Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: LrhLkWiOc50Z3p9nQqN8RLpCIp/yV1YOGg/lqhlmXP4=
Subject key identifier: 13:74:4C:BC:AA:E9:CC:61:31:6F:4C:6C:3C:97:9E:A2:3C:68:AB:ED
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 019749683A89D13CD0A5D9D1A21B6828D4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0C69
Signing time: Sat 07 Jun 2025 08:00:56 +0000
Manifest this update: Sat 07 Jun 2025 08:00:56 +0000
Manifest next update: Sun 08 Jun 2025 08:00:56 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: MJny9t4PKNBZibKe60mLE1NMC4esYgIeGMQ3oFSevP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:3a:89:d1:3c:d0:a5:d9:d1:a2:1b:68:28:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Jun 7 08:00:56 2025 GMT
Not After : Jun 8 08:00:56 2025 GMT
Subject: CN=13744cbcaae9cc61316f4c6c3c979ea23c68abed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:2e:b5:b1:e8:01:bb:21:f2:79:fa:ef:13:
55:99:24:4d:b4:25:9d:8d:e8:f6:08:2b:55:56:06:
a7:d2:35:da:8b:9d:89:31:85:ea:10:26:df:b1:c3:
57:cd:61:4e:51:ef:c1:65:c4:56:19:ab:52:88:0b:
ce:39:5c:f3:94:aa:b9:58:b5:5b:16:c1:4f:27:e8:
70:0e:8f:ed:21:9f:f2:01:5c:7a:f6:1a:70:d8:fe:
30:26:8e:8e:72:21:1d:f8:d1:5e:2b:33:72:60:d9:
1f:65:f7:96:1d:88:bf:45:ab:c3:6e:06:98:c8:dc:
23:4a:eb:cf:e1:a9:3e:41:26:8e:78:e8:6b:1e:db:
eb:29:10:04:96:c0:4d:2f:2c:85:fe:ab:a8:d3:58:
fb:84:1f:7b:39:6c:ef:e9:55:a9:66:cc:74:2a:6b:
72:c7:29:9b:c8:c6:82:2c:cf:5b:11:fe:d5:ba:d9:
19:a5:c8:78:29:28:58:1c:20:11:a6:2b:8e:b9:c8:
54:c3:35:c8:68:7d:a6:5a:44:21:bd:9d:cc:a8:a5:
2f:b2:5d:f6:e3:3b:b8:85:ef:b2:2f:e6:81:3e:90:
57:2d:a9:1a:c0:63:45:35:86:be:08:c4:a6:f0:76:
61:60:ee:23:06:8a:aa:e4:a2:f3:d4:fe:1d:a6:6b:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:4C:BC:AA:E9:CC:61:31:6F:4C:6C:3C:97:9E:A2:3C:68:AB:ED
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:e5:31:7b:56:51:41:b6:2e:26:4e:7f:67:cd:76:31:41:
83:7e:42:f6:d0:d8:26:a0:b6:d0:eb:7a:70:8d:df:e9:50:14:
b2:d2:8b:05:b5:08:29:3a:1b:e3:7b:b8:79:b3:85:1a:d7:a8:
4a:89:2e:93:74:49:23:82:56:6d:72:32:c8:d4:19:7a:76:cd:
ae:bf:00:08:35:d1:fa:3f:07:46:86:e2:ec:68:07:8b:8f:72:
4e:b4:59:2d:a6:07:79:16:c9:42:c0:61:9c:da:27:7a:96:bd:
86:20:14:cc:05:46:6f:58:3a:66:84:26:75:33:c1:07:a0:5b:
21:aa:76:10:16:ae:35:55:1c:a6:ea:8f:13:3e:24:53:00:c4:
b5:54:39:9f:94:ff:df:13:a0:a4:d0:e2:7f:96:15:66:46:f1:
37:f7:f4:64:48:bb:8a:a0:10:7d:fe:5b:72:a6:c4:33:7d:e4:
22:8a:ef:60:e2:3e:f9:89:7b:28:3a:aa:a8:d2:53:21:3d:94:
9d:ad:92:50:3c:72:ad:95:88:e7:e6:bd:b4:a5:ea:9e:e3:e6:
e9:3e:b1:2c:22:a4:83:0f:61:f3:2d:d9:f5:e1:f1:a8:81:f3:
aa:23:54:d2:b6:c9:46:f9:76:67:30:07:13:4a:47:95:a7:9f:
9c:ff:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:41 2025 by rpki-client