
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: sRJzxTONBqBYe+VOIULFm6Z4x/cOcHe4TbyvVQcoubw=
Subject key identifier: EA:2D:1A:58:2A:5D:BB:87:D5:5E:58:B7:1E:F8:AE:30:ED:27:4F:26
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 01975723D8609DCC27FCB95DC71ED2256CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 00:00:56 +0000
Manifest this update: Tue 10 Jun 2025 00:00:56 +0000
Manifest next update: Wed 11 Jun 2025 00:00:56 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: aIh/3jq6KSLB3k2qswM/+0Qa5MVqSZRsFpHBl++ajIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:d8:60:9d:cc:27:fc:b9:5d:c7:1e:d2:25:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Jun 10 00:00:56 2025 GMT
Not After : Jun 11 00:00:56 2025 GMT
Subject: CN=ea2d1a582a5dbb87d55e58b71ef8ae30ed274f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:9f:a4:62:df:de:4b:64:26:5a:0f:4e:81:
f3:4a:f6:e3:48:1c:32:c8:19:66:87:12:8d:03:98:
6c:90:12:37:0f:a9:b6:59:64:d7:90:38:35:10:d8:
4a:90:62:6c:9a:49:62:3d:cf:c9:76:cd:46:cb:20:
81:f1:1c:7d:25:df:46:f0:82:4d:70:b6:4d:65:26:
ad:88:52:0a:d4:83:8c:ae:a4:a7:d0:63:b5:19:af:
17:66:a7:35:24:f9:9e:8c:1d:51:19:d9:78:8a:c6:
9c:33:bd:d5:45:bb:d6:db:43:0f:fb:f4:dc:e1:89:
7d:2a:87:0c:da:93:a1:6a:b6:be:d8:3b:75:ed:a7:
20:ba:1f:94:7e:8d:a6:96:12:1b:9e:d1:15:25:6c:
f6:4f:7f:bb:08:bf:0c:14:ad:1a:ce:b6:94:bf:ec:
20:90:ba:4b:5d:f0:50:0d:ff:cd:d5:db:e1:81:fe:
af:e7:c2:34:23:fb:cd:fb:b3:40:01:2d:dc:04:75:
61:f9:d9:3d:5b:88:df:e4:61:55:8b:50:75:eb:1e:
0c:af:fe:b3:d9:8b:5f:79:20:4b:f1:66:9b:84:1c:
ae:aa:a5:82:ef:63:9f:a3:b1:19:e6:01:9e:6b:41:
15:d1:6c:f3:54:e7:d9:f9:cd:89:0c:7a:6e:6a:d8:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:1A:58:2A:5D:BB:87:D5:5E:58:B7:1E:F8:AE:30:ED:27:4F:26
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:b4:a3:dc:1f:e9:fe:ef:32:7f:91:7c:b2:10:d7:20:ff:
d8:68:9d:62:1c:ce:58:e2:b3:09:08:11:f0:1f:e5:8a:9a:3f:
53:ba:f7:83:dd:b9:12:c3:e8:1c:0e:ce:39:c4:c6:a4:e7:00:
1f:f9:23:be:ef:b1:68:33:d6:09:1b:0a:1e:89:58:cc:70:03:
1c:45:be:fc:10:fa:31:9f:3a:7f:7f:e1:b0:b8:64:3a:cf:ad:
fc:65:6c:3e:27:4c:92:88:60:e4:b8:ba:de:f2:d5:39:26:15:
19:7f:bb:2e:a2:5b:a7:54:74:de:0e:78:dc:a6:0e:49:c4:ae:
bd:87:7c:45:06:31:5a:d8:94:c6:55:f4:5d:37:6a:fa:f4:81:
71:3f:ab:2f:43:4c:0b:07:8b:4c:65:05:58:2e:cd:a6:69:65:
fd:11:9b:b8:27:38:c5:c6:e7:b0:60:53:f5:1b:48:61:d6:98:
15:a8:fe:ab:bf:9f:8f:fc:0b:f8:f7:07:a6:d8:bf:40:b1:6e:
7b:a5:1a:ee:78:76:e0:05:92:22:61:8a:41:02:29:05:c1:cc:
76:f0:47:41:d6:d9:15:6e:63:2d:a0:58:44:4d:71:90:b8:95:
c7:88:9c:0b:19:c0:5c:3e:c9:39:c3:ee:9e:74:db:57:7b:9b:
a3:8c:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:02:23 2025 by rpki-client