
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File: Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier: If2Lq1yzR9D0j0qt6pdhNdhBvNdTPm2Rln6dufk4edg=
Subject key identifier: EA:B0:32:9A:23:D7:64:73:30:EC:67:C8:1B:70:D1:8E:70:BF:57:FD
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer: /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial: 0197504652C5DB0BD20512238DC5F7B202B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number: 0DE8
Signing time: Sun 08 Jun 2025 16:01:15 +0000
Manifest this update: Sun 08 Jun 2025 16:01:15 +0000
Manifest next update: Mon 09 Jun 2025 16:01:15 +0000
Files and hashes: 1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: T75ZDvLFd3Mm2sGEZcnKUgR1OpZRSPtOsvip0UHtzAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:52:c5:db:0b:d2:05:12:23:8d:c5:f7:b2:02:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Validity
Not Before: Jun 8 16:01:15 2025 GMT
Not After : Jun 9 16:01:15 2025 GMT
Subject: CN=eab0329a23d7647330ec67c81b70d18e70bf57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:fc:97:6f:a4:85:10:f2:50:04:65:b5:ce:
97:67:9e:15:b7:07:31:1c:b2:fb:89:db:f8:64:a8:
a4:c8:79:c6:b6:d6:1e:43:dc:53:63:3e:dc:d4:d4:
7c:47:7c:57:99:89:cd:c9:92:3c:67:41:ae:cf:b2:
2b:35:37:0d:f4:2e:fa:e1:1a:74:3a:58:f7:f2:8b:
fb:ba:37:1a:00:79:6c:05:2f:de:57:45:3c:43:77:
cc:88:3f:6e:b2:24:e8:f0:35:00:01:b0:53:0c:fb:
3f:9c:63:0b:64:68:67:52:5c:ca:f8:32:ab:12:59:
c4:9f:59:e3:d4:51:49:3f:d1:c3:c2:b8:90:54:71:
2b:88:26:b7:5d:d5:49:1e:0f:92:1e:e6:8b:26:38:
08:3c:26:41:55:a5:c9:da:1a:20:2f:3e:97:17:08:
15:c4:20:45:25:18:45:ce:b9:fe:4c:0a:da:81:fe:
dd:1d:41:83:92:26:c7:80:6f:50:9e:1b:62:47:3c:
d0:74:17:7d:43:66:67:5c:c9:99:ec:06:51:66:84:
c7:a3:fa:a3:04:0e:71:b4:31:d4:63:39:41:7c:0f:
c1:0f:12:0c:6b:e2:4b:2d:30:a6:08:5e:d3:3e:df:
d1:8e:80:71:48:93:c2:91:5b:ca:92:b3:c1:d7:85:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:32:9A:23:D7:64:73:30:EC:67:C8:1B:70:D1:8E:70:BF:57:FD
X509v3 Authority Key Identifier:
keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:98:dc:b5:83:65:98:a2:9e:9e:e1:28:e7:ab:96:87:d5:
7f:ff:2d:d7:e9:d3:6c:64:01:6a:6d:63:ff:ac:27:d3:f2:30:
e2:01:5c:e4:8b:7c:e9:96:a2:8e:11:09:8d:ab:7e:e9:db:d8:
26:b7:55:80:2b:18:7d:94:92:cd:d5:01:91:a8:a7:d7:72:7a:
ad:9a:f0:1c:6d:64:13:f5:ae:06:53:89:12:71:39:d9:d2:c8:
0d:13:54:f7:91:36:96:6f:39:05:c9:a0:9f:6a:f1:d5:50:8a:
20:04:11:e2:97:fe:74:84:47:25:d2:10:8b:d6:04:8c:cd:4c:
29:73:c7:89:db:41:60:38:d7:aa:a9:11:b5:8a:18:bb:b2:52:
49:f5:3d:31:c5:12:a0:bf:98:58:70:d1:57:20:ca:c8:08:bd:
b2:fe:c6:ec:de:b0:37:e1:de:d2:25:dd:85:ec:d2:e5:60:16:
61:09:6f:39:cc:4a:00:4d:6b:a3:5f:d9:a1:1b:bc:af:b3:a3:
52:85:29:06:d4:61:b5:f0:3c:14:b2:3d:ed:53:0e:6d:62:f2:
be:bf:4e:72:d2:26:c0:06:76:f9:83:9c:de:38:ca:b1:0a:ac:
d4:2e:b0:32:1c:fa:50:80:cd:75:ce:f8:92:99:41:5c:af:28:
52:f8:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:27:19 2025 by rpki-client