Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: mmpMzKtIcNujPZsdddgyHXMU5V1TZfoAfR6dRihl2YA=
Subject key identifier: F7:49:19:2F:1A:D3:9A:D1:8E:84:4E:B4:F7:52:43:60:D8:75:4E:B4
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 01976B4F1FA80AA3F862C25B87BE0CBA87DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1597
Signing time: Fri 13 Jun 2025 22:00:36 +0000
Manifest this update: Fri 13 Jun 2025 22:00:36 +0000
Manifest next update: Sat 14 Jun 2025 22:00:36 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: n79womZ+B1Zwskv62iXEMOUf4lUtQ8lbtXubLR5bpM4=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:1f:a8:0a:a3:f8:62:c2:5b:87:be:0c:ba:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jun 13 22:00:36 2025 GMT
Not After : Jun 14 22:00:36 2025 GMT
Subject: CN=f749192f1ad39ad18e844eb4f7524360d8754eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:dd:db:bf:01:4c:b3:1a:92:47:4b:59:d5:
9d:a0:39:a8:05:66:58:09:9f:62:39:9e:3c:b2:9a:
9c:58:fd:89:6b:83:de:4b:31:fb:b7:1f:97:f4:23:
6c:e9:90:05:2d:4e:1a:c5:01:e9:8d:1b:69:d4:f6:
96:74:67:2a:1e:f5:1f:46:6f:73:10:6a:65:fd:f5:
e5:d2:0e:d4:6b:f6:4c:55:1e:f4:b5:3e:22:10:c2:
e2:43:d7:bf:fa:8c:85:80:8c:cf:3c:0c:bb:75:ec:
b6:e6:0f:8c:b7:0d:71:3a:87:49:6d:c7:49:28:5d:
01:08:0f:54:97:e7:a4:c5:7a:3e:c0:7b:bd:5e:2a:
59:e4:b7:da:03:b7:d2:78:33:5b:06:12:38:fa:ec:
f1:2a:cc:92:69:fe:18:b3:c6:b6:e0:f3:5f:07:2f:
ce:ca:27:39:60:c3:4d:c8:5e:61:81:72:bd:b9:2f:
f2:91:8c:f8:78:09:ba:11:02:0d:57:e6:08:52:be:
79:d7:20:91:d4:14:54:76:34:0f:01:a2:8d:11:0c:
87:00:1f:c9:fa:1d:de:27:f4:ba:df:eb:10:0f:87:
9f:0c:71:c9:bf:41:ee:45:7e:70:fe:fa:42:4c:d2:
3a:c5:ee:a0:b9:f5:fc:a4:e0:65:d9:4c:e9:ba:cc:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:19:2F:1A:D3:9A:D1:8E:84:4E:B4:F7:52:43:60:D8:75:4E:B4
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:9f:f2:a9:5f:4e:f9:a5:65:f2:76:40:54:9f:3f:37:ca:
0b:32:fd:55:12:be:65:25:db:88:4f:8e:01:f9:40:09:43:da:
12:9a:6d:bc:40:eb:75:31:6a:c2:c7:b0:67:58:8f:42:51:33:
ff:d1:81:c4:c5:48:19:7b:83:bd:74:97:80:62:6d:93:c5:e5:
fd:f4:5e:d6:7c:70:43:d7:1b:7f:a3:1f:7d:0e:f8:e9:bc:21:
c7:40:27:4c:e4:d9:ff:09:e5:e9:f3:5e:a7:9f:6e:01:97:5f:
05:92:30:61:a1:bc:6c:8f:f9:f0:f4:fd:25:2b:bd:76:14:df:
0a:95:6b:51:ae:8f:30:27:1b:70:d0:c4:09:31:f7:6d:28:ef:
32:17:06:1c:c4:96:fd:fc:26:46:08:30:2f:08:47:a9:ee:fa:
3d:fa:64:26:fa:5c:3d:ad:db:53:6c:cf:4e:f7:e5:be:18:69:
58:eb:2f:9e:93:b9:77:1c:ae:40:84:79:cc:98:20:44:bd:0a:
b9:0e:58:2c:28:4b:18:c4:67:f0:4a:ca:b4:60:0c:37:51:3e:
07:04:fe:ea:b3:69:e5:73:ad:3f:f8:1f:b6:2c:e5:c3:27:8a:
a7:56:1a:b4:19:f8:a0:b1:2e:57:75:01:71:e3:b6:61:2e:d8:
f5:0b:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:04:35 2025 by rpki-client