Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: JI1mpmb7V5CqHGpReMKa4SW7W7yuopKWN9gPFCe17/4=
Subject key identifier: D4:F9:3C:4A:18:E5:B3:AB:80:6A:E0:38:35:BD:3A:5F:0A:6A:DE:20
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 01974B566F3D92E7461F357945BBBB4ABFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 17:00:45 +0000
Manifest this update: Sat 07 Jun 2025 17:00:45 +0000
Manifest next update: Sun 08 Jun 2025 17:00:45 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: b4boAiF/vae3oGguCSBn6umuFyGo17PMC4FJ8pV6lzs=)
2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6f:3d:92:e7:46:1f:35:79:45:bb:bb:4a:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Jun 7 17:00:45 2025 GMT
Not After : Jun 8 17:00:45 2025 GMT
Subject: CN=d4f93c4a18e5b3ab806ae03835bd3a5f0a6ade20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:35:68:d4:5d:16:3b:a1:3d:65:a1:5e:97:
90:2b:9f:8a:5d:f2:c5:34:33:eb:07:90:b6:8a:e2:
d1:21:8f:96:25:5b:45:5b:cd:36:a4:d1:6a:4a:27:
8d:aa:bb:01:fe:7e:29:a2:33:40:06:4a:f1:1b:92:
86:43:db:e5:92:b2:39:e2:75:c4:dc:59:53:58:97:
8f:f3:0d:aa:32:08:fa:49:b8:31:e9:c7:33:87:5a:
1a:cd:b0:54:39:8f:19:d7:98:81:52:0c:96:18:35:
11:b7:2d:2c:3b:c6:7d:95:9a:30:ef:d7:4a:75:00:
35:4c:c2:f1:da:7a:95:7f:de:eb:a0:0d:ae:eb:e4:
78:c7:8f:da:95:13:39:6a:c7:eb:2a:b9:dd:f6:bf:
5b:1b:d1:e9:f9:3a:71:2b:49:4f:73:c2:82:52:52:
ae:11:39:7f:4b:5c:9a:4e:4e:71:ae:c6:e6:ce:56:
da:e9:d6:41:f9:5b:ea:66:ab:a0:16:2d:66:2d:a9:
3c:fc:2e:3a:77:c4:48:be:83:4f:d2:0a:94:34:a7:
36:8d:04:9a:75:4e:96:a1:1f:10:de:14:55:57:ac:
ad:8e:26:90:fd:bd:b4:b9:e0:8b:53:10:c2:e0:d2:
96:46:99:b3:f6:a8:b3:1a:4a:09:ee:16:d2:a2:b0:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:3C:4A:18:E5:B3:AB:80:6A:E0:38:35:BD:3A:5F:0A:6A:DE:20
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:93:08:6f:7d:2b:24:a2:f8:e1:8d:4d:f0:9b:37:c2:bf:
a1:14:9d:82:43:d1:a1:a9:2e:f8:d0:4e:2d:3d:d1:ad:fd:3d:
17:8c:86:e7:1b:cd:dd:b0:fb:ee:e9:f0:9a:92:6b:33:45:72:
11:f7:18:c3:53:d8:9c:b2:f2:3c:e2:a0:13:3e:b4:3a:89:23:
d5:de:19:11:b6:04:31:1a:c5:53:fe:de:f0:bd:50:71:e2:c1:
01:84:b6:ff:97:f3:31:2e:1c:e4:0f:b6:2b:ce:ae:f6:ba:c6:
22:6c:58:ac:1b:bc:4e:85:99:cb:e6:99:7d:40:d9:42:c9:69:
6e:82:80:97:4d:de:e6:f5:d5:ef:5a:2a:85:6d:da:7a:d8:e1:
f6:9d:fd:29:9f:c7:89:56:95:80:ed:a0:85:ab:12:a1:fe:1c:
58:e8:12:01:7d:f8:3c:99:c3:90:a5:f3:78:e1:92:a6:4c:d1:
01:32:ca:15:71:a8:c0:11:f3:7a:c7:13:e2:2d:1e:10:07:a7:
fd:81:04:0e:87:09:71:91:a0:de:73:e2:cb:45:d7:b4:c0:f2:
3a:bd:f0:3f:06:07:78:3e:7b:b2:67:57:cf:1d:76:b8:d9:6d:
92:39:85:7a:4a:e4:1b:1b:75:d1:3a:dc:98:db:d7:b7:e6:26:
60:37:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:14:02 2025 by rpki-client