Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: Lsr9TmJ7+/H+cNQ2dpRBaDVv/m+1U31MVyFJPwqTI9M=
Subject key identifier: 12:D7:98:43:05:2F:11:A0:89:94:01:68:26:E0:92:D0:FD:85:61:78
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 01974FD7CDD352CEE0AA690DD1A97B141B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 129D
Signing time: Sun 08 Jun 2025 14:00:32 +0000
Manifest this update: Sun 08 Jun 2025 14:00:32 +0000
Manifest next update: Mon 09 Jun 2025 14:00:32 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: h95HzIQc/gFWjuzbgNCOTUErCw1JKEDH5w84BJ/LrXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:cd:d3:52:ce:e0:aa:69:0d:d1:a9:7b:14:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jun 8 14:00:32 2025 GMT
Not After : Jun 9 14:00:32 2025 GMT
Subject: CN=12d79843052f11a08994016826e092d0fd856178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:e1:4e:50:a4:6e:03:6e:53:5c:78:6d:f4:
e7:46:25:e3:63:c2:ec:64:df:44:07:30:34:5b:ef:
af:9b:04:a8:e0:c5:c9:dc:94:97:41:33:61:9b:d2:
25:de:75:be:01:5f:76:d8:33:6d:be:e9:b7:90:a2:
ec:d7:08:1b:d6:3b:fe:11:2e:5d:60:e8:d6:e1:7c:
31:c6:9a:9c:8c:29:e4:aa:d2:73:2c:1c:76:3a:3f:
9b:f1:0d:2c:f4:8a:31:02:2d:70:06:0b:79:68:8f:
dd:d2:fa:f7:bf:4c:b2:84:95:af:9a:b9:0c:9b:3c:
aa:b7:ac:ca:80:bf:a7:c0:c2:a4:d6:f8:12:f3:71:
f2:17:7b:09:86:57:ac:56:ef:8a:85:8d:10:c2:70:
92:ac:6c:db:bf:e8:43:54:f4:c7:40:48:a8:bc:8f:
a3:c9:58:fc:75:04:e8:b7:8e:95:e5:a9:bc:22:73:
be:03:9a:fe:23:35:2a:2c:55:38:02:80:ad:35:27:
83:97:a1:94:5d:aa:38:fd:62:23:28:da:f8:9f:c6:
4f:93:34:0d:57:a5:f5:8e:ec:09:5b:d2:cd:86:50:
16:b4:19:0e:d6:65:29:fa:a7:e4:ee:bd:a1:5a:d7:
16:44:1e:78:2c:96:63:bf:1d:a1:b7:f9:70:2e:d7:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:98:43:05:2F:11:A0:89:94:01:68:26:E0:92:D0:FD:85:61:78
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a3:63:2e:79:12:87:ef:42:bb:a5:16:a4:81:29:29:69:13:
26:ca:aa:ca:27:78:7a:9c:0a:fa:e8:7a:8f:ff:f3:35:8c:07:
b8:fd:78:44:30:14:3d:2c:fa:1f:b2:3f:81:58:3c:72:2a:47:
31:5f:4b:58:1d:8c:f8:2b:2d:d1:fc:01:02:3b:cb:3b:be:ae:
c1:b4:bb:5b:65:11:f8:2c:37:ba:b2:8f:03:55:c7:fa:a7:8c:
fa:a4:93:d3:83:be:cf:d8:f8:87:73:15:73:3d:99:38:f6:c9:
26:8b:5e:e1:52:ec:ff:2e:c9:54:fe:3b:89:f4:73:a2:c9:ab:
fe:01:61:6c:dd:d5:c9:5f:ff:47:e4:78:95:02:84:0b:e3:4f:
f1:45:6d:a7:63:df:d2:89:23:12:c7:7f:60:d8:63:92:6e:1a:
72:e7:04:ab:13:d9:31:a7:ae:f1:80:6c:13:4c:c1:f6:14:1d:
88:35:34:8c:da:11:de:4a:20:93:a9:cd:85:87:3a:f0:52:dd:
55:13:19:4e:03:f5:48:57:b8:18:01:02:d4:db:f1:5c:65:0f:
2c:cd:05:8f:f2:59:11:47:de:f5:3d:90:60:52:e1:14:83:2a:
c1:fd:59:68:a2:38:79:89:38:95:6a:1a:c3:47:22:06:1e:ea:
7b:0f:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:40 2025 by rpki-client