c:a6:24:90:82:
71:32:e1:91:ef:b8:9a:8c:2e:ee:d8:66:d2:a4:b5:d8:ce:cf:
21:14:f0:c9:13:65:b0:c5:36:1f:f7:7b:5a:e6:40:5e:de:af:
3a:f2:56:8a:a9:01:98:41:d8:43:2d:41:53:a5:21:3b:46:ba:
b6:99:80:bf:8d:e2:f3:08:c7:19:29:86:f5:d3:29:a6:9b:df:
2c:4d:42:43:f1:a0:59:8f:33:f2:fb:07:a6:56:1a:67:46:cb:
0f:08:87:5b:e7:14:dc:5a:48:3f:a4:3e:64:35:3d:98:cb:b1:
d2:6f:05:b8:dd:99:fb:ea:1d:ef:e3:42:33:40:d5:b5:4d:6b:
14:9e:04:25:1d:af:40:85:d3:58:2d:5d:01:a0:b1:0c:3b:80:
9f:30:cd:25:93:1a:30:12:6d:d5:16:c3:c4:e2:34:7f:ae:e5:
be:c4:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:42:26 2025 by rpki-client