Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: VBXjUFWlPnv2w9aLZxFvGJIPdoDwFcmQH1l4AMXbnsc=
Subject key identifier: 75:8E:C2:D2:3D:8C:D1:0E:B7:A3:6F:34:2E:A5:27:03:D0:9A:B6:2C
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 01974A0C8A20603300BB47B35FBD8507ECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 11:00:25 +0000
Manifest this update: Sat 07 Jun 2025 11:00:25 +0000
Manifest next update: Sun 08 Jun 2025 11:00:25 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: RiZxVs5K5z1kcKekVwZZ6CIqKzx6XZxCgttkIhBPgic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8a:20:60:33:00:bb:47:b3:5f:bd:85:07:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Jun 7 11:00:25 2025 GMT
Not After : Jun 8 11:00:25 2025 GMT
Subject: CN=758ec2d23d8cd10eb7a36f342ea52703d09ab62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:31:e8:67:3a:44:03:c0:a7:20:50:39:48:
14:ce:fd:6e:54:23:a2:17:b7:ce:1c:cb:61:d7:c1:
f7:72:59:d6:69:cf:48:5c:29:c7:22:e7:2d:50:a3:
18:55:f2:f0:5a:fa:d5:77:e1:6b:4d:01:14:58:5e:
3d:18:c0:26:f9:f8:f7:7f:04:f6:d9:66:17:34:85:
6f:36:71:63:0c:82:02:f7:d2:ce:24:5d:74:e9:41:
04:09:0c:5a:4d:72:73:85:5f:39:9c:a5:d6:0c:96:
4d:11:49:5c:ed:e2:dc:3c:f5:e4:84:99:e8:90:1f:
a5:e0:58:c3:26:c0:a3:59:ff:a0:2e:b4:80:ed:40:
72:db:e1:97:49:1c:b9:79:e4:ba:6d:04:1d:05:04:
94:bb:02:c6:02:ec:24:23:b0:13:43:d7:28:30:ff:
a2:5b:d7:ca:c5:b8:4b:21:9c:0c:2d:7c:60:23:63:
39:88:c7:94:13:ab:0d:58:36:8c:db:22:86:7b:73:
3b:dd:b9:dd:79:aa:cc:00:8c:62:28:18:49:43:25:
eb:b1:b0:54:65:93:12:a7:25:16:f7:43:b9:c4:80:
43:69:73:97:5c:19:b8:4d:80:40:0d:c3:06:95:a3:
cf:27:6e:88:8a:b9:ec:3c:4f:7b:2b:25:e7:4f:f6:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8E:C2:D2:3D:8C:D1:0E:B7:A3:6F:34:2E:A5:27:03:D0:9A:B6:2C
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e2:82:ca:e3:95:9b:95:65:8e:01:ae:55:01:dd:f3:4b:b9:
f5:c5:ba:f0:86:be:65:cb:ca:ef:ba:7f:57:81:46:a0:fa:fa:
2d:44:c4:9c:12:1a:b6:ca:85:d3:04:29:77:f6:e1:53:2c:5b:
04:a1:bd:8c:55:3b:1f:de:67:d5:64:58:ce:2b:9d:3c:67:82:
43:63:8c:69:f9:59:df:9b:58:92:c3:1c:ee:66:e5:60:79:e0:
a3:a0:f0:9a:9c:82:37:c2:6e:8f:eb:f3:cc:8c:83:51:62:bd:
ff:ed:cf:8d:fb:84:f3:d9:87:8f:30:5a:f7:25:7f:73:6b:36:
db:c0:98:14:15:0e:96:b0:41:b9:7b:25:01:e4:6a:b6:67:9a:
48:41:44:45:fb:4c:50:b8:ca:19:09:14:2d:3f:a3:8a:63:4b:
02:77:fb:98:ca:36:49:64:87:d8:dc:05:36:32:8e:83:f9:1f:
fc:d6:48:91:41:75:6b:43:ed:80:2a:68:28:7b:a7:8f:2b:e2:
31:17:62:a4:b6:e2:4c:34:ba:35:69:b3:da:d9:c9:50:42:9c:
c3:be:a3:c5:51:77:f1:1a:fa:4f:83:e8:30:34:86:07:b7:48:
d6:8d:45:c1:92:b2:b3:24:82:b1:49:43:27:33:64:f1:fa:41:
42:14:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:15 2025 by rpki-client