Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: 5r8laCjGAnn1W4b+fby8xkkhyvu+skizkv0ccePCiX4=
Subject key identifier: 40:F4:5E:A4:B2:11:35:65:E0:AF:F3:39:ED:F5:C5:85:BD:3B:BB:27
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0197481E4E76781253410AC000E8A47375B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 04C2
Signing time: Sat 07 Jun 2025 02:00:34 +0000
Manifest this update: Sat 07 Jun 2025 02:00:34 +0000
Manifest next update: Sun 08 Jun 2025 02:00:34 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: ut0ZMY32YEtn0vUlErvf6dpuTKVocpB9oHRF0BBa9s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:4e:76:78:12:53:41:0a:c0:00:e8:a4:73:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Jun 7 02:00:34 2025 GMT
Not After : Jun 8 02:00:34 2025 GMT
Subject: CN=40f45ea4b2113565e0aff339edf5c585bd3bbb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:9c:f6:bd:d8:0b:63:3b:4b:c3:37:05:57:
49:e2:af:ba:4c:a6:d1:e1:7f:45:bd:36:08:ee:9b:
6e:3f:7a:8e:a7:04:7f:79:bf:bf:f9:3b:6c:8d:b5:
a8:7c:12:d4:e6:c2:0e:b6:3a:3e:3d:00:c0:68:5a:
dc:da:5f:04:1c:fa:4e:9b:d6:7e:6f:65:40:94:3a:
d2:96:7f:2f:8c:1a:60:9e:08:ba:d3:36:79:4e:e3:
4d:f3:66:bb:31:6a:05:ca:a0:75:70:0f:70:c5:fa:
cb:03:f6:ba:bd:b9:33:07:ab:37:25:90:95:ae:24:
4f:fa:47:77:76:eb:04:10:ff:b5:c5:b0:96:01:7b:
48:49:66:97:f7:10:a0:fe:f5:30:21:d3:48:a0:00:
d5:3a:46:e7:7c:ae:47:f7:34:10:45:08:08:d4:d2:
95:c2:6d:8f:d0:ff:48:ec:eb:8b:e1:91:64:28:0c:
c2:38:9d:f0:25:84:97:11:8a:c1:fd:52:d0:ab:a6:
bf:43:31:78:bd:ff:77:51:dd:93:08:c4:8c:8a:95:
61:27:13:4b:cd:7f:3a:05:fd:01:f8:ca:38:2e:65:
8c:a2:85:19:85:79:7e:f3:09:27:28:bb:74:02:e1:
d4:30:d1:11:ec:5d:67:fb:fc:7b:52:49:79:32:ea:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:5E:A4:B2:11:35:65:E0:AF:F3:39:ED:F5:C5:85:BD:3B:BB:27
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:78:ea:0d:ca:ce:30:e0:39:98:64:f2:9c:e4:5b:9a:35:
e6:36:b2:5e:c7:07:17:0b:9a:66:a7:97:61:c3:c1:f2:5e:0f:
fd:70:7a:56:68:25:be:2d:d4:fd:25:d0:ac:86:d3:6a:f9:13:
19:f5:3a:7f:93:1e:b9:29:d1:c2:c1:1b:08:fb:4d:fe:83:87:
2e:4d:ff:7a:9d:e0:e6:6c:78:94:f6:9a:51:1c:d2:e6:c5:87:
eb:d6:1f:3c:69:d5:34:05:34:eb:ae:0b:40:36:82:bc:3e:c9:
99:ad:1a:ee:13:74:aa:aa:ff:89:c8:df:79:c7:40:67:2a:15:
6d:cf:fe:3b:d2:e9:df:93:c0:c9:fd:b5:e0:ad:eb:55:5f:f9:
32:9b:0d:48:09:25:87:ca:4f:a2:5f:d2:84:5b:76:eb:5f:75:
c3:41:14:8c:85:d9:47:35:68:c2:04:26:cb:91:3c:86:f0:a7:
b9:cc:e5:ec:e4:40:c6:87:63:82:64:e9:63:58:04:fd:79:68:
ee:3e:31:28:e4:01:d1:ca:d1:6f:ee:66:4d:3b:0e:c6:44:6b:
ba:bb:f9:46:56:53:d3:cf:de:48:80:ce:d4:b5:d7:f3:1d:65:
d7:ab:33:d6:85:42:0d:fa:80:5e:e9:6c:ba:9b:a1:77:50:94:
34:38:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:47 2025 by rpki-client