Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: 6kok8HqGG7w+PVWnyJ+cB1O4kG22a6+ZQs5RjMyosQc=
Subject key identifier: 21:F1:35:9E:FC:EC:DA:87:00:27:BC:1C:02:82:1B:55:74:AD:02:53
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 01975948FF917D908F8719B6B871E0C2BD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 10:00:45 +0000
Manifest this update: Tue 10 Jun 2025 10:00:45 +0000
Manifest next update: Wed 11 Jun 2025 10:00:45 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: IENR7qYEgOXX2fRRtYDS/Hu4JV1Y566sWbfTUHKS8bQ=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:ff:91:7d:90:8f:87:19:b6:b8:71:e0:c2:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jun 10 10:00:45 2025 GMT
Not After : Jun 11 10:00:45 2025 GMT
Subject: CN=21f1359efcecda870027bc1c02821b5574ad0253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:38:d0:d3:c4:6c:52:f9:35:9b:1d:8b:51:
45:77:1c:c0:3c:65:a7:5b:5c:c8:e6:26:3c:30:3a:
c3:ef:df:1c:df:7f:74:57:1e:e3:13:21:d0:67:69:
52:a1:93:18:37:89:c5:dd:17:6c:f2:60:b3:c4:5a:
3c:da:49:f2:f0:3c:81:ff:05:c6:4b:c1:56:16:53:
7f:99:dd:41:61:c9:48:8f:7b:10:29:17:94:69:32:
02:5b:39:62:bc:34:5f:5e:27:3b:3d:d5:38:82:e0:
e7:4e:de:a4:83:e4:8b:91:35:bd:9c:2a:e2:36:73:
14:1d:35:5f:92:1c:30:9b:c1:a9:88:c9:fe:21:3e:
f9:ad:a6:92:21:75:b4:78:17:a0:65:5c:85:48:ba:
4a:70:bc:99:7a:3e:5e:1f:32:d2:e7:15:7c:c9:a3:
5e:63:89:c6:c0:ba:7a:39:a0:72:1c:b6:69:1d:ce:
9f:b2:d7:60:d8:c7:95:f2:13:af:d6:ff:4c:27:d0:
61:ba:c7:2b:1a:9f:5d:b6:be:c2:8b:0b:7b:03:3a:
79:40:f6:b5:5c:ba:c9:28:d1:d2:9d:45:90:de:3f:
17:d1:0d:c7:7d:c0:e7:d7:4e:92:27:ce:38:71:ed:
67:39:28:0b:1b:45:85:7d:99:2a:cf:93:89:46:87:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F1:35:9E:FC:EC:DA:87:00:27:BC:1C:02:82:1B:55:74:AD:02:53
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:1c:ff:cd:44:b2:98:aa:c1:6a:f1:41:46:9a:a3:52:74:
78:bc:14:14:2b:7e:d4:71:6d:2a:d2:dd:eb:99:27:c6:8e:34:
76:42:81:55:a7:94:72:a2:2e:9f:b4:ef:23:8b:57:23:f7:9a:
67:a7:37:72:a4:9f:f2:6c:61:45:b3:6e:0f:c7:c7:9b:85:63:
5f:b9:f2:fc:53:9e:d1:9d:73:ea:0c:02:d6:9a:50:98:07:6c:
02:13:c2:fe:70:87:f3:f6:b4:28:de:c6:53:f6:c5:19:b6:cd:
40:ce:2f:cd:8f:b7:6b:73:5f:82:75:1e:53:b1:31:a3:05:1b:
c5:f6:a8:3a:21:74:9c:3c:97:ba:a7:c9:cd:19:70:dd:ac:e9:
8c:5f:9c:c3:54:6f:13:4e:db:d5:f3:9c:ea:57:cd:6b:6f:f2:
94:c5:03:69:e0:09:ca:ef:16:2d:e4:b9:73:be:13:40:33:e6:
c3:03:a9:2c:c4:1b:f8:67:07:fa:27:88:0f:44:79:a3:18:73:
b6:50:b9:8d:b7:00:d0:0b:70:c0:ff:71:0d:3c:8b:cb:6d:d0:
0a:2e:2a:cb:ae:cb:d9:80:35:87:f3:19:c8:5a:70:27:8d:db:
28:25:c6:fe:70:91:ae:6e:9a:3d:51:53:43:f0:0d:83:52:ee:
f0:8e:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:03:43 2025 by rpki-client