Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: 51s2aUaufLy4YHIP04B3sa/1Ig0kgo/yD1qVHslPt14=
Subject key identifier: 86:E5:0D:A3:C5:52:B9:C7:25:97:B3:50:90:CF:14:EE:77:B3:E7:53
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 01975459A79D5474C901BD1D2EDC1504859A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 108C
Signing time: Mon 09 Jun 2025 11:00:51 +0000
Manifest this update: Mon 09 Jun 2025 11:00:51 +0000
Manifest next update: Tue 10 Jun 2025 11:00:51 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: f1G/py9gJwU7UulyXpW4uwBMJ5tsleDAa2bUdGGSEQ0=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:a7:9d:54:74:c9:01:bd:1d:2e:dc:15:04:85:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Jun 9 11:00:51 2025 GMT
Not After : Jun 10 11:00:51 2025 GMT
Subject: CN=86e50da3c552b9c72597b35090cf14ee77b3e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:e2:ca:cb:26:09:77:9e:06:1c:5f:41:32:
09:4f:e0:8a:3a:06:cb:0d:a7:98:f1:fc:61:11:67:
2e:c8:68:ed:83:33:f6:66:27:93:b8:f6:e3:ed:c3:
5e:df:4e:e9:68:09:c3:ef:f6:02:70:33:c5:f5:8d:
d3:8d:b7:1b:67:81:c4:34:a6:70:6a:7b:32:21:61:
f6:a1:2e:5a:e0:0f:ac:31:03:88:55:ce:c5:a1:f8:
6f:4c:7b:3f:8d:3a:79:fc:ca:b1:d7:c8:c2:18:76:
1b:5e:c3:50:cb:f8:71:9f:49:68:c2:7e:45:3a:05:
1c:a7:ae:ca:f0:cd:d0:7c:10:50:52:fa:45:4f:cf:
45:41:42:f8:47:20:e4:f4:a4:e4:1e:d5:d7:d3:51:
f4:52:c9:4d:68:d1:77:78:7e:86:b7:3f:45:6d:f4:
5d:b6:48:a5:15:c7:08:ee:f3:43:3d:bb:dc:d4:81:
1b:a8:27:0f:6f:8a:7b:45:77:24:77:17:39:20:4f:
94:67:5b:e3:ff:94:40:a4:05:f9:19:9e:b5:37:60:
74:cd:ea:a1:48:77:cb:d2:e0:47:81:3a:f5:0d:b5:
48:23:48:02:78:56:7e:9c:30:10:72:9c:7e:19:1a:
4f:65:41:2e:fe:73:d0:23:13:54:65:a2:bc:d9:2d:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:0D:A3:C5:52:B9:C7:25:97:B3:50:90:CF:14:EE:77:B3:E7:53
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:63:f6:04:0a:7b:71:17:ac:71:b0:30:da:35:04:06:1d:c5:
34:9e:96:24:6e:c9:3d:14:99:5f:54:1b:dd:cf:85:f1:30:97:
65:ae:bb:e7:c5:4e:63:42:6e:f3:15:49:1d:3d:f0:d1:da:60:
31:5b:7f:c5:d2:e2:a0:d4:95:aa:78:bd:38:2a:e5:c1:17:6f:
d7:de:fd:91:4c:be:ac:2c:5d:23:30:c9:92:aa:54:b7:2c:11:
27:19:36:6b:ab:ec:28:43:e6:ef:5f:78:c0:12:8e:d3:a7:3b:
6c:37:77:bf:24:60:b3:27:cf:d1:c8:39:71:c0:ce:cb:a5:00:
90:aa:ae:06:a3:f9:ad:9f:47:4b:e2:79:d8:62:db:7f:df:c3:
83:f6:04:8c:07:03:d2:10:d7:c3:cf:d0:a3:c6:88:e0:2b:0f:
74:09:4f:da:52:e6:55:92:ad:cc:81:a8:a1:d2:33:23:d5:a7:
03:94:3f:86:94:22:61:c9:a6:9e:25:de:b6:3a:fb:19:5b:2f:
03:65:74:ed:8f:13:8e:25:2d:27:9d:67:f9:90:f3:b4:d4:b8:
e6:47:d6:d7:a8:91:8e:0d:a3:6e:19:54:78:13:53:8f:da:8d:
bf:d4:53:95:9b:af:b5:e7:0c:fe:ec:d4:95:2d:74:77:32:ca:
7f:11:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:12:01 2025 by rpki-client