Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: 58N9uDG8p1DV6GirRSLitA3Ancr/jZtPaKIU9d6VU18=
Subject key identifier: 73:95:85:BC:3D:6D:99:9D:66:E2:D8:C3:08:47:C5:3A:14:2F:76:21
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 01982AB6596F7C592AC39B8709488794E73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 149F
Signing time: Mon 21 Jul 2025 02:00:50 +0000
Manifest this update: Mon 21 Jul 2025 02:00:50 +0000
Manifest next update: Tue 22 Jul 2025 02:00:50 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: o1y2ZtXzLLS9YKS/IW1kc2xF12+JVvTFOBpdbFDchkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:b6:59:6f:7c:59:2a:c3:9b:87:09:48:87:94:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jul 21 02:00:50 2025 GMT
Not After : Jul 22 02:00:50 2025 GMT
Subject: CN=739585bc3d6d999d66e2d8c30847c53a142f7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:7e:e2:42:48:a7:6e:a0:01:b5:f0:f2:b5:
c2:db:4b:29:54:a9:f6:55:5f:ec:53:b4:da:eb:3a:
c9:64:3e:9b:a6:0a:7e:3f:44:94:d9:f1:f0:a7:16:
ba:90:42:cd:da:e0:e5:71:d4:40:f1:2d:6f:d3:c7:
12:54:a1:4d:28:63:4f:f7:c1:42:c3:42:57:63:51:
39:63:67:11:94:f2:2c:32:00:e3:aa:23:f9:f8:83:
d1:bd:92:2c:a3:61:3f:30:79:d3:7c:0b:86:a8:c4:
a0:88:95:d4:af:78:3e:ec:2b:f9:a1:8a:d7:da:e4:
d0:bc:76:c5:49:65:23:a8:07:bb:c5:bd:a5:6b:ed:
41:b3:94:e2:5e:88:3f:e4:61:1b:3d:89:d9:70:51:
f8:85:05:f2:81:80:ff:87:88:b3:6d:05:03:93:40:
d5:b3:9a:54:9b:31:92:a6:d1:2d:7f:f1:d9:24:58:
77:56:96:8a:05:64:4e:33:ea:f0:48:c1:34:f0:8d:
7a:39:51:24:66:77:db:7f:f1:31:07:0b:51:69:0d:
11:fa:83:ee:c2:9a:68:7c:f6:70:66:41:20:71:1f:
01:8f:8c:c2:43:b1:08:3f:f8:24:a5:d8:1a:ea:d9:
bd:77:52:6d:de:3d:c8:9c:f8:a9:1e:cb:3e:ee:06:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:85:BC:3D:6D:99:9D:66:E2:D8:C3:08:47:C5:3A:14:2F:76:21
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0b:b0:98:6f:e3:72:63:32:08:be:c0:a3:0a:1d:e0:65:ea:
7c:d5:16:e2:ed:78:04:cb:e9:61:6b:c2:f0:37:39:5d:eb:2f:
7e:14:3b:78:b8:0e:32:39:04:46:43:bd:58:0f:af:93:73:9d:
90:ee:b1:17:f0:03:30:4e:16:b5:d4:45:53:7b:f1:88:c5:ee:
f9:54:25:3d:7a:fb:66:5b:cb:6d:52:a7:e0:84:09:d0:b4:7e:
8f:35:9d:c0:54:28:0e:8c:15:b6:0c:41:e8:50:48:b6:3d:f2:
8e:a6:08:2f:0c:1d:55:2a:e9:92:8e:2a:83:bd:f0:b8:f2:24:
73:8e:e0:e9:49:99:85:79:01:95:b1:fe:73:58:cf:e2:b7:3d:
a4:6c:84:21:58:c9:dd:78:75:62:25:81:ba:1a:ac:c8:7d:11:
d0:7d:34:e5:a4:f4:d2:94:00:41:63:a4:f9:86:98:bf:58:d9:
fb:66:ad:0d:79:e8:5a:46:04:e2:92:a4:72:61:c0:33:0a:71:
53:c4:68:c0:8c:96:ba:e5:70:46:f8:e0:83:af:09:8e:f8:89:
35:45:2e:43:1d:9f:db:c8:3d:c8:a4:41:3a:38:1c:ba:26:33:
9b:9e:bc:9b:d6:87:08:67:09:81:36:da:2a:d2:eb:86:7f:9b:
b1:a7:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:24 2025 by rpki-client