Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: 3v+LsNf9TqNZCkCJZ9vVvDhdqPjKfsr5TYv9TXCgIfQ=
Subject key identifier: D6:54:D9:AF:A5:AD:44:26:EF:0A:A1:7D:32:58:64:F1:F2:57:94:26
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0197CA5ECD8241E56B5C8524429244268B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0CE3
Signing time: Wed 02 Jul 2025 09:01:39 +0000
Manifest this update: Wed 02 Jul 2025 09:01:39 +0000
Manifest next update: Thu 03 Jul 2025 09:01:39 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 99BBUv6DC51fV3WH07PCfVNMwGQ58szHM+UTkc4FhNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:cd:82:41:e5:6b:5c:85:24:42:92:44:26:8b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jul 2 09:01:39 2025 GMT
Not After : Jul 3 09:01:39 2025 GMT
Subject: CN=d654d9afa5ad4426ef0aa17d325864f1f2579426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:93:4c:76:c2:5e:bf:b1:6c:51:6f:d4:44:
a1:92:91:69:17:80:52:1c:6f:ad:3b:1c:a4:1b:4c:
22:23:4d:7b:26:2f:ee:7e:03:90:06:c7:09:b0:15:
89:dd:98:86:fd:b0:12:89:c9:f8:c1:5d:bd:f8:2c:
b7:61:89:94:2e:ce:05:77:9a:da:c3:c0:58:fc:8a:
0c:74:47:66:f4:07:f0:2a:70:31:43:04:18:23:86:
d6:ce:27:5f:d4:8f:9f:10:44:ca:65:aa:88:dc:0c:
49:4f:a5:32:14:5a:53:52:a8:ef:a9:36:1c:d4:4b:
44:94:8d:e9:73:2d:58:ef:a1:40:73:e5:e3:cf:9f:
b1:9a:08:6b:f1:da:a3:51:fa:52:8e:29:a3:ae:cd:
e8:68:c5:8a:d4:8e:00:5a:79:cf:65:49:40:49:94:
64:bf:ee:e3:7d:18:0d:85:b4:aa:de:44:e9:c2:d7:
61:6f:76:53:8a:9c:5e:25:e9:6a:6e:15:03:2c:2b:
09:07:be:aa:ad:27:7a:cc:ec:59:e4:84:92:d8:e7:
b8:b5:3a:1b:dc:b3:4f:e7:ea:99:b3:46:c5:2f:fe:
97:01:f3:22:5f:8e:6c:74:69:db:fa:38:b4:6e:b7:
f3:0c:99:f6:2e:37:66:74:03:26:a8:aa:31:7f:7f:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:D9:AF:A5:AD:44:26:EF:0A:A1:7D:32:58:64:F1:F2:57:94:26
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a6:d0:44:b5:02:50:ad:63:99:49:9c:54:07:e4:f9:79:26:
85:08:a8:fe:14:87:6b:cf:9d:66:17:d8:e9:2b:a1:79:ed:49:
53:ab:c5:fc:f8:76:6c:77:5b:4d:d1:5f:2a:20:7d:a5:c0:65:
b9:40:3a:26:d7:a8:40:10:99:eb:cb:88:9a:83:ab:ce:65:44:
a4:5c:7a:20:52:14:4a:73:8d:fa:2e:64:6b:fb:92:17:e3:12:
79:cd:a7:41:ad:78:54:5f:22:02:ba:50:71:ab:b9:1b:ac:4b:
89:37:4f:d6:fa:f6:e6:bf:3d:83:40:00:8f:da:6f:ce:1c:c0:
a0:4e:6e:76:3e:7f:08:06:e5:45:77:3e:a0:79:7e:aa:f8:ba:
8a:e6:c7:0d:be:fc:53:b3:f7:e1:08:67:5f:75:dc:45:6e:9f:
f6:ba:b2:a9:27:72:49:ee:aa:58:78:fc:2b:07:b3:d8:b4:eb:
09:d5:6f:e8:3f:02:b1:21:dd:47:c0:a4:1d:62:c0:1d:c3:ab:
d2:3a:4d:33:ee:e9:7a:0c:ef:d7:3a:9b:02:f4:df:db:4d:b0:
9f:ca:58:6c:5a:99:4a:67:0d:e0:40:b0:44:0c:c8:82:c8:a3:
ce:69:58:d6:65:35:65:d7:f4:00:59:7b:30:e8:34:f5:8a:06:
22:7b:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:47:42 2025 by rpki-client