Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: 5eobASpkTZDW7wf6MWmfy/zkfOVmRGx9qXrfEdPB8E8=
Subject key identifier: D9:DF:F5:06:32:31:C3:0F:31:3B:9B:28:2A:54:12:B1:A1:8F:DE:15
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 0197BAEBBAB1F63110C42CE4F6A9C65870FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0A10
Signing time: Sun 29 Jun 2025 09:01:40 +0000
Manifest this update: Sun 29 Jun 2025 09:01:40 +0000
Manifest next update: Mon 30 Jun 2025 09:01:40 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: 9aFCj45wsGsQjki70wJH/PbVswA6bbOTBZDZKEPmFRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:ba:b1:f6:31:10:c4:2c:e4:f6:a9:c6:58:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jun 29 09:01:40 2025 GMT
Not After : Jun 30 09:01:40 2025 GMT
Subject: CN=d9dff5063231c30f313b9b282a5412b1a18fde15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:91:3a:93:d8:08:7b:1f:79:79:b6:2e:ef:
18:44:c1:ef:89:58:d4:f3:92:82:ca:af:95:a3:c4:
15:14:18:b0:ca:8e:54:2d:1e:22:c6:98:d9:c8:93:
80:4e:82:d7:3a:5b:7f:19:bc:26:e2:79:57:22:2f:
9b:cb:39:71:39:2e:4b:d3:db:d4:ec:15:7e:21:7e:
54:da:9a:ef:b0:eb:13:c4:62:7a:fc:87:03:92:49:
4c:de:59:09:2c:c6:75:77:d7:28:d9:94:73:80:6f:
cd:71:e2:43:a2:4d:e6:21:93:4c:9c:c5:98:73:ed:
c1:9d:f9:13:4a:5d:06:b8:43:db:ad:88:5f:2e:d5:
83:4b:99:d5:6b:bd:03:46:0f:4b:9e:10:c7:2d:d3:
76:2a:9d:b1:d8:67:f4:7f:db:a6:dc:ce:b3:96:7b:
30:a7:e4:34:0e:93:db:75:a0:9a:12:13:3a:da:c4:
fb:3f:60:c5:5f:4b:c0:58:ed:be:ed:f8:9a:92:39:
2c:6a:9b:31:3c:46:bf:d1:d1:e4:bb:71:66:ec:33:
5d:6d:20:e7:e5:ac:d7:45:c1:99:f4:2a:c9:62:f4:
70:75:1d:7f:7a:3f:2b:14:89:55:d6:bb:af:4e:f5:
8b:c4:87:ba:4e:6a:27:34:28:a4:76:07:d2:95:b6:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:F5:06:32:31:C3:0F:31:3B:9B:28:2A:54:12:B1:A1:8F:DE:15
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c1:2f:a7:b1:09:33:3f:51:de:47:28:3c:32:d9:0d:80:89:
40:be:eb:87:4c:72:2e:62:16:2f:18:e6:df:91:b2:af:da:9f:
b5:a1:d4:3d:2c:56:88:ed:f1:70:a9:d0:a4:38:ec:97:64:ad:
69:46:54:02:b9:ff:2a:78:be:cd:2f:0b:ae:19:4a:33:d6:0e:
87:9e:e6:0a:87:58:9f:05:fb:4b:b3:fd:d3:82:d7:a3:03:99:
69:76:5f:d5:4e:11:47:a7:8a:44:e3:33:2e:f3:6f:3a:8d:03:
83:b3:03:17:0b:cb:82:55:52:98:71:46:78:7b:10:7f:fe:11:
c7:5e:4d:e2:c6:c4:a9:58:f7:1e:fd:db:60:ad:3b:24:41:54:
19:84:05:02:03:ae:c3:dc:7b:c2:0c:98:03:4d:22:37:85:f9:
1f:6e:26:13:80:a3:cf:60:e2:78:87:3a:96:c6:74:16:9a:82:
95:c4:55:27:85:6b:de:93:2d:89:4e:00:5a:68:ee:45:b4:e5:
75:2d:a1:bb:ec:85:88:10:c4:61:f9:18:31:60:a0:f2:2b:13:
5b:68:e3:b7:36:68:1c:80:2f:44:fb:3f:b6:3b:3e:d4:66:7b:
1c:c0:2e:af:f3:5b:71:6d:cd:c7:c1:bb:6f:76:06:ed:eb:dc:
36:b4:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:26 2025 by rpki-client