Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: HBfHKtG8EZlumQJFU4sbYG4JIOh5II+63eqkq6xXqDM=
Subject key identifier: B4:59:A3:D8:FF:DE:26:19:7A:78:B2:93:C7:32:CC:C2:CE:49:B1:71
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 01974AE851947110FB586AE2CA94F50F6E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 15:00:28 +0000
Manifest this update: Sat 07 Jun 2025 15:00:28 +0000
Manifest next update: Sun 08 Jun 2025 15:00:28 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: YUaE58Z0nxUMVakpuuLVZDxcUwj9PBxSq3b2lqO0vS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:51:94:71:10:fb:58:6a:e2:ca:94:f5:0f:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jun 7 15:00:28 2025 GMT
Not After : Jun 8 15:00:28 2025 GMT
Subject: CN=b459a3d8ffde26197a78b293c732ccc2ce49b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:8e:da:75:7d:7c:b6:25:95:42:9f:b2:2b:
c9:87:46:ff:e8:9d:35:69:76:fe:fa:5a:c8:89:3e:
18:1d:ec:65:43:3b:76:e7:4a:3e:39:fd:8a:dd:0e:
be:90:bc:f8:b4:c9:89:94:ec:4a:85:9b:e9:bf:9a:
27:fb:67:26:ff:9a:0e:2d:86:37:ed:53:87:54:ef:
69:65:3d:db:ba:d6:fd:d5:43:61:a5:de:46:b3:fb:
79:70:eb:af:41:1f:4f:12:ee:f2:4e:1f:bc:3d:93:
e8:dd:54:7c:ba:3a:e5:9e:7e:47:df:64:ed:69:1b:
34:09:ce:56:12:30:42:c6:50:fd:08:7c:b9:43:76:
4f:a1:64:41:6c:4f:eb:89:9a:ff:be:d0:f2:38:1e:
ea:40:0c:81:88:b4:bb:4f:e5:b9:7c:43:91:b4:ad:
e2:6a:4b:de:ed:b4:a0:63:e9:f6:05:b6:73:ac:cb:
f0:e2:1e:5a:fe:e1:5c:42:d4:7c:7e:ba:8b:b8:72:
61:06:33:3e:40:c9:6a:76:9e:30:b3:19:4c:19:ed:
a2:69:a2:4a:ef:25:a2:b9:34:7e:72:79:34:64:c0:
a8:84:e8:97:98:c4:0e:bc:d9:be:90:32:36:ed:ba:
3c:2d:d1:11:94:0c:85:4b:11:0c:e9:64:e8:db:1d:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:A3:D8:FF:DE:26:19:7A:78:B2:93:C7:32:CC:C2:CE:49:B1:71
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:f8:a8:73:db:96:2c:81:ae:e9:25:37:3f:b1:b6:f1:42:
49:a5:a1:65:3a:6c:a7:d1:97:1d:77:cd:3c:c6:45:9b:ac:32:
2d:9f:9e:55:49:87:ab:9c:8d:4f:82:34:fb:0e:d7:7d:d6:03:
a5:42:7b:f8:bc:9d:99:b3:61:fd:a7:9d:da:63:4f:55:f7:11:
8a:64:a8:18:01:38:a0:0a:f8:a4:ef:83:46:d0:24:1f:d2:99:
7a:5a:ff:73:10:c3:5c:d9:d6:e4:9d:7f:9c:d4:fa:10:72:94:
0a:2a:60:82:4b:4c:f2:40:78:2e:2b:8d:1b:fb:b0:1e:c4:de:
53:da:88:a3:1c:ff:61:16:0e:ba:ef:27:2b:84:68:d0:80:f3:
17:a0:52:22:4f:32:b8:f7:2a:ec:ce:ff:33:fe:bc:35:a5:d7:
3b:30:23:8c:4a:ad:85:a7:85:22:8d:1c:1c:a1:d5:1a:ea:f4:
18:4f:61:04:eb:1c:81:e0:44:d8:68:98:69:b3:7a:e5:55:cb:
9d:8a:c7:f5:a4:f7:f8:4f:7e:16:95:0e:c3:fd:e9:5c:42:1e:
97:e0:46:a1:09:47:b6:50:39:4b:9a:64:d7:86:b2:a2:a4:21:
8c:83:2f:f4:91:0a:c8:aa:94:20:d6:f2:c9:6d:49:1c:8c:7d:
67:a0:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:25:33 2025 by rpki-client