Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier: lvd2ZVuEoF2qttEP2eZvo+ISrJtuGrHcugva7HXiOEc=
Subject key identifier: 93:D3:80:56:01:B6:6E:8D:11:25:B5:63:27:BC:47:16:5A:EA:56:E6
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial: 019749686640A3B5C9CCEC2542B796735F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number: 06FF
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: EjdPocQSvqUrk2fQqWlbgw3jLCtdgJ2DELEjwcVOeHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:66:40:a3:b5:c9:cc:ec:25:42:b7:96:73:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=93d3805601b66e8d1125b56327bc47165aea56e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:e2:48:83:dc:a1:e5:2f:1b:b4:7f:a3:92:
a3:63:29:4c:a0:f4:bc:f5:72:79:20:8e:09:e5:89:
12:71:0f:12:4e:8b:49:18:79:e2:d5:52:8e:05:b1:
8f:3e:90:dd:27:28:93:14:24:f5:fb:6c:85:53:75:
9f:e8:af:a5:c2:d5:d1:ac:f8:9d:be:c6:ac:e7:72:
bd:e0:85:29:af:8c:5c:5a:ab:5a:45:f1:86:59:55:
c5:ac:19:30:de:7f:28:8f:b0:a5:69:67:62:d7:29:
3d:08:22:66:e7:e4:b7:62:e3:2c:e6:a0:09:4b:10:
d3:a1:d0:7f:7a:ea:75:c2:07:5a:b7:c0:1b:ad:b1:
04:e8:04:13:23:a5:64:91:f7:54:dd:2c:80:4d:42:
bb:cc:2c:c0:be:e4:bc:ec:51:69:a2:40:0a:20:4b:
e8:a8:20:73:fc:0c:8a:93:06:65:df:9c:0d:f1:97:
82:e6:ed:91:03:a1:b3:5f:6c:62:cc:b0:b4:06:dc:
39:48:2c:d1:15:37:58:10:8f:fd:c7:18:00:87:35:
07:9d:4b:51:ae:55:15:34:7b:3b:eb:3e:65:73:6e:
b9:81:a8:f4:6e:ce:93:d0:3a:c5:b9:3a:fe:93:c2:
1e:27:9a:53:d7:e4:ea:ae:23:1c:4b:44:51:81:c4:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D3:80:56:01:B6:6E:8D:11:25:B5:63:27:BC:47:16:5A:EA:56:E6
X509v3 Authority Key Identifier:
keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:17:e0:de:63:10:20:5f:fb:52:73:f3:86:b4:af:0a:63:
08:79:63:ca:ef:aa:9d:e1:99:98:6a:c1:e7:de:ef:ce:1b:b0:
1a:69:f9:01:f0:3d:b6:e7:f0:fc:c0:87:5f:5a:36:eb:d8:ed:
29:e7:1f:d5:e2:9f:6e:22:d7:58:5e:d6:83:a2:b4:43:5a:ad:
fd:d3:2e:cf:43:77:7b:ab:85:c5:d0:7c:c9:4b:bc:e0:a1:aa:
c8:ad:25:ab:c8:ff:95:ec:6e:0a:2e:30:40:63:6d:3c:52:32:
46:87:17:4f:a0:b8:58:a7:94:98:34:42:94:6d:2a:80:6d:08:
db:9e:4e:f2:1f:cf:70:cf:d2:f7:f9:21:3e:07:7f:e6:99:12:
fc:65:bd:22:ed:ec:c8:e9:c3:ca:26:b7:a8:86:ea:0a:4e:13:
fe:c2:5c:2a:8b:06:bb:43:67:dc:bf:15:4c:a5:4a:9b:6f:77:
18:01:c2:0d:53:9a:84:10:b8:75:44:78:60:18:33:81:4a:38:
9c:b4:48:b8:a6:57:c9:22:b3:9f:34:ed:f9:de:e3:d7:f4:41:
c8:ee:d9:65:a1:29:25:40:1e:cb:fe:4e:83:dd:7a:33:97:37:
12:89:70:3d:31:24:6e:82:47:d8:08:4c:82:8c:e5:1e:b4:be:
84:35:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:56 2025 by rpki-client