Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: dl6dmj6RSOfRCZ2AwRfn7nbStyxGq8BcIx3xuDDbwgY=
Subject key identifier: 4A:90:3F:71:36:24:33:34:51:8E:BB:56:3A:D0:C0:86:AE:A8:86:A0
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0197530FCE40099B91B9CB9F2EBD1C0A5D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 05:00:34 +0000
Manifest this update: Mon 09 Jun 2025 05:00:34 +0000
Manifest next update: Tue 10 Jun 2025 05:00:34 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: abuKNrJOFtnYUqJ5bQTLSuWqVd2kONx9yIEvguz6ePo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:ce:40:09:9b:91:b9:cb:9f:2e:bd:1c:0a:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jun 9 05:00:34 2025 GMT
Not After : Jun 10 05:00:34 2025 GMT
Subject: CN=4a903f7136243334518ebb563ad0c086aea886a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:6d:d3:f8:4d:f4:ae:8e:d4:d6:e5:8a:b0:
4b:8e:8b:58:82:f7:36:0d:2b:92:31:dc:72:2d:9e:
17:fc:10:02:74:86:0f:42:74:0e:34:f0:8d:b5:85:
1e:2d:0c:3b:71:a2:29:a4:3b:c0:25:78:f7:ea:dc:
18:95:8f:4a:f4:fd:c1:ef:72:db:cb:c5:8f:71:e7:
ac:e8:91:00:7b:c1:d6:56:35:c1:91:14:c6:9d:bc:
1c:d4:b0:63:cf:04:92:5f:9f:a2:0c:b2:1a:97:c1:
20:f7:61:fd:77:6e:07:4f:0b:9a:19:8c:95:dc:e7:
17:0d:7a:be:c9:16:3b:e8:c5:f6:36:38:9f:11:75:
7a:04:b5:28:43:d5:21:a5:3c:67:f2:56:f8:ab:41:
e1:09:28:23:d2:74:f8:0a:19:16:c2:28:7f:aa:63:
4a:fb:67:78:42:4d:3b:66:1e:5d:61:60:b1:a6:7b:
cd:32:46:9c:d1:f9:82:f9:81:5d:a1:4e:cc:52:86:
09:a4:e4:fe:fe:1e:6c:a1:49:88:3d:a0:ce:9b:9d:
85:45:24:18:72:35:82:94:53:29:ed:b8:36:89:3d:
27:65:8d:80:1c:4a:8f:8e:bf:1f:64:1c:56:04:5a:
12:96:a4:d3:51:f1:c0:39:a6:bb:89:2f:34:cb:aa:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:3F:71:36:24:33:34:51:8E:BB:56:3A:D0:C0:86:AE:A8:86:A0
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:45:7d:ad:09:bf:41:5f:4d:cd:90:31:32:da:51:69:cb:
33:43:26:46:9f:fc:80:f1:21:ae:0b:d5:d7:a1:8a:98:73:c9:
77:1a:e2:09:97:f8:0c:e2:e9:fe:d4:c0:4e:06:16:ad:ff:fd:
86:ce:a9:c3:54:cc:5f:2c:50:c7:9d:64:d3:75:22:24:c8:92:
5d:d6:a9:94:73:0d:54:51:b2:65:63:da:b8:ad:d9:62:6e:c1:
0c:7c:3f:90:83:7b:95:e7:06:4a:e6:a7:56:eb:a0:75:29:cc:
1d:f0:15:32:a5:46:96:29:10:b6:c0:40:c0:8e:9b:43:5b:f7:
3a:2e:6b:16:ac:03:60:92:b8:54:2d:a7:91:f9:1c:7f:f9:ea:
ed:d3:97:fc:ac:00:6a:0c:8b:2c:d9:47:d3:7a:4e:d9:78:ea:
3b:da:78:3a:0a:a2:b5:74:7d:5b:76:c7:ae:c0:d6:3c:5f:f0:
49:50:e1:c6:52:8b:f6:c9:9f:8b:7f:33:47:c6:ed:1b:f2:77:
c4:bf:7b:a4:68:ae:7c:14:22:d4:71:0c:14:e6:be:f8:67:f8:
22:4a:18:67:43:a6:c1:ac:7d:61:e7:d5:d3:0f:6a:07:78:b2:
f4:5f:68:fb:5a:52:5e:fa:cf:40:4a:a3:09:39:7b:9d:b0:e5:
3d:45:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:39 2025 by rpki-client