Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: gnmHO32K9zquIfi0Nnpxwf2BJhP91jTd1Wq9Df/AGJ0=
Subject key identifier: 42:1F:85:2B:BF:5B:73:EF:8D:81:38:F4:39:FE:3D:4A:DD:D3:24:F3
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0197CACC6EFB6D8BA90FAEC6EA0DBC41E9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0E71
Signing time: Wed 02 Jul 2025 11:01:24 +0000
Manifest this update: Wed 02 Jul 2025 11:01:24 +0000
Manifest next update: Thu 03 Jul 2025 11:01:24 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: pJHq3dl/XIy+8V7Va8dIfDg2ICrZKZXtYmh4cPVlTys=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:6e:fb:6d:8b:a9:0f:ae:c6:ea:0d:bc:41:e9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jul 2 11:01:24 2025 GMT
Not After : Jul 3 11:01:24 2025 GMT
Subject: CN=421f852bbf5b73ef8d8138f439fe3d4addd324f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:89:c8:7d:a2:b9:85:a9:be:b6:27:ce:b1:
22:cb:1f:e0:97:9a:d4:97:60:f0:5e:30:49:16:6e:
ec:65:e2:6d:6a:8e:37:af:a2:3b:39:21:bd:cb:b6:
1c:22:83:1d:cf:0c:a5:ff:dc:81:1e:72:4d:01:9e:
38:87:f0:35:31:d8:f3:c9:fb:a3:4c:19:da:83:be:
30:c2:3a:f8:9a:10:a2:ff:b4:ba:ef:a8:d7:d9:7e:
dd:a0:e6:36:1e:5e:ed:ec:67:cd:d9:62:4b:bd:d9:
78:81:4c:41:a5:28:dd:8b:ed:d9:47:98:ae:6a:4d:
fd:47:ca:f7:64:e2:7c:f1:26:bf:f8:4f:d0:d5:b5:
a7:24:e4:b1:79:44:0f:2d:fb:68:cb:0d:f9:96:ae:
96:04:59:d4:31:02:e9:54:6f:09:64:ef:02:69:d3:
1a:d3:c9:7b:21:1b:ed:f5:f6:58:c3:2d:1f:56:3e:
d2:fc:f9:e7:2c:0e:99:41:67:e7:da:40:3e:78:72:
2f:36:9c:14:94:93:a7:65:f2:c0:55:1a:82:7e:9e:
34:e7:fd:99:17:89:86:d9:ed:d6:b2:dc:14:9e:bf:
20:3d:b8:d6:62:f9:97:5d:b9:ea:ce:e8:71:a3:b2:
2c:84:56:df:94:e0:02:da:8f:c0:88:8f:bc:85:15:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:85:2B:BF:5B:73:EF:8D:81:38:F4:39:FE:3D:4A:DD:D3:24:F3
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:90:8b:52:70:00:b9:11:80:3a:2f:e2:53:e0:00:13:fa:
b7:dd:95:22:55:36:0f:77:94:79:9e:d6:f0:e4:b1:8a:5b:99:
29:76:af:00:a5:c0:fc:fa:c9:5b:ef:67:00:14:54:b0:42:42:
56:f4:4e:9f:0a:d1:8f:97:61:c1:5d:9e:dd:d5:98:4d:05:44:
24:5c:a0:1a:2d:6a:ef:1d:52:4a:bf:fa:a2:80:49:60:6c:de:
af:9a:52:10:4c:6a:01:ff:78:f1:26:94:a2:6e:d0:7a:ba:47:
e0:26:cf:84:21:a5:02:c4:3c:fd:8d:71:af:59:80:e8:78:81:
3c:0b:68:25:6c:4b:61:60:11:95:44:72:90:97:5a:0b:12:e1:
98:8a:14:8f:22:80:c4:e7:20:c2:ec:65:b9:eb:1b:12:be:71:
0c:fd:73:a4:c8:0a:90:9c:ef:7a:61:5a:97:25:44:f1:0a:70:
7c:5d:a6:95:08:02:e8:84:78:41:07:01:79:2f:6b:9c:1f:41:
3c:ca:e3:44:2b:70:3d:10:c5:42:76:d3:33:77:4e:f8:b0:48:
a5:b1:cc:75:e8:fd:cf:2a:31:44:b7:83:83:fe:eb:6c:eb:90:
9b:4f:94:4f:02:ea:ec:ad:6b:72:30:e2:69:7a:53:b7:f7:81:
9c:17:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:03:58 2025 by rpki-client