Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
File: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft (raw, json)
Hash identifier: uRBRNrBIf1bgTizmRJWo5mv8YhzzVxvwnOkjq2aBxeY=
Subject key identifier: BE:71:47:B4:34:DA:F0:3A:62:5C:B8:6D:11:85:51:EE:7B:22:71:49
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 0197B7B2EA42EE08E16B3196676E98729300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
Manifest number: 0ACF
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: GBm_VAZMm95tvGvpR8c8CkKdzyw.roa (hash: /MkVaXn8Lh0U59FVf0qSK7VZuxTGbFM8GznUiwatBTk=)
2: R7KosinOXjF2rG3vtu7p8AIu4xQ.roa (hash: O2+0nwWvmmZlJHCPQl2XQCYQ7eCOvA/497czNNwGoCI=)
3: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (hash: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=)
4: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl (hash: ozew6ZbILpZqKYPBDA0WdFGCrsDY7D59jfWMZ+0bdBY=)
5: gkwT-d__QKowAY5Ocf64cDl7M4s.roa (hash: S0K8yM8s7Jfw7i+k1P/jE9FZq22d/v6q6SXDGil9ri0=)
6: obdeRPKbOYg0TdkTFUjVSUL8oXE.roa (hash: BP4BJLn84w/b9EROSrMEziDmPyaTFQ9fBu6r5N57qNc=)
7: p_PcjKLs5WrMiyv4jJVIiC78mps.roa (hash: Wu2AIvH1jcbjy6EzqUwoJNbeG7lBj3dtIoXcWjMsOto=)
8: xv9HfwhggDXbUMv-czQzhIKTeZ8.roa (hash: 8zbraxRvCOHngoKaCuyrD6Tzu9xckameA/akAOr4XQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ea:42:ee:08:e1:6b:31:96:67:6e:98:72:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=be7147b434daf03a625cb86d118551ee7b227149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:21:a1:cc:6e:6d:17:ef:53:7b:17:3f:d0:
13:b1:b8:fc:c3:e7:d4:0e:2a:39:26:01:ff:d2:bf:
30:2c:29:e1:72:59:79:fa:9a:18:57:06:fa:3f:93:
6f:da:d1:46:98:55:48:fa:c1:e3:d9:70:6e:52:f7:
6b:f8:af:c7:d8:89:17:41:4b:a0:2c:05:46:51:a5:
29:75:26:5c:29:12:0f:64:26:08:b0:3e:55:c3:7c:
f1:7a:45:0c:61:6d:7b:e6:43:48:cf:28:c8:11:94:
24:86:4b:65:a1:49:62:fe:58:0c:30:8f:38:b9:5d:
cd:39:1a:6d:ff:03:b2:13:ec:76:c5:52:9f:0a:a0:
6f:11:ae:66:62:02:d5:25:41:fa:95:64:2b:31:c6:
a3:8d:e7:7b:73:d8:8e:97:b7:59:ce:56:05:c8:7a:
a7:28:ca:8c:e0:ab:04:6b:da:5e:f8:23:01:28:8b:
50:26:d5:0f:6f:bb:cd:d4:7d:fe:a8:80:66:8c:a4:
56:0e:cd:31:07:0a:fc:93:53:83:e6:31:32:8b:1f:
37:69:e5:64:13:e8:56:b2:20:16:fc:3d:d8:e6:af:
5c:9c:68:14:d4:71:95:47:38:0b:e0:fb:d7:e3:26:
e3:f1:3e:c1:70:68:70:d8:b2:81:60:ca:c3:3c:1b:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:47:B4:34:DA:F0:3A:62:5C:B8:6D:11:85:51:EE:7B:22:71:49
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f1:6e:2b:bb:76:c6:d5:8e:fc:b3:df:f8:99:bc:e6:f9:1f:
e7:14:64:b1:63:67:d0:e0:92:fa:0b:94:c1:77:50:45:4d:2e:
a8:39:6a:8a:c4:54:d2:62:b2:06:d9:2e:9a:27:ac:56:99:e0:
17:df:7a:f9:56:1d:81:44:4b:da:0a:14:6e:65:e4:d2:bf:2b:
b7:8e:af:ec:9e:bd:fe:a6:79:f1:84:f2:ec:d1:40:d5:5a:ac:
1a:31:81:50:59:db:4c:fd:b4:9c:7f:1b:e0:3f:b0:ba:38:82:
ae:c9:be:0a:90:9b:e7:a0:aa:2c:24:db:39:3c:36:6f:f7:e2:
ab:fd:ea:be:a8:00:32:40:df:89:27:33:44:09:4c:17:d8:3a:
2e:ed:12:34:21:ad:4c:ca:ec:d3:e5:49:a3:b0:05:11:9d:bc:
6c:37:d2:93:60:99:eb:a6:ad:db:f2:c1:d9:7b:45:de:4c:26:
ca:41:88:28:d7:f1:25:f4:a4:46:40:d4:fe:6f:00:b5:51:4b:
7b:30:c2:71:84:5e:99:40:45:89:9d:dc:21:6f:51:bf:73:6a:
f1:aa:35:43:3e:a5:b0:c7:2c:45:48:39:f7:c9:6d:1a:fa:30:
16:fb:47:17:d5:1d:f4:83:6a:95:f0:5f:dc:7f:3c:b7:59:43:
a8:3c:24:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:01 2025 by rpki-client