Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier: nsyfiIPHJvCsj9zkVbW7cPU2gxesx4g20oM3TOsmCfk=
Subject key identifier: 0B:79:40:89:4D:6C:7B:36:F3:53:EA:9E:6D:08:C8:3C:C7:E4:BF:7A
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 0197488C0F9093A694F961A7920DF9235861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number: 10E6
Signing time: Sat 07 Jun 2025 04:00:27 +0000
Manifest this update: Sat 07 Jun 2025 04:00:27 +0000
Manifest next update: Sun 08 Jun 2025 04:00:27 +0000
Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=)
2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: OmgUd+mLuHjO+pfzaI29DoPCacwxvWa5LOMAN+ntuPU=)
3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=)
4: oHxQEiIs7BKIPX_5IGdNKOpzESY.roa (hash: M3xmeWif8M7PD+E/s7ne/nAK7kiWHb0spy7RsLe2xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:0f:90:93:a6:94:f9:61:a7:92:0d:f9:23:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jun 7 04:00:27 2025 GMT
Not After : Jun 8 04:00:27 2025 GMT
Subject: CN=0b7940894d6c7b36f353ea9e6d08c83cc7e4bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:fe:ea:43:a2:a0:56:a8:b1:03:6e:5a:9e:
b3:9e:02:4c:a9:d8:f5:7d:42:a5:bf:46:5c:21:cd:
ae:cd:3d:45:da:6d:10:c9:f4:ab:23:ac:ab:53:03:
0d:08:da:8a:3e:74:1e:99:fe:31:0f:70:ad:cd:77:
6b:4c:fe:30:23:52:9a:6b:59:d8:cd:45:c6:34:fd:
2e:e1:cc:5a:d4:d7:38:94:04:e0:ed:84:b9:c2:0d:
63:45:2e:69:2d:bb:61:e3:4b:3e:89:93:c3:26:c0:
8f:f7:bc:69:89:2d:34:1a:24:94:c6:62:bb:20:d2:
a0:2f:95:07:f6:99:f6:e6:a6:7a:6d:6d:0f:ec:19:
80:ec:e1:a3:94:6e:59:90:ba:80:f7:89:a1:97:3c:
30:89:d8:5d:12:82:6e:38:2f:78:4e:1c:c6:06:6d:
36:b3:48:7f:9e:29:bc:6d:52:0e:be:e1:4d:d8:ca:
e9:2a:50:ed:da:9a:18:fc:c5:42:36:89:9d:7a:41:
98:74:a5:b5:d6:2a:72:b3:3b:a7:e1:64:e2:1e:df:
c8:35:d8:10:20:32:8d:ba:0e:02:64:3a:d9:bb:85:
3d:01:25:2c:69:e5:b9:8f:de:bf:65:80:fc:65:1b:
c9:47:5a:62:2b:e4:b3:85:32:79:5a:2b:48:85:e0:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:79:40:89:4D:6C:7B:36:F3:53:EA:9E:6D:08:C8:3C:C7:E4:BF:7A
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:44:fd:ec:c4:fa:a5:8a:26:ab:89:48:8b:fd:59:b4:f4:01:
ca:78:46:29:fa:df:22:06:99:04:60:02:36:4e:01:e1:1a:02:
dc:32:13:fd:c8:dd:75:bb:7e:b8:29:a7:18:41:39:84:fe:c9:
6c:ba:98:25:63:ed:60:09:aa:5f:84:1b:29:2c:fb:6c:41:03:
38:09:47:23:48:99:5c:d0:e8:f9:5a:65:cc:9b:02:9d:5c:4c:
7b:8b:4f:8e:5d:a9:e5:ac:80:12:4e:a1:52:82:53:60:ef:21:
a5:0d:39:3d:43:98:70:aa:6f:b9:f0:0c:bd:6a:ec:60:4a:7c:
52:a3:b7:a0:7d:84:a4:e5:84:7b:64:6a:64:7d:2e:cd:7b:82:
3b:f8:71:b7:fc:35:fa:46:c8:0f:4a:8e:99:69:f0:ee:a6:95:
d6:3a:b9:2c:91:c9:41:a3:b6:da:02:56:a3:af:d2:d3:56:8c:
24:f8:09:a4:77:79:7e:d0:59:4f:98:c6:c7:16:84:1d:92:19:
20:04:09:45:41:98:f4:61:93:8c:67:2d:4f:89:01:ac:f6:39:
82:f2:89:b1:03:1f:5e:fc:cd:7e:85:94:ed:bf:8c:dc:10:4c:
12:da:b4:21:fd:ec:54:b6:3d:e3:9e:38:a5:28:48:bb:c9:44:
a1:ca:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:40 2025 by rpki-client