
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: d357UQdAajXfFUU2U1Wpnwgv3X16eSjS2ko+ApnDQVE=
Subject key identifier: B1:CB:34:43:90:CF:7A:AF:46:91:A6:85:6A:C3:D3:FA:14:6B:9D:D3
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 01974CA004951FEE65D2E7625EB66B290010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 10A8
Signing time: Sat 07 Jun 2025 23:00:44 +0000
Manifest this update: Sat 07 Jun 2025 23:00:44 +0000
Manifest next update: Sun 08 Jun 2025 23:00:44 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: YOHfWgFZM4vOUTbQD5B4jHV1a1lk6nhoBXVX4VCO240=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:04:95:1f:ee:65:d2:e7:62:5e:b6:6b:29:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Jun 7 23:00:44 2025 GMT
Not After : Jun 8 23:00:44 2025 GMT
Subject: CN=b1cb344390cf7aaf4691a6856ac3d3fa146b9dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:a9:c9:e5:45:4b:70:1c:ea:22:69:50:46:
f0:d3:17:9f:79:fe:41:67:fc:2e:74:ba:f0:c8:f0:
ee:33:d2:8c:81:ae:41:a1:e1:dc:f3:f7:31:13:67:
91:87:7c:3e:a1:67:ae:7f:5f:75:87:72:d5:ca:54:
53:6a:e6:d6:34:c0:f6:d8:7a:3b:f1:96:52:33:c9:
34:2d:3d:7d:3e:0e:42:7c:94:45:48:8b:7e:14:4d:
1e:92:10:dc:f1:d9:92:57:d7:7c:c9:55:0c:f3:55:
f6:16:10:6a:83:7f:4e:84:b7:20:a8:40:15:06:99:
a3:5a:87:73:df:f4:3a:b6:90:39:cb:1f:c9:9c:04:
9b:b0:14:ca:a1:64:56:7f:52:dd:e2:35:d1:5a:5a:
99:df:5f:83:02:59:76:0f:36:17:ff:ed:8a:25:ea:
b5:f8:56:ca:29:e8:6a:6b:39:43:59:ef:b9:c0:69:
98:c1:09:c8:de:65:72:c2:59:8f:00:e6:b3:c0:b1:
6c:06:2b:8a:93:13:96:05:4b:d8:bd:68:37:58:ee:
59:dc:a8:83:97:ca:5a:c4:71:d4:ba:ce:36:df:50:
0f:f6:35:e9:6a:4d:50:f2:a3:96:47:74:29:9c:a8:
7e:2f:2a:b6:79:16:f4:51:43:94:2c:41:9f:ab:de:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CB:34:43:90:CF:7A:AF:46:91:A6:85:6A:C3:D3:FA:14:6B:9D:D3
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f5:d9:7a:90:e8:00:87:8c:08:ea:d5:40:2f:01:70:db:5c:
e2:06:c6:b5:3d:97:a1:60:56:81:8f:03:5a:aa:e4:84:54:15:
16:68:00:11:4d:f2:8e:3a:da:67:64:c9:83:01:7b:f3:d5:90:
f5:fb:e3:23:c6:e9:ae:24:58:c9:33:f2:78:93:88:2a:3b:40:
29:04:24:6a:18:2e:a2:3b:d2:d1:1c:f1:32:f3:42:d0:c2:19:
0e:c9:df:64:fc:ef:14:36:ad:2a:1f:97:3d:11:9c:07:16:bd:
6b:52:27:f0:78:50:16:d8:70:2b:b5:a4:58:74:bb:82:f5:e9:
44:4e:29:ed:70:6f:20:93:93:5d:cf:a0:87:0b:77:73:70:7f:
d3:44:d0:92:de:43:0f:22:1c:10:55:69:a7:55:c1:0d:3b:12:
34:70:30:78:5a:2b:3f:3b:8e:ed:89:b0:8c:3f:1d:e4:3a:87:
53:1a:74:bb:16:b8:3a:af:48:29:cf:f0:ea:82:93:cc:c5:e5:
f5:dc:1b:16:a5:aa:d6:83:7d:4f:71:fe:70:9c:e5:16:b1:eb:
c7:c8:a3:0d:2c:a0:84:ce:99:34:eb:40:41:ca:a0:68:86:62:
c9:93:2a:4b:6b:f0:00:d3:16:66:9e:3d:87:71:74:6d:fb:c1:
03:7d:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:03 2025 by rpki-client