Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File: eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier: 174UuM/VhK7afwEEkThy6T0cpfIylE4/S+t0Q7H4Keo=
Subject key identifier: 91:E6:37:3B:7C:5A:E0:88:63:C6:22:E5:C2:AD:A0:F1:67:19:C6:44
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 0197B7EA7C8AE4E6CD0DB7B2D2A13EF02A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number: 0FAC
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: C9I9L672PlbWqQBGPXD-LljxFm8.roa (hash: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=)
2: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (hash: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=)
3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: vd7a1nPsI7IrZHHHKPpBdPb5FlkS8rDn/DvfwrRwoK0=)
4: gMIvq9YtCgOkL-7wopg1kqEgOOY.roa (hash: CP7S68jNnZq7f3001jUkejgDjHIYNSAYCHyxzvgL+hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7c:8a:e4:e6:cd:0d:b7:b2:d2:a1:3e:f0:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=91e6373b7c5ae08863c622e5c2ada0f16719c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:e0:66:a5:8b:6c:ab:d6:83:2e:0c:89:3d:
c7:d7:61:56:b4:f4:d6:5a:7f:eb:ab:72:9f:51:33:
37:45:84:e6:22:fd:df:e9:7d:60:8d:ed:ae:81:8b:
91:b5:76:18:07:8d:98:63:90:4f:bc:0c:4a:a0:33:
86:fd:85:32:3a:53:11:05:64:79:85:38:28:88:24:
cc:8a:a5:b4:1c:c0:8c:25:8e:3d:10:72:d0:28:2c:
b4:95:9a:f2:c9:c0:6b:e4:5c:b7:27:b3:2c:1f:23:
fa:af:3c:74:1e:a2:5d:fd:06:52:21:90:3e:f1:c4:
5e:62:0d:32:65:99:01:65:ed:20:dc:71:d6:a1:48:
d9:92:8a:a7:44:be:3d:a1:31:e8:2b:23:5c:02:be:
a9:27:03:e4:57:eb:1d:2f:af:36:87:5c:2c:9f:4b:
b8:a4:88:41:49:c8:58:e7:b5:cd:eb:15:fc:cc:7e:
3c:8e:3e:3c:ff:9f:82:48:23:5a:3c:93:d7:cc:1f:
8b:99:99:94:e2:33:ce:1a:92:41:15:91:22:8e:bb:
92:40:45:42:79:23:d7:b8:d0:e9:84:cf:fa:5a:92:
57:bb:a8:c7:8f:b8:4e:75:c1:68:45:a6:8b:3c:f3:
2f:39:69:1b:e0:b2:89:57:dd:3e:b5:7f:8b:b7:ea:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E6:37:3B:7C:5A:E0:88:63:C6:22:E5:C2:AD:A0:F1:67:19:C6:44
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:d2:d3:99:60:df:c7:c3:9f:74:fc:be:3f:24:39:b3:0c:
00:5f:3b:1c:09:b0:d2:94:7d:7b:b8:bb:8e:68:73:89:5d:56:
fd:a7:f7:74:1a:f2:8f:a5:e3:cf:0a:7a:f0:40:79:0e:bb:17:
13:68:24:03:dd:ef:13:92:4b:34:90:d7:e1:fa:cb:60:87:ba:
87:54:c6:d7:ac:88:eb:26:ac:75:f4:73:c2:6c:13:14:e2:e4:
81:98:35:b2:dc:e4:8a:d5:79:b8:93:b7:2e:01:87:e0:6d:40:
d3:0f:ac:da:3c:85:6e:88:cf:01:f0:9b:3f:c9:11:c4:dc:d2:
59:ba:52:06:ad:60:dc:f7:1c:ff:5e:50:bc:ed:d9:3e:d4:3d:
d9:1a:ec:85:dd:c3:94:0a:e7:16:97:51:3c:4a:cb:a9:8d:d8:
06:69:66:7f:ee:bb:d9:fc:86:13:8e:b4:35:9a:b2:8c:67:3a:
75:33:06:2d:e7:c3:c1:c2:ed:b6:06:b4:a0:1f:d4:7e:d9:7d:
2e:ea:0d:91:66:3b:4d:3a:8e:46:b3:1b:c5:0a:9a:f9:52:66:
6b:e2:5f:55:24:3c:f9:b4:11:9d:29:19:cd:59:74:f4:5b:54:
52:6b:f6:12:f4:4f:e3:12:a6:f5:33:26:36:53:88:98:4a:77:
b7:8e:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:30 2025 by rpki-client