Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: dqsNTnfRogOJ6NEdd3afwGVtdvSZYzrWNTUBkMvEROE=
Subject key identifier: CC:0D:E1:BB:2E:FF:EF:1E:07:FE:F6:CA:E0:9B:82:7E:22:08:08:E3
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 01974E57C25604107CAF6F07C651476FA82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:01:03 +0000
Manifest this update: Sun 08 Jun 2025 07:01:03 +0000
Manifest next update: Mon 09 Jun 2025 07:01:03 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: NFTJg48GrHxyEaasXWY+oRY/UxE6Opxe3j3vNKPQvxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:c2:56:04:10:7c:af:6f:07:c6:51:47:6f:a8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Jun 8 07:01:03 2025 GMT
Not After : Jun 9 07:01:03 2025 GMT
Subject: CN=cc0de1bb2effef1e07fef6cae09b827e220808e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:7c:55:5a:34:67:b7:2b:88:22:ab:98:1e:
7f:5d:ae:3a:d5:00:c9:bc:1e:e9:43:d3:17:b6:ed:
ca:65:31:c9:d7:2c:09:80:33:9a:29:11:83:b0:83:
f3:8f:07:b4:b6:8d:d8:d9:ab:9b:d7:d4:61:d0:63:
9f:54:04:1a:c2:ff:3c:83:68:6f:8f:e6:66:03:bd:
76:3a:0b:7d:bc:8f:c6:0f:7d:a2:54:fe:a5:a9:90:
b1:28:49:ec:6d:69:8f:da:81:64:fd:d1:6c:39:f5:
98:27:90:b8:a2:2b:96:cb:e0:19:93:07:b4:bb:bd:
ab:5a:13:2e:c6:71:bb:96:00:bd:eb:55:e7:5d:ab:
1d:c2:4c:7b:77:47:7e:82:15:67:b6:47:8c:96:a4:
84:7a:dc:9f:22:e1:18:c1:38:39:fc:44:cf:62:e1:
b3:ec:4d:69:e1:5d:13:22:67:25:29:6c:00:f3:9c:
6b:e7:60:6b:dd:63:f2:20:9a:28:3b:98:ff:e3:23:
b5:ab:c3:a0:a0:d7:1b:36:10:65:ed:75:5d:71:c2:
17:5e:39:09:86:fb:2c:00:50:05:c9:e9:1b:b8:41:
aa:24:b5:1c:55:7c:46:48:a7:6a:75:37:59:a5:d7:
d8:fc:c6:0b:da:da:80:c6:1e:ca:13:03:9b:13:c4:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:E1:BB:2E:FF:EF:1E:07:FE:F6:CA:E0:9B:82:7E:22:08:08:E3
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4e:7c:df:4a:6d:4d:2f:24:e6:0e:4c:d2:ba:0e:b1:bf:e4:
6b:e3:fd:80:31:94:35:a8:97:8e:b5:d9:93:d7:ab:8d:9a:d0:
5a:1f:10:42:66:69:00:c6:d9:23:9d:02:03:27:d6:e2:16:18:
16:f5:90:5c:e1:a1:fa:22:30:4e:cf:2b:5b:78:e7:aa:1c:8b:
2d:ef:a7:3d:90:bd:39:ae:d8:03:e4:33:e5:dd:33:d2:3e:63:
aa:7c:db:8a:44:9e:5d:28:28:51:b8:3d:5d:01:ea:b4:eb:c9:
97:d5:09:f1:fd:56:52:ca:7b:88:54:1a:9d:da:79:e8:5e:a0:
28:9b:94:16:6b:e4:88:af:9a:0b:d1:04:ec:e2:01:7e:cd:93:
38:51:8f:49:67:e7:8d:5c:46:5d:30:3e:b0:22:0f:59:c1:fe:
00:44:7e:60:52:13:38:6b:92:41:88:a8:54:85:8f:b7:4f:a5:
ad:74:ec:78:98:bd:cc:2e:a2:c8:2a:0a:e9:df:8f:19:11:c5:
70:07:2a:8a:10:68:6e:d3:36:8e:7d:1d:f5:15:d1:a0:20:33:
55:d7:40:56:4e:e9:05:b3:bb:8b:fa:07:7d:1f:21:3c:e8:64:
53:36:93:06:ed:4a:0e:6f:61:68:3d:86:a3:e4:5e:56:23:4e:
fe:10:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:53:13 2025 by rpki-client