Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: 6mbFsMNfjlkq/laV+H6At5GsH9E8mgyI41W0Hwm4B8s=
Subject key identifier: 36:A9:07:65:09:B9:6E:3F:C2:D8:FF:2C:55:0D:3C:9E:38:41:AF:64
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 01974CD6C44B93E4897F7D533DFCAF184D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 09D7
Signing time: Sun 08 Jun 2025 00:00:32 +0000
Manifest this update: Sun 08 Jun 2025 00:00:32 +0000
Manifest next update: Mon 09 Jun 2025 00:00:32 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: vaX+tty8Qtwi2UvGvGXVzT1xHjJh1t+wZKurClDz574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:c4:4b:93:e4:89:7f:7d:53:3d:fc:af:18:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jun 8 00:00:32 2025 GMT
Not After : Jun 9 00:00:32 2025 GMT
Subject: CN=36a9076509b96e3fc2d8ff2c550d3c9e3841af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:4f:0f:75:a6:d6:05:7f:a6:6f:0e:ef:38:
ea:1c:f8:bc:0a:f1:1c:b2:af:01:31:7d:c5:80:79:
35:99:2e:8f:d3:7e:3c:23:f6:34:57:ca:7e:3b:11:
b8:9d:d5:8c:35:25:6f:ac:3b:82:9b:96:1c:83:01:
53:0e:46:76:8c:db:3d:36:f1:11:ea:cd:4f:67:43:
7e:ad:a6:32:60:11:8e:5a:13:7f:18:f8:ff:f4:b9:
f0:8d:15:68:56:d8:3e:11:66:ce:c6:98:f4:2d:fa:
8b:c4:ab:ae:3f:a7:72:d8:e0:84:10:38:e1:3f:92:
84:9b:21:cb:60:19:e8:45:1b:60:5f:8a:e9:66:29:
10:5f:39:ac:3a:7c:26:88:e4:da:bc:24:08:df:b1:
9f:d9:3f:f7:74:4f:c0:cd:e7:b2:ca:b9:09:1b:c9:
a4:fa:74:f3:dc:5d:47:2e:41:db:6d:9c:6d:89:c9:
f3:d5:d2:40:67:b6:b0:48:e9:6a:74:6d:38:ba:c7:
0e:98:bc:65:c7:03:2f:8f:41:c7:dc:a1:7a:22:d8:
3c:2f:29:61:72:ff:b4:7e:b7:70:03:5d:94:05:40:
b8:63:9c:0d:9e:7a:15:1c:ce:e0:6f:bc:c3:f0:49:
73:4b:3b:f7:47:64:29:b4:7a:8d:89:05:47:b7:b9:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:07:65:09:B9:6E:3F:C2:D8:FF:2C:55:0D:3C:9E:38:41:AF:64
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:2e:6e:d9:07:aa:ae:bd:62:2c:e6:3c:19:60:2d:9a:a7:
9c:23:07:55:d8:17:b6:91:4f:ac:78:7a:ec:7f:30:b0:de:73:
a7:0f:e2:7c:70:10:aa:6a:f7:c8:ae:b6:9e:f5:d2:2e:d3:b6:
e9:1d:0c:91:14:61:60:6e:1f:86:32:7f:ab:3d:b2:b5:f7:1f:
40:c6:67:3f:7b:a6:c3:00:27:e7:00:1f:02:a9:9a:48:15:19:
39:48:40:70:cf:6f:b0:51:67:2a:43:f2:d5:6c:fb:84:56:5f:
5d:91:bb:16:d4:21:4d:39:83:3c:78:05:ca:08:f1:7b:78:70:
ea:bd:b9:1a:3b:06:2c:11:8a:11:23:df:21:95:c0:a8:3e:83:
a7:02:1a:90:fa:4c:9e:e4:40:bb:e3:7f:7d:08:ff:3b:02:e2:
8a:12:b7:a3:0f:8e:b8:a6:1d:e9:26:85:e4:a5:35:32:b5:e2:
b6:49:81:4e:ee:2c:8b:47:cc:0d:5d:4b:bf:b0:2b:9c:1c:01:
a3:f4:ba:03:99:5f:ee:09:91:6c:f1:18:19:12:ee:fb:89:6d:
ab:e2:8b:e2:09:5c:a0:e3:a7:80:f8:a3:10:e8:39:5a:33:be:
0e:3c:e0:67:db:1d:24:fa:a6:e3:db:b1:41:b0:48:6b:24:42:
1d:ae:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:03:49 2025 by rpki-client