Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: zHs0nJLV46x+rkG1NSP8yi9r/rs0YMNrGQOjLELukyk=
Subject key identifier: B8:69:1B:54:26:84:49:4A:B3:64:26:4F:E5:29:2D:25:F6:30:CC:00
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 01974742BF6E0A5E0EC3620C71796C41EC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 13CB
Signing time: Fri 06 Jun 2025 22:00:46 +0000
Manifest this update: Fri 06 Jun 2025 22:00:46 +0000
Manifest next update: Sat 07 Jun 2025 22:00:46 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: ZmkYX2HuAJZveFS+NJyXOVDjPtJpn7px9tEcYMGzMj4=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:bf:6e:0a:5e:0e:c3:62:0c:71:79:6c:41:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jun 6 22:00:46 2025 GMT
Not After : Jun 7 22:00:46 2025 GMT
Subject: CN=b8691b542684494ab364264fe5292d25f630cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:e6:db:8e:49:e4:9a:fd:f4:54:70:a0:16:
d0:07:84:41:8f:9b:b6:08:ee:0d:34:6a:12:c3:be:
22:ea:99:0e:66:c6:cf:b2:43:87:a1:4e:fc:59:7d:
a1:17:ba:30:65:11:cd:82:07:c7:7c:8d:1f:b9:02:
36:6f:95:75:7f:51:ed:15:dc:fb:7b:a0:ad:54:33:
cc:d5:23:bc:5a:cb:f7:ea:79:0b:da:dd:94:4b:35:
ff:27:b8:c5:b0:b3:79:af:81:84:39:a2:07:25:d3:
3c:4f:09:da:b6:d9:53:5b:52:05:7c:1f:17:88:28:
e1:35:49:fb:85:03:af:1a:0e:4a:90:a3:73:20:a7:
77:fe:6b:14:4d:c9:7a:22:fa:48:92:03:3b:86:c6:
fa:97:18:a9:7c:69:03:bb:ae:7b:59:8b:29:b3:e0:
f6:98:09:5c:be:1a:35:59:09:16:e5:d1:f8:4c:bb:
fb:22:4f:fd:12:d3:5e:03:67:3e:e8:5d:bc:e1:03:
be:8e:1e:7b:3f:aa:03:e3:a3:9b:3b:f8:fd:e1:3a:
e7:d8:0a:4b:ba:d5:61:07:e0:59:7f:3b:2f:e5:95:
93:5f:da:ed:12:11:90:b1:a3:3f:17:c7:89:ee:4d:
9f:8d:6e:62:da:b3:52:74:c4:de:d6:4d:f4:d6:8e:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:1B:54:26:84:49:4A:B3:64:26:4F:E5:29:2D:25:F6:30:CC:00
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:84:ac:9e:c6:fd:8f:09:a4:93:c4:4d:ed:fd:41:1c:42:7f:
96:cd:53:69:91:22:89:ef:c1:c4:96:f3:e7:d8:6d:84:28:b9:
fe:36:8c:07:8a:00:dc:50:c8:c2:0d:e1:77:b4:0e:ba:3c:fd:
90:38:f3:c0:a8:40:74:c4:7d:eb:10:52:e1:5b:3e:e2:37:f3:
ee:d4:91:53:34:cd:50:ef:53:88:c3:25:5d:ca:e4:9e:d6:4f:
8d:11:ca:46:f4:e6:36:87:bb:27:b3:33:8f:c8:dc:32:e9:de:
65:0a:8f:f3:f7:e2:0e:6c:19:b5:2a:93:83:29:fa:a5:ec:33:
4c:e8:8a:6e:3d:de:c1:89:80:fd:64:71:a2:49:fa:ec:e9:44:
90:72:69:0d:38:c6:47:9e:8c:c0:25:a9:71:56:4f:1e:93:fe:
f0:77:37:db:91:3e:20:d2:ca:e1:41:de:29:4a:49:98:4c:09:
4f:74:ca:26:e6:bf:70:ae:1c:98:7d:10:67:a3:a3:ce:14:b8:
16:26:0e:7f:48:89:3e:55:a4:b1:21:41:4e:c8:a1:07:fa:17:
c1:c5:3c:7c:92:c7:ba:92:df:b9:4e:55:d6:2f:85:4e:9e:0c:
72:d5:c5:ee:99:15:0b:a8:a0:3c:8b:b2:98:ef:67:e9:d5:6a:
94:27:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:43 2025 by rpki-client