Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: /ADaKIeUZhfjjd+trS/Tnr6Lt6jwJnWjK06vpwHZSIM=
Subject key identifier: D4:DF:77:EC:1B:B7:EA:F4:55:94:91:C3:03:11:8A:B1:63:95:41:55
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01974109D1C965898C11E0BE69CC882B839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 157A
Signing time: Thu 05 Jun 2025 17:00:51 +0000
Manifest this update: Thu 05 Jun 2025 17:00:51 +0000
Manifest next update: Fri 06 Jun 2025 17:00:51 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: 91dKa8Q4VQgJ4gzPpLifjRwIKRCw/tnSAjXp2vbE1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:09:d1:c9:65:89:8c:11:e0:be:69:cc:88:2b:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jun 5 17:00:51 2025 GMT
Not After : Jun 6 17:00:51 2025 GMT
Subject: CN=d4df77ec1bb7eaf4559491c303118ab163954155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:ce:0d:5b:ff:c1:c0:cd:42:37:74:5a:66:
64:07:c2:3c:e9:ac:96:f0:ea:21:e1:59:67:cb:87:
48:a4:32:d6:fc:45:96:d4:b8:23:25:70:cb:31:5a:
6d:82:5c:ea:3d:d2:b3:e4:9e:1b:11:80:71:e7:27:
e4:c2:13:2c:20:76:eb:2f:25:26:a6:87:42:2e:ee:
63:d6:31:a1:16:d1:07:f7:b8:a4:91:7b:7b:46:7a:
eb:38:07:c4:b7:30:bd:60:c1:25:fc:87:76:2b:dd:
18:ae:65:f5:8a:18:67:57:db:0e:d0:39:2c:92:d4:
68:f8:2d:73:29:4a:8c:2c:05:b6:bd:d4:2a:41:55:
e7:63:5f:6f:23:50:e2:f2:e4:b2:0a:a5:da:dc:f6:
43:52:5e:08:fb:f3:8d:c3:73:e5:7f:9d:2e:30:cf:
83:9e:23:20:7a:8b:fd:11:28:e2:8c:1e:6e:ef:e3:
ef:52:5e:1d:83:7d:90:dd:08:38:1b:3e:27:eb:d9:
09:65:04:e7:e5:4d:60:b6:09:39:d3:10:b2:42:f6:
a6:21:7f:46:e7:23:86:37:48:b0:c1:05:bb:a7:21:
f0:37:b5:be:99:c3:e1:a5:fc:bc:2e:62:a7:b9:e7:
f3:73:85:a8:32:e3:27:9e:42:37:89:a5:60:59:ca:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:77:EC:1B:B7:EA:F4:55:94:91:C3:03:11:8A:B1:63:95:41:55
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e8:2e:59:34:3e:0e:7a:2e:ea:b5:12:65:be:6d:03:db:97:
47:c4:62:11:9f:a2:a6:ba:78:b6:69:97:d3:2e:a2:f1:ab:84:
de:31:0b:ba:05:69:ec:ae:28:49:84:63:15:d1:99:88:0e:fb:
cc:44:0a:c6:34:8f:37:61:90:33:ca:41:d8:b5:f4:bc:b0:76:
00:d9:d1:fe:d7:0f:b5:00:36:97:af:48:7a:e9:2d:9a:70:47:
2f:f7:2b:8a:7f:ff:4f:a7:3a:46:9b:83:6c:ab:12:3a:08:6f:
08:76:5d:e0:5d:0c:30:7a:20:01:67:d1:17:24:28:0d:5b:6b:
52:1d:68:b9:6e:74:36:b1:bb:4b:4a:6b:73:75:0e:27:76:1d:
c8:7d:78:dd:9b:ca:7b:7c:bc:dc:c4:ba:a2:34:56:02:db:9f:
61:a8:54:7f:eb:46:c0:25:b4:8d:63:a4:83:7d:f9:20:4e:2f:
e5:43:08:4e:93:f5:12:cd:cd:d1:e9:ce:f0:14:15:86:0d:86:
49:21:27:fe:52:2d:70:7b:83:2d:82:9a:02:8d:bf:83:2e:25:
2d:1b:4e:90:d2:42:3a:d2:7b:6f:86:7d:56:89:eb:02:96:32:
b8:c3:c3:8b:11:f9:35:5f:ae:36:14:bd:50:bf:b3:15:2a:bf:
df:5b:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:02:32 2025 by rpki-client