Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: DEDouMNoLQwh4MrnptT4qLJ00unk37yFbnAg+gVvyco=
Subject key identifier: C9:81:C5:E3:B8:F1:10:EA:51:1C:96:DA:38:F9:F0:5C:90:91:AF:3A
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0197499F040DE25AC98F5D79792670A56CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0C65
Signing time: Sat 07 Jun 2025 09:00:47 +0000
Manifest this update: Sat 07 Jun 2025 09:00:47 +0000
Manifest next update: Sun 08 Jun 2025 09:00:47 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: yJib/fxiu6NF3NHvx9E3UE9KE2AFBZ1SPp16V7dWseY=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:04:0d:e2:5a:c9:8f:5d:79:79:26:70:a5:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jun 7 09:00:47 2025 GMT
Not After : Jun 8 09:00:47 2025 GMT
Subject: CN=c981c5e3b8f110ea511c96da38f9f05c9091af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:2c:32:b4:43:bb:53:1f:29:57:a3:7a:60:
ca:bc:c7:2c:4b:bc:3a:92:b9:4e:f1:65:de:67:58:
cf:b3:3a:53:82:34:e8:18:0d:8d:9c:9c:6e:a7:c1:
e0:59:d9:61:24:ca:ef:dc:94:da:5d:9a:2d:06:e3:
06:1d:e0:07:9b:54:98:aa:35:78:d5:e2:bd:8a:f7:
de:63:5c:ed:c4:12:90:19:6e:3f:19:51:ee:fd:bd:
08:8f:6b:ae:c1:2c:dc:7e:d3:74:e1:e5:60:02:81:
84:ce:67:cd:45:40:d1:5c:9f:ae:c2:03:0d:3f:60:
e3:45:ab:8e:0b:b0:96:b9:c4:b3:f7:94:a2:42:03:
76:26:ba:58:71:63:c1:80:60:6c:a8:c1:02:63:b7:
b3:a7:ab:26:75:34:aa:70:f8:59:c9:d8:67:35:75:
e3:bc:01:67:ad:a6:07:2a:5a:6a:c0:38:a5:bb:47:
64:f2:43:80:dd:5f:f3:17:55:3b:9f:2e:51:6a:44:
ae:01:30:c8:f9:61:bf:27:57:c5:45:67:a6:c7:03:
6d:97:41:32:87:63:19:85:56:88:60:62:8b:34:2a:
f9:b6:d9:e9:46:fe:f9:41:cf:8b:7f:71:f0:f5:cc:
c1:7f:15:2a:c4:49:6b:86:cb:d8:02:7e:99:a6:40:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:C5:E3:B8:F1:10:EA:51:1C:96:DA:38:F9:F0:5C:90:91:AF:3A
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:69:b7:b5:76:f0:3f:8e:66:be:6d:e6:50:58:10:00:df:
12:8b:ed:c6:ae:45:e9:59:f7:23:2f:23:5b:a4:6e:9f:6d:f7:
3b:56:02:8d:cc:31:2d:9b:68:9d:a8:bb:2f:0d:03:c7:a2:ee:
10:49:27:35:19:6d:c5:97:b7:8b:6d:a2:b8:3a:07:fb:61:37:
85:37:1e:86:1d:cf:72:70:a3:f3:d1:d3:dc:5b:f5:cf:65:bc:
73:d3:37:96:0b:a7:1a:18:60:be:bb:a7:e8:5d:9b:db:c9:2d:
78:d9:8c:3e:f1:6b:16:6a:5e:80:96:9f:5f:5f:5e:1c:f9:f0:
1f:ba:7e:b6:74:b5:a2:99:cb:6d:9f:54:54:e9:88:93:a3:8a:
bb:d1:e7:05:9d:2b:41:4d:9b:19:d4:42:b5:08:d7:97:37:5e:
22:67:0e:2f:24:db:10:97:9a:84:7a:6f:3b:26:6d:8d:b2:c1:
3b:ac:82:c2:6a:f1:19:40:c8:ad:48:7f:22:e9:bd:2e:d2:af:
1a:b9:78:45:99:f4:af:53:09:56:8f:b4:15:f1:69:f1:00:f1:
4d:a6:f3:1c:d7:a1:4e:9d:59:42:60:f5:0d:8c:15:67:07:d6:
2a:96:5f:1f:5f:89:17:c2:45:ff:69:4e:cc:60:49:bb:e7:0d:
45:00:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:30 2025 by rpki-client