Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: ATrLowGeZ0+3dzPqIbQ+D9EjzuQc3tMZFVBcEoszKzA=
Subject key identifier: 9E:8F:FD:A4:42:A0:1B:56:79:50:B4:2C:22:FC:1A:97:EB:AA:E8:48
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0197458B41D9D959E08675A1B70C740D9188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 1590
Signing time: Fri 06 Jun 2025 14:00:43 +0000
Manifest this update: Fri 06 Jun 2025 14:00:43 +0000
Manifest next update: Sat 07 Jun 2025 14:00:43 +0000
Files and hashes: 1: 1-F_rMoDUma_dGOHiDlIC303wzZM.roa (hash: tZlwSl0wJhxzJHG6ytyE3Qp+PsLiMjHX0zpV56LqD4U=)
2: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: zhVPV2xHgvksJ6IqKNfLMGJ6vJ6XQ7WMEUvYDdWYX/8=)
3: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
4: LTNH687avS-GxvMdJ-HPx6cwop4.roa (hash: zxKrezY3Lljpe1LKksT2FsAbzIoVghn3cyjHiR1yO9U=)
5: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
6: lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa (hash: Z0xuaYoH87JP2hkLQ1lEz86Qpg9FfEJCXmemb0LqJF8=)
7: mWwZIZi_bVc1h908CjAKkL5Od18.roa (hash: 61r7bPQMg9kj6M2m+bl2SoqT9NucemfdfUzk79Tyxy0=)
8: pbctY64a9gnXSvxUzSA-3U1AkIs.roa (hash: WGFe5sR9orerXEZx51HMbLLWYLrkuEnn5GlCxO/9rWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:41:d9:d9:59:e0:86:75:a1:b7:0c:74:0d:91:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jun 6 14:00:43 2025 GMT
Not After : Jun 7 14:00:43 2025 GMT
Subject: CN=9e8ffda442a01b567950b42c22fc1a97ebaae848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:e9:81:3d:5f:98:a8:9e:32:fb:30:7e:91:
66:9a:01:69:cf:f0:76:08:46:ac:f8:b7:6b:37:8c:
f8:72:a9:05:82:0b:af:5c:6a:55:71:a4:87:1e:46:
33:96:c4:a5:0c:e4:7a:77:fe:52:64:d2:3f:a0:15:
ab:79:97:a2:63:df:79:76:ab:05:48:d9:13:77:16:
d7:91:55:5d:03:de:66:32:cf:5d:2b:45:59:c9:9d:
eb:da:36:86:26:3e:69:09:e2:2f:54:9f:30:90:99:
a1:aa:82:d3:86:1b:cd:90:df:b1:8b:d2:74:93:27:
66:9a:66:ab:d7:70:63:65:41:f0:36:1e:43:5f:c8:
4e:3c:8b:22:7d:be:f0:6d:6f:9f:30:99:62:cc:97:
9a:43:14:fa:a7:64:a9:b2:d3:ca:6f:c7:a4:21:92:
75:54:90:e8:0a:e8:ef:60:66:12:2d:76:a5:91:52:
8d:da:a8:ae:d3:56:8f:69:00:70:58:87:d3:36:7d:
25:67:b2:ff:60:07:25:ad:a0:79:6d:b4:9a:0f:6d:
c6:e8:6d:a9:40:65:2d:ff:20:37:28:49:a8:5f:8a:
52:62:fc:e4:91:63:17:0d:7e:8d:85:6d:5c:59:04:
5e:33:d3:e5:65:2b:02:3e:fe:d3:e0:de:60:2f:29:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:FD:A4:42:A0:1B:56:79:50:B4:2C:22:FC:1A:97:EB:AA:E8:48
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:67:52:34:57:cb:e4:20:4d:75:aa:63:17:76:84:e8:4e:f3:
0c:88:10:44:01:d9:85:a2:7d:88:e6:cb:25:52:53:af:e5:16:
5d:53:35:d3:02:fd:7e:6d:b7:d3:8c:a1:82:e0:6f:50:bb:8c:
22:be:10:10:4f:95:30:fb:7f:51:64:53:32:ce:3f:99:1b:4c:
72:e1:31:76:16:cc:d4:25:3b:c6:00:06:75:71:76:ff:de:04:
ff:e9:2c:33:a5:3f:9f:14:fa:4f:21:21:12:f7:45:e7:e9:7a:
e7:b6:52:d8:03:a1:8b:72:30:9b:bf:93:ef:76:a7:18:b3:8c:
ed:e3:df:e9:14:6f:da:5d:fe:17:cd:20:95:b1:52:33:b8:8f:
f3:eb:5e:c2:45:9c:80:2d:1c:8d:6f:38:7c:aa:fd:47:8c:ca:
60:86:24:89:ed:3f:ac:c0:7a:08:57:cf:0c:3e:44:2b:6c:23:
05:1b:9a:31:74:91:66:86:b1:25:b6:18:6d:ad:2a:e2:b8:1c:
e5:e7:33:09:74:b8:43:f3:c1:a6:c9:2c:4e:d9:00:cc:dd:e8:
ae:ef:b5:c7:29:83:b2:10:df:70:41:4c:6e:7d:9e:0d:21:d7:
70:3f:ae:48:f4:f5:10:0c:b9:66:84:f7:67:b1:a7:e7:8f:a8:
cc:7a:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:53 2025 by rpki-client