Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: +5C6EBu16NssKNDmncsCnU7waqvwodM2MDeJwKG3s74=
Subject key identifier: D0:DD:24:B7:DD:66:74:F2:9F:BC:A9:D6:36:26:96:A5:07:CE:DF:80
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 019751FD27FD765A8FF09A1B614BDDA40438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 00:00:34 +0000
Manifest this update: Mon 09 Jun 2025 00:00:34 +0000
Manifest next update: Tue 10 Jun 2025 00:00:34 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: zdOMZeUzDKuFDnJftpdNrfIbi1wgxh/vTofhgGohL4I=)
3: hpKUEYSoGHkE0FTfiYlqZGeAk1A.roa (hash: aS+EY09klLsP1Q0iTAqB6odVzuvAAWvABKFa+TlzvPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:27:fd:76:5a:8f:f0:9a:1b:61:4b:dd:a4:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Jun 9 00:00:34 2025 GMT
Not After : Jun 10 00:00:34 2025 GMT
Subject: CN=d0dd24b7dd6674f29fbca9d6362696a507cedf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:43:c3:c0:2f:07:94:00:48:36:c3:28:15:
6f:c5:99:ca:2d:c0:56:56:36:dc:58:38:bf:bc:ce:
a6:f7:94:bd:53:79:fe:f5:95:fe:b3:d6:ff:0c:31:
43:44:80:6d:2c:c4:13:9b:10:9e:46:3d:72:86:d4:
da:53:e5:f8:c8:41:f5:47:6a:04:ef:69:76:b1:9d:
b3:15:92:c9:bd:fb:17:e2:0f:d2:4f:4a:38:42:5e:
e7:c3:2b:ea:e8:60:7b:90:d1:8d:69:53:6c:1d:be:
c1:6c:12:51:d2:41:ae:44:5c:f1:fd:7f:90:c0:75:
c6:d2:fc:d3:a2:f7:f5:ba:f6:6a:47:b2:ce:fd:e8:
db:16:c0:bd:9a:f9:f0:c1:b3:94:50:c0:dc:b2:b0:
b2:44:bd:f7:c9:bf:5f:c9:f0:f9:a4:fd:de:d6:95:
3e:d5:d1:e4:9d:91:0a:0d:1f:1e:6d:68:d6:1e:20:
92:09:17:c4:6b:3e:a1:19:81:5a:35:5e:97:1d:73:
07:33:7b:41:a0:38:7c:45:69:27:02:72:ef:c4:b2:
fa:a3:5d:ef:f6:c8:3e:a3:ee:c8:00:e1:b7:cc:d2:
df:0a:f2:ef:fe:9b:3a:f2:e3:fb:56:68:f2:44:af:
46:14:19:d4:d1:b8:99:6b:54:8d:ec:ec:0d:a0:c1:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DD:24:B7:DD:66:74:F2:9F:BC:A9:D6:36:26:96:A5:07:CE:DF:80
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:b2:f5:b2:f1:dd:88:6d:5b:76:d6:b8:5a:c9:fd:b3:5f:
d8:53:33:71:bb:6b:fe:4d:97:e4:8b:8d:83:e9:1f:f5:81:26:
ab:dd:bc:1f:e0:93:67:be:e2:f7:61:b5:ac:29:8f:63:f8:75:
44:56:13:67:70:fc:e1:c9:5e:0e:1d:ab:d2:01:dd:f0:a7:73:
69:69:49:c7:03:2c:e0:41:4e:d2:5d:66:53:04:41:e6:df:52:
9e:1a:61:a0:e5:de:3d:af:da:44:37:3e:04:b2:0d:b9:a2:c5:
3b:d6:3a:a2:af:b2:8a:0f:f1:d9:1f:a3:7c:b5:77:9e:c8:65:
c1:0a:72:79:2e:d4:4e:0c:b5:65:30:ec:76:3c:d6:b9:be:fd:
a2:b3:26:f8:88:8a:9b:58:67:c1:5c:d9:e5:2f:c3:75:7b:57:
97:a1:d0:bb:b0:03:fc:d5:3a:65:55:fb:7f:82:4c:55:27:cc:
43:c8:96:d7:08:11:16:6f:8c:73:6d:dd:ab:f8:88:0d:ec:51:
2f:66:77:2a:fb:0b:80:1f:13:05:25:c9:22:27:dd:95:8b:a7:
59:15:6a:08:19:87:34:a1:68:c2:ab:ba:5e:1e:74:1f:eb:18:
4e:7d:de:a0:29:f3:f7:79:6b:70:10:41:1f:92:52:c1:36:30:
6a:96:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:26:40 2025 by rpki-client