Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier: YHgWNB/UBlZiJLD3NiinHwzL0pymaoPDMtT3c+ASO60=
Subject key identifier: 81:48:A5:AA:47:53:97:9F:25:B5:30:F8:08:F8:A1:93:3D:89:4C:85
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 019755DA24D7AF54222AFE55923FC0EE6017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 18:00:49 +0000
Manifest this update: Mon 09 Jun 2025 18:00:49 +0000
Manifest next update: Tue 10 Jun 2025 18:00:49 +0000
Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: ktkQU5vjjJp+qj8xCESJGWNmDNNXXEprqDzHBR1YVLA=)
2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:24:d7:af:54:22:2a:fe:55:92:3f:c0:ee:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Jun 9 18:00:49 2025 GMT
Not After : Jun 10 18:00:49 2025 GMT
Subject: CN=8148a5aa4753979f25b530f808f8a1933d894c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:fa:09:e6:5e:19:2d:6d:10:cd:bc:cb:0f:
33:42:41:ab:c1:f7:0a:8e:85:84:ba:04:94:a1:1c:
87:22:7c:88:dc:de:d9:ed:c1:f5:ea:c1:9f:df:9d:
40:f8:aa:2e:20:a6:7a:a1:cf:55:30:a1:f5:b2:8b:
cf:79:51:6f:ce:4e:0d:31:14:96:b6:20:ab:23:44:
cf:e8:58:41:0c:28:0d:a8:dc:cd:ee:03:f9:ce:b0:
15:6a:9f:1a:86:40:e3:96:83:25:25:48:b1:9d:4c:
26:9d:ff:27:28:12:1b:be:45:f5:33:0b:5a:ce:92:
7e:8e:d9:df:f5:d1:aa:ba:93:05:dc:16:d3:f3:c9:
57:32:ae:83:13:93:a4:53:25:bc:2a:ba:ca:f3:cc:
36:c6:9e:6d:91:ba:6f:80:d5:22:4d:cd:e2:c8:4c:
d6:b9:cf:44:90:05:5d:1a:c0:b2:b7:0b:e2:79:b5:
11:02:1b:e9:3b:ce:52:fa:ac:ea:fe:d4:09:e9:e1:
f4:7d:03:94:41:33:54:53:96:67:db:89:37:0b:af:
8c:e5:59:6b:8b:4a:91:1a:c4:6a:01:93:55:39:a5:
ec:aa:f9:07:0e:5d:af:1f:7c:b0:06:ed:b3:c1:11:
86:f7:b1:5a:c3:70:ee:e5:dc:43:41:cf:e8:87:60:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:A5:AA:47:53:97:9F:25:B5:30:F8:08:F8:A1:93:3D:89:4C:85
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:c7:b1:91:1f:33:36:ce:89:16:03:73:82:a5:2f:35:6f:
ee:8f:2e:4a:73:30:21:a9:e3:88:5e:f3:4a:bc:56:6a:5f:04:
ff:36:ae:c7:ba:bb:8d:13:38:38:0e:7a:b3:f4:47:d8:b2:6d:
25:28:71:cc:83:71:6e:ac:a5:5a:86:aa:ca:5b:d7:b1:47:09:
17:3c:75:39:4a:aa:5f:c8:c0:39:d4:2e:07:2c:72:8c:b8:37:
2a:bc:cd:5f:e3:d2:d8:cb:be:c4:f1:98:e8:52:1a:9d:1c:59:
ab:bf:b2:bb:c0:24:8d:ac:6e:80:7d:92:cf:ac:09:ad:f9:23:
07:e1:92:e3:c7:1e:9f:55:6a:8f:de:c1:f0:85:1d:97:a8:7c:
85:60:2e:73:e5:8a:39:f4:f4:7b:58:49:77:19:d3:a2:88:18:
d9:98:93:a6:bd:04:46:5c:a0:7c:73:44:e7:5c:78:12:bb:94:
af:41:65:35:cd:07:9e:8e:8d:f8:71:47:6f:71:c7:1f:ec:1a:
2d:3f:5b:23:eb:22:bf:64:01:4b:e9:af:74:19:3b:04:f7:3c:
b0:61:4e:52:25:55:0f:fc:26:58:03:c7:08:5b:44:48:52:05:
93:66:21:81:45:0f:43:36:44:71:31:76:81:4d:b1:c3:b2:1d:
d3:b5:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:34:15 2025 by rpki-client