Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: YpixCffUYhmiHZSPDC1c1jzE1GMrcfeU3KPsB2Iucdk=
Subject key identifier: 98:5E:9C:86:CB:9A:82:45:8D:70:EF:66:A4:20:F3:4C:F9:7F:B5:FB
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 01974BC4381CB928C56805A97332AC408248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:00:39 +0000
Manifest this update: Sat 07 Jun 2025 19:00:39 +0000
Manifest next update: Sun 08 Jun 2025 19:00:39 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: wa89IikqR/ie2xfxXch56SbGw4+z3asJoUb65hLgjNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:38:1c:b9:28:c5:68:05:a9:73:32:ac:40:82:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Jun 7 19:00:39 2025 GMT
Not After : Jun 8 19:00:39 2025 GMT
Subject: CN=985e9c86cb9a82458d70ef66a420f34cf97fb5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:c1:07:72:8b:25:c5:f6:55:fd:d3:17:02:
d5:0d:f3:d6:ff:4a:38:51:e3:a0:5f:8f:92:2c:e9:
b9:9f:1c:ba:da:7e:24:94:36:7d:2e:65:4c:0e:68:
d3:7f:cc:04:b8:11:23:f0:2a:f8:3e:40:3a:90:21:
79:c3:db:0c:6c:df:36:ba:0a:53:c4:2c:92:f8:62:
b3:a5:6e:87:9f:55:2c:64:4a:54:91:45:da:b3:1e:
81:a6:4c:af:9f:ff:35:44:88:00:5b:49:69:70:41:
e9:26:c3:14:bf:d5:d2:57:bc:2a:1d:14:c1:0d:11:
96:41:ba:05:7f:61:39:b0:97:38:f9:c9:bb:fe:c0:
80:13:8e:3d:01:6d:de:d7:dc:6b:b9:df:f0:62:e0:
26:c4:ff:99:38:93:06:9d:46:fb:b1:16:74:97:df:
e7:f0:4f:81:2e:21:1a:35:53:3b:ce:c6:2d:82:e5:
bd:a3:d9:d2:a7:e6:d8:61:44:db:5a:51:e8:c9:da:
94:68:03:73:5a:ff:fd:e3:d9:bd:35:67:22:4f:1a:
2d:01:cc:98:38:15:43:a8:b4:d7:b4:6e:03:aa:f6:
16:53:45:56:40:8c:1a:d8:a8:79:80:12:35:7f:23:
85:10:ec:4a:77:8d:f8:93:ca:d5:79:62:c9:cf:ed:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:9C:86:CB:9A:82:45:8D:70:EF:66:A4:20:F3:4C:F9:7F:B5:FB
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:46:ed:10:d4:f2:11:8e:1c:9e:45:62:85:ac:dd:06:6e:
24:cc:ac:8c:83:32:1b:f3:10:f5:e9:1d:32:93:ad:a5:f9:4b:
40:86:63:18:a8:56:3f:57:a4:26:15:a8:ae:bc:fd:23:80:27:
e8:ca:b0:40:d7:4d:13:c0:0c:3c:98:3f:d9:2d:53:78:39:8c:
73:8a:fc:79:b2:2e:ca:36:e6:77:ad:24:f3:43:e6:35:94:c5:
2e:a2:0f:5b:31:46:4e:c7:f4:ff:32:25:f3:1d:61:5e:36:3d:
9d:f9:a5:87:5f:d2:fb:38:7d:eb:a5:3e:ce:f5:00:63:3a:9b:
c1:54:e4:09:6f:84:f0:f4:a0:1f:fe:36:92:9f:36:a7:a6:d4:
14:5c:17:e0:7d:b8:09:fc:a5:8b:bc:61:f0:96:03:42:ab:2d:
3e:fa:b3:ce:35:58:ce:36:99:01:c2:23:7d:5c:03:4f:13:b2:
34:a1:5b:c3:76:2d:bc:c0:12:2a:98:7c:09:08:9f:83:e0:81:
3d:0d:9a:6e:c1:59:13:9a:48:7e:52:42:c5:61:79:59:bc:09:
5a:07:a7:bd:3a:4e:bd:7a:57:60:16:a1:e2:3c:31:a6:63:2a:
66:91:ee:53:3b:b3:4d:75:fb:95:82:bd:d0:1b:3f:99:fc:38:
3d:d4:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:03 2025 by rpki-client