Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: aZwFESzAHpVgntWlJjARZqd4ZHVbE379005i39KEkFQ=
Subject key identifier: F9:AF:81:3C:79:EA:6D:23:AA:43:7D:33:6E:6E:3F:5D:5C:AA:42:C9
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 0197B7EA930DD09F63B2ECFDAD4F13E2B945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1477
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: 2dYbtTAcuypso3tMlKlXp9D4DdInnABPjMX78NNkxZI=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:93:0d:d0:9f:63:b2:ec:fd:ad:4f:13:e2:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=f9af813c79ea6d23aa437d336e6e3f5d5caa42c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:2f:11:cf:06:70:8c:48:40:ba:44:45:3b:
21:dc:f0:54:5b:6f:31:56:0f:2a:0c:14:6b:d0:fb:
a5:32:99:3c:47:a3:40:85:d1:d2:8d:9c:b4:a5:3d:
22:3f:22:f3:4b:7e:81:f5:fa:86:dc:79:a2:a1:33:
32:8c:7b:87:af:b1:b5:28:48:11:13:21:90:dd:cc:
34:ba:5c:52:37:07:df:6c:4b:65:25:4a:2b:e0:f1:
33:f4:93:54:99:e0:eb:c2:dc:96:59:d5:7b:b6:7e:
a9:72:5e:bc:cf:4b:1f:27:76:d9:77:bd:f8:e3:b8:
13:b4:88:21:3a:b0:8f:27:9a:2f:29:32:43:7c:8e:
e7:d7:94:0c:58:9c:a9:f1:7f:09:ad:bb:e4:63:d2:
6d:3e:f7:6f:72:e9:16:87:22:f3:49:2c:f8:93:3c:
21:94:40:89:45:2e:15:0b:ad:fd:f3:c7:04:6c:21:
d7:f6:f2:30:98:f7:db:4d:13:4e:d7:d4:94:39:ac:
0a:69:72:bb:d1:1d:2f:15:9f:3e:13:60:67:8e:33:
d7:83:de:96:bf:60:12:9e:36:1d:fe:ee:ca:22:af:
b9:34:83:82:2b:59:3c:8f:16:e6:fe:4a:b6:eb:23:
bb:ce:d1:2b:22:56:df:d6:7d:2f:61:dd:44:59:17:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:81:3C:79:EA:6D:23:AA:43:7D:33:6E:6E:3F:5D:5C:AA:42:C9
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:75:1c:9e:d3:85:42:9f:2f:01:08:db:af:e8:16:0c:31:f0:
17:be:ee:fc:1e:77:f5:36:00:45:0d:6c:59:91:e8:f1:43:8c:
af:2d:08:10:f1:6c:ea:ed:42:c2:bf:96:cb:77:8e:3c:6e:f9:
50:80:ac:8e:91:04:7b:76:0c:91:2e:ee:b7:17:95:e4:2e:0b:
f0:46:ea:9e:c6:22:fc:8f:24:ee:2f:23:fb:a5:53:80:cb:7b:
82:03:b8:31:64:ff:d0:33:26:79:64:99:89:1b:39:79:77:02:
e2:8e:b7:b2:8e:de:9c:bc:48:fa:87:78:28:b1:49:c1:9c:d2:
6e:74:29:c4:90:7d:dd:c9:b0:1f:e3:54:de:64:f2:68:94:83:
7b:a5:cd:28:5a:0a:cf:ce:8f:8b:46:e6:23:db:14:6c:cd:01:
26:a5:81:0d:ec:1e:dc:ca:7d:9d:17:ae:32:64:a5:b0:06:7a:
62:fd:19:5b:22:48:d9:90:c2:3e:f2:bf:27:cf:55:d0:f4:ad:
69:71:eb:6c:f6:b9:31:72:c9:57:53:f2:05:e4:82:cb:f6:d9:
c2:5d:2b:06:cc:7a:31:3c:a6:34:c0:c5:34:e0:72:af:5b:34:
13:61:67:77:04:8e:03:f5:b1:49:50:26:a4:19:67:c9:9c:5f:
c2:af:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:48 2025 by rpki-client