Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: Q4U455PCi0VhK1NdDfCBFJRempPAPfEZPAEbPIRCvGs=
Subject key identifier: 1F:51:B9:6D:D8:AD:6E:91:12:00:66:A7:F6:36:44:E0:FE:BF:76:2E
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01974EC5384757B6A3DDA2679C136B558B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 09:00:37 +0000
Manifest this update: Sun 08 Jun 2025 09:00:37 +0000
Manifest next update: Mon 09 Jun 2025 09:00:37 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: j/IfaDLJOQOApvxVoFqrGSwd5HRxDIsdIqiXi4ssTfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:38:47:57:b6:a3:dd:a2:67:9c:13:6b:55:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jun 8 09:00:37 2025 GMT
Not After : Jun 9 09:00:37 2025 GMT
Subject: CN=1f51b96dd8ad6e91120066a7f63644e0febf762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:8e:89:e9:b0:2a:b8:cc:bc:32:87:eb:a6:
12:a4:bf:21:d1:b6:49:b5:a6:f5:ca:86:fd:bb:2a:
0f:dc:7f:57:9c:ff:a0:8a:78:ef:04:6d:ae:b7:2a:
ec:3f:33:f8:00:40:ad:77:de:e8:ee:c7:13:96:45:
7c:03:b6:aa:57:e2:bf:62:07:5a:44:00:c6:58:a2:
e2:56:1e:b6:12:cc:27:29:7b:9b:b1:98:8f:5f:93:
f5:8d:d4:66:cd:39:0c:ad:94:b7:07:40:f0:79:07:
b0:6f:0d:76:5b:e0:58:9f:9e:86:c7:7a:ab:73:fc:
7f:90:d2:e3:3f:1a:14:ea:f1:12:03:5c:e6:92:de:
f9:24:a6:39:6d:4d:d8:fd:11:b8:97:57:6a:60:b8:
9e:6e:cf:42:a7:5e:3e:95:99:b4:24:40:b5:92:16:
a1:cb:d9:d4:6f:46:8c:0d:b8:3f:95:31:31:cb:92:
76:a1:27:8f:cf:0d:99:41:d9:e1:0c:1c:54:3e:e4:
b3:f8:6c:43:2d:ef:ea:3f:b0:4f:7c:98:b3:36:b8:
70:75:94:2f:1e:67:cb:46:55:53:dc:36:05:dd:d9:
88:31:a7:24:87:6a:86:a1:51:59:a6:45:10:b1:b8:
29:a9:8e:f3:84:68:21:9b:d8:2a:3f:6c:94:86:16:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:B9:6D:D8:AD:6E:91:12:00:66:A7:F6:36:44:E0:FE:BF:76:2E
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:fe:ef:a6:cb:ee:7f:ee:9a:7f:6f:d4:9b:b9:71:39:4a:
47:36:79:7d:7e:2f:b0:9a:2f:c8:5a:65:a6:44:e4:c7:20:9c:
fd:28:26:19:88:f1:63:b1:4a:8c:16:31:07:fc:81:72:21:98:
76:5c:56:76:4f:4c:a2:e2:e2:4e:37:2d:0f:28:9f:66:04:f8:
b1:70:42:24:b5:a0:f2:a2:f1:6f:71:85:38:5e:c5:07:45:e9:
98:de:da:25:d7:00:1c:05:da:be:fa:f3:09:87:1b:d3:27:21:
21:78:23:5f:6c:1f:2c:1e:69:7c:f9:a9:8b:7f:c6:6a:08:45:
9a:68:0f:e9:5e:13:da:a6:15:42:51:3e:2a:33:f0:8b:39:a3:
b6:d9:8c:c1:8c:34:b8:cb:3a:4a:3e:79:73:5f:8c:a6:59:ca:
b0:1c:b6:9d:2a:5e:64:4f:40:32:7b:c2:5d:53:7f:00:00:8f:
22:98:2f:c7:65:09:dc:1f:3c:78:d9:91:ab:c5:32:9f:f9:43:
78:ff:a0:ad:94:58:f3:c9:a5:5c:0b:5d:31:4e:0f:2c:99:5d:
7f:aa:5c:f8:aa:14:08:a2:67:56:e0:d2:e5:29:32:60:34:68:
08:58:ea:6e:b6:c2:eb:a7:62:60:d2:54:ce:b2:bf:7e:d6:ca:
6e:43:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:54 2025 by rpki-client