Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: GtIsjI67+c7jpFvkGCVLYMQxcbmZECat6Pg+MkxzsbY=
Subject key identifier: CC:E6:16:3F:74:F7:7E:C0:51:39:D5:93:80:37:C5:2E:36:AA:52:ED
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 01974D44A731CC5AF7D3C59EB024F0199FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 131D
Signing time: Sun 08 Jun 2025 02:00:34 +0000
Manifest this update: Sun 08 Jun 2025 02:00:34 +0000
Manifest next update: Mon 09 Jun 2025 02:00:34 +0000
Files and hashes: 1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: U1x9dXmEbabWZHo85DiX0IQ+fzKVW93gmcDAFmcBO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a7:31:cc:5a:f7:d3:c5:9e:b0:24:f0:19:9f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Jun 8 02:00:34 2025 GMT
Not After : Jun 9 02:00:34 2025 GMT
Subject: CN=cce6163f74f77ec05139d5938037c52e36aa52ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:79:50:e1:ed:eb:16:ba:3e:5c:60:1b:88:
8e:a3:a0:29:75:ec:54:d6:b9:d2:b9:a6:63:4a:7d:
c9:39:80:81:6b:df:25:e6:bd:48:cd:90:e4:e9:50:
8a:a1:3a:c2:26:b1:ee:db:4e:83:8f:1a:af:b6:05:
e9:30:73:7d:43:01:81:24:94:d2:6c:80:a5:11:04:
29:71:e3:bf:89:df:b0:e4:bd:7f:a1:f0:14:93:bd:
77:1a:43:e2:56:87:37:26:a5:cb:de:70:7a:c3:e2:
fa:4f:6c:ee:13:02:a2:b4:74:8f:d8:62:9e:fb:a4:
cb:d5:3a:3b:1b:df:ab:f6:bc:a1:ed:d5:ff:8d:14:
44:b4:f5:65:b6:6e:a8:cf:cd:28:d5:9f:7c:2f:be:
48:a1:cb:40:20:89:b3:d1:e1:fa:2f:c3:f3:58:74:
d5:c2:df:a1:d7:e1:52:3d:8d:30:47:2c:bc:d4:0b:
c2:4d:58:04:13:e6:5f:a0:05:02:fd:d9:87:50:34:
da:86:84:4e:ad:f5:06:1a:49:21:7d:4b:85:48:32:
02:4e:fd:7a:54:e6:ce:23:8e:97:ff:ec:a3:3f:99:
d9:a3:79:ae:35:48:64:0d:59:46:30:44:bd:5e:fd:
56:52:fb:0b:84:7f:11:06:5d:d9:53:c0:40:39:fb:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:16:3F:74:F7:7E:C0:51:39:D5:93:80:37:C5:2E:36:AA:52:ED
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ff:c9:d6:55:88:88:aa:a4:57:d6:02:4e:36:99:d3:6a:f6:
8f:08:fe:a2:0a:05:6c:c9:cb:c7:cd:cd:dc:e9:da:a7:9c:e9:
8b:89:39:68:83:89:57:80:3d:a5:02:12:01:90:7b:6c:77:3c:
84:a7:94:47:65:0e:6e:7c:5a:93:fa:ca:99:e4:46:be:2d:f4:
a9:85:42:9e:a2:3e:a9:cc:09:8d:cc:b7:36:18:0c:30:ef:12:
f0:fa:ba:81:41:e2:2b:7c:ca:56:47:21:48:23:41:51:29:8e:
4e:e7:48:88:52:bd:54:83:0a:26:ea:06:b5:c7:c2:86:40:e4:
8b:28:a8:81:4d:f9:36:fe:4b:64:a7:f5:d9:23:e9:9f:d5:93:
3c:03:b4:de:77:56:5d:df:cc:86:b5:11:86:db:c3:b5:63:53:
af:3f:fe:3e:c2:41:d9:33:cc:75:59:69:a4:23:16:17:31:da:
bb:fa:e8:66:06:5a:48:23:3f:aa:0c:51:1d:51:db:c3:55:52:
5c:5e:3f:39:a8:f6:1c:ce:76:61:25:94:ef:2f:d9:3c:9a:71:
76:23:4d:f6:20:75:fd:6a:2c:95:f8:2a:02:f3:af:6f:3c:dc:
ba:3e:68:a3:c2:f9:ca:2e:9d:e4:7c:3c:dd:11:90:55:a4:78:
14:ab:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:41 2025 by rpki-client