Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: gCcZirfZ3WrjgG+cTlpQkHzbkNcBGvIVhLHSXQoP3oI=
Subject key identifier: 6A:32:5B:95:E5:32:D4:0D:69:0E:C2:40:32:DE:46:84:AA:4E:5A:6D
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0197537DDD654EA5C9E09E9CFCDCF48C3C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 07:00:46 +0000
Manifest this update: Mon 09 Jun 2025 07:00:46 +0000
Manifest next update: Tue 10 Jun 2025 07:00:46 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: vprkZH34nFBh+UKkTZEzD4NYLtpxUgiQRFb/bqpBnzw=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:dd:65:4e:a5:c9:e0:9e:9c:fc:dc:f4:8c:3c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jun 9 07:00:46 2025 GMT
Not After : Jun 10 07:00:46 2025 GMT
Subject: CN=6a325b95e532d40d690ec24032de4684aa4e5a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:c5:6d:07:a5:6e:f7:cc:f2:07:fc:71:94:
e5:4d:19:bd:53:2f:2b:c8:ff:00:87:a1:8e:e1:13:
9f:6e:03:7f:d9:30:34:ee:7e:27:c7:c9:d5:bf:bd:
ff:36:12:c7:66:7e:52:89:c7:27:dd:e1:ba:f3:da:
5e:22:d1:06:8a:1e:2c:99:af:5b:7a:c8:5a:ba:9c:
9d:bb:8e:6d:e0:fb:a4:36:11:7f:73:eb:19:23:a3:
83:6e:0b:18:41:75:4f:b8:f7:32:71:9a:bd:6c:04:
ff:79:e4:ae:1a:c1:fe:e5:35:a1:cf:89:ff:ca:7d:
e1:b7:a8:b7:18:e4:93:00:70:31:dc:78:60:f1:e9:
88:df:4b:26:63:6e:b2:86:93:6b:24:ae:b4:ac:11:
45:d4:bf:de:6d:42:2a:d1:e4:1c:cb:a1:40:25:ef:
c0:c3:47:6e:f9:11:fe:69:be:ac:98:91:ee:d4:3c:
32:4d:cd:96:dc:11:61:54:f0:e3:f4:d3:6a:86:4f:
ef:f0:96:6e:ec:d2:a4:61:6e:65:f2:31:92:54:b3:
1a:2e:f2:bc:90:71:9c:d4:30:13:9f:07:00:af:cf:
e3:bd:cf:38:95:40:77:77:de:4e:e7:8a:b6:b4:e6:
9b:96:43:9a:9e:0e:51:d1:fe:df:60:39:92:5c:a0:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:5B:95:E5:32:D4:0D:69:0E:C2:40:32:DE:46:84:AA:4E:5A:6D
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:1e:dd:f6:8b:00:8f:24:b4:a4:16:85:f9:c5:8b:3e:55:
ef:48:84:26:98:35:5b:b3:1b:7a:95:67:91:63:dc:ca:22:1f:
2d:6e:94:7d:6c:33:74:20:de:69:f5:86:f8:5b:7e:0f:83:fc:
14:5b:9a:48:de:fb:0a:1d:bd:2c:44:96:32:22:0d:10:dd:c2:
c4:f5:0e:e5:35:0e:55:fe:3b:d6:13:14:cc:0b:a8:9d:d3:e4:
62:6f:f4:f4:6e:7d:19:7b:a4:ea:dc:f7:7c:98:0c:57:21:95:
64:ea:c4:20:cd:4d:90:52:18:ee:06:de:45:84:0c:e5:ca:29:
70:e1:88:04:8d:24:4c:7f:17:ea:b0:5f:1a:f5:99:88:6c:a9:
2c:b2:f0:60:c9:1b:90:91:7b:40:ff:9d:20:a8:9d:c6:a3:58:
c1:0c:00:c8:aa:51:6f:10:85:c6:91:c1:0e:dc:ae:c4:b8:00:
ea:f4:3c:a9:d4:03:c3:aa:ba:43:c8:c1:b8:00:6c:77:24:1c:
7a:b4:c8:89:b5:6a:7b:51:cd:af:35:9d:1e:85:62:5c:c1:c8:
fa:ad:dd:29:94:5a:25:99:40:d3:0f:e0:bd:34:fd:27:cb:55:
40:61:84:41:78:0a:40:ed:d9:0b:b1:d1:33:b3:6e:36:42:fb:
21:00:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:32 2025 by rpki-client