Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: ejtGRkcWrlWIwbs2vEVHgdj/abxKtW+5oJlG25Ai13w=
Subject key identifier: 3A:43:2C:C7:0F:B9:45:81:8A:2E:5B:7B:1F:52:A0:E5:61:73:A2:85
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019739503D9312C6ABA65FC3C1B6725A5408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1422
Signing time: Wed 04 Jun 2025 05:00:49 +0000
Manifest this update: Wed 04 Jun 2025 05:00:49 +0000
Manifest next update: Thu 05 Jun 2025 05:00:49 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: avXGSPO/CRjwQD8T6JvtqrZzgDZkZEo2H8fB2lG8cE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:3d:93:12:c6:ab:a6:5f:c3:c1:b6:72:5a:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jun 4 05:00:49 2025 GMT
Not After : Jun 5 05:00:49 2025 GMT
Subject: CN=3a432cc70fb945818a2e5b7b1f52a0e56173a285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:cb:39:fb:20:fc:c3:f6:78:71:5c:3a:85:
18:cd:18:63:43:8a:da:2d:f9:62:c8:dd:3e:91:bc:
63:49:d1:14:db:1b:6b:b4:f5:d8:b1:1e:a0:66:8b:
60:2b:63:fa:99:a0:60:18:94:37:04:64:07:1c:b3:
1b:fb:e5:1b:83:e9:65:8f:03:64:40:9c:cb:71:66:
59:9a:cb:45:c9:df:e7:4b:bd:a2:85:34:84:69:b7:
35:4c:c4:9e:13:60:25:6a:bc:87:b6:ca:c7:bd:5e:
a5:c6:15:78:aa:42:0d:56:55:3f:e1:45:be:c0:ff:
69:5f:53:13:c9:97:69:ed:da:40:6a:75:bb:09:29:
e0:80:84:fe:9d:68:9c:73:28:b8:03:95:68:57:ea:
c3:1a:cc:85:56:d6:ce:a4:25:b9:43:85:9e:ea:bd:
e9:12:72:d6:31:f9:26:05:b3:2e:bf:ae:8d:30:f4:
5a:5b:d2:27:04:d9:08:b5:ab:e5:38:af:31:e3:59:
ab:f1:d5:5a:d2:b6:cf:a5:42:16:4f:4e:17:27:b0:
03:1d:a6:6c:5e:a2:ce:79:d5:8f:ec:f1:0c:c0:70:
5c:e8:4d:3f:a1:9d:0f:28:11:4c:41:e7:9f:ff:83:
8a:c5:e1:40:8f:dc:6b:41:12:9c:57:6d:70:4a:f5:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:2C:C7:0F:B9:45:81:8A:2E:5B:7B:1F:52:A0:E5:61:73:A2:85
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a1:ce:43:f2:4a:34:94:a9:99:86:f9:74:f4:3c:80:e5:3d:
79:fd:81:7b:39:5e:0e:07:20:8e:a2:90:8f:d5:8f:69:80:f3:
37:db:dc:4f:62:24:b6:e1:05:a2:15:5e:64:b7:91:82:e4:0f:
1d:24:ad:8e:a6:72:30:16:6f:56:64:25:6c:2a:9c:86:d6:2b:
db:ea:f6:d4:0c:34:e6:4c:00:a7:9b:a8:4e:c4:a6:5f:9a:73:
46:80:a8:2f:44:61:d1:a1:ef:e2:e0:bb:a6:a1:35:b1:56:51:
72:6f:8b:1a:a8:ec:a5:7c:62:7f:64:23:42:57:58:ed:0b:8e:
e0:34:5c:8c:44:be:91:52:aa:ba:89:11:9d:b2:52:f4:b2:98:
07:f5:52:0f:b2:ec:6e:79:62:7a:e4:07:7e:bd:ef:33:3a:d1:
97:f9:ea:12:36:92:2d:36:ba:fd:bf:35:c6:35:74:65:ee:c0:
06:b4:e3:c2:47:15:5a:50:d0:01:6e:87:dd:cc:e9:58:7e:f7:
b7:d6:96:d2:4c:4e:49:b2:c7:f0:a1:c9:8f:81:e3:13:5f:f7:
2e:50:7e:71:a1:3e:2b:f0:35:af:d6:d8:86:b3:c4:6a:e2:8a:
6a:05:7b:ed:9d:61:07:f3:8f:fa:55:ed:49:47:f5:6a:c1:6c:
d5:9a:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:21:45 2025 by rpki-client