Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File: eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier: jDkQEzreTctF9pDqg2dcvcs1nFFbCiZ8ED0YXkY74K0=
Subject key identifier: CB:21:56:2F:C9:47:DB:19:B7:6B:6B:4B:4D:18:C7:AE:30:47:EC:0C
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer: /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial: 0197469ECC784EB66FB1F6DD0900814FEF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number: 12C2
Signing time: Fri 06 Jun 2025 19:01:41 +0000
Manifest this update: Fri 06 Jun 2025 19:01:41 +0000
Manifest next update: Sat 07 Jun 2025 19:01:41 +0000
Files and hashes: 1: CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa (hash: vZb7fKK94eyPt6Z0PY3dDQip6IArUPuz51Ar7XUuuO8=)
2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: XsKmcUoNBDfJ1fwoUXCr+GpAVUhVnZ5+ut0rsHRbOEo=)
3: xXuydbuhDhETgHIlcb9KUf9zG4Y.roa (hash: 9XrkxjJNUOJOKboyq6AJj8CALCh/rjZYztA11ZmADyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:cc:78:4e:b6:6f:b1:f6:dd:09:00:81:4f:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Validity
Not Before: Jun 6 19:01:41 2025 GMT
Not After : Jun 7 19:01:41 2025 GMT
Subject: CN=cb21562fc947db19b76b6b4b4d18c7ae3047ec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:4d:c8:bd:5c:c6:29:7c:60:ed:a3:46:60:
3a:e5:de:6b:97:3a:c9:36:da:96:d9:1e:c3:47:d8:
a0:fa:ff:ae:fa:db:87:ef:fe:cb:13:78:a4:10:52:
e1:6f:3e:50:63:84:51:9c:ff:42:04:a5:f6:f5:35:
a6:ed:ae:50:1b:d6:1a:6b:8d:ad:1d:1e:06:fc:b6:
3a:56:9e:bf:13:2d:a1:a1:c6:3e:87:44:0f:99:90:
43:18:36:a4:6e:85:44:67:ec:42:58:57:fd:67:79:
94:0e:1f:39:c5:6b:d9:da:e5:73:08:b4:de:d0:b1:
47:4b:5b:95:5d:19:73:4c:0f:53:b1:ee:aa:17:cb:
05:33:77:48:43:ea:e2:b1:cf:81:de:35:bc:1e:6c:
ed:f1:28:84:9a:38:9f:9e:fa:b6:ae:50:91:66:44:
27:a3:44:9a:65:b6:a4:d8:a5:73:ba:2c:bd:0f:ee:
1e:63:21:3e:ed:88:3f:dc:d6:cd:19:77:92:fa:31:
d1:14:fc:1b:e8:01:23:d3:76:4a:1a:04:63:16:41:
cd:d4:16:fb:91:49:39:88:12:c4:db:57:63:e2:61:
9e:75:31:d7:ad:40:06:6b:89:fa:97:9f:7e:24:78:
a4:6e:85:6b:19:49:f9:0b:5d:2d:02:83:eb:73:cb:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:56:2F:C9:47:DB:19:B7:6B:6B:4B:4D:18:C7:AE:30:47:EC:0C
X509v3 Authority Key Identifier:
keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:9e:9b:fb:88:b5:cb:bd:d9:0b:38:d5:09:a2:10:31:b7:
6f:d9:8b:f9:be:77:ea:df:51:65:8c:ef:55:e4:58:81:44:8a:
bf:1d:52:bd:4b:5b:54:1e:1e:1b:10:fa:6a:8c:61:20:ec:03:
1a:58:0e:59:a5:b9:f6:fe:5a:e0:21:70:ff:40:dc:59:81:6c:
62:b8:58:96:3d:e5:92:d1:75:b7:1e:15:86:77:94:14:b7:18:
29:29:a3:59:f0:19:39:9b:5c:6b:4c:93:e1:1a:78:63:1e:d3:
91:3d:93:a0:55:18:ac:bb:cb:e1:40:ea:ba:bf:47:e1:dd:ec:
dc:3f:54:44:2c:d3:0c:1e:70:db:a9:08:76:4f:06:89:82:bf:
fd:1f:95:26:2f:33:f2:10:55:9e:45:3b:b1:9b:9f:e6:3b:12:
29:51:bd:e9:2c:6d:d8:bd:90:1f:3c:1c:4c:41:3b:a2:61:8a:
34:86:b6:15:ac:2c:9b:45:04:e6:4a:cf:43:77:35:77:a9:11:
1a:31:2a:e6:29:d9:dc:f9:57:e4:eb:19:d5:18:45:4c:f4:21:
ab:d6:7c:e4:f3:c2:c9:f1:3a:f6:ca:81:e3:d4:6b:85:10:d1:
c9:40:89:13:c5:c4:e4:f8:a9:62:2c:6a:39:64:53:60:36:84:
3e:2d:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:57 2025 by rpki-client