Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: naESGins8Wdh4BcUmsVG4RWLJo9CdmST/jIQdTkOmiM=
Subject key identifier: 57:1C:9E:39:F5:07:CC:C4:14:F5:74:AE:6B:26:8C:FF:99:5F:A9:CA
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 0197B77C2CC8CE56460F7D6DE3F38D007339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0CA2
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: h2jZohynz6z0VmkWwl13bLEy2mPjuNrc1Zm8V9IDhos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2c:c8:ce:56:46:0f:7d:6d:e3:f3:8d:00:73:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=571c9e39f507ccc414f574ae6b268cff995fa9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:ca:6b:69:ce:a1:dd:5b:f5:e5:c0:4b:a2:
69:26:89:02:45:f8:f7:a2:85:45:05:d9:1e:64:eb:
2b:8c:25:65:60:7d:c3:5b:63:78:a4:b2:5c:5f:bc:
a0:0e:74:a3:41:05:a9:d2:ab:ae:5e:45:f0:8e:58:
3c:07:23:9a:b5:a4:a2:d8:26:f1:88:3b:ad:e5:3a:
49:02:aa:36:fd:32:7b:d7:d6:7a:72:f6:09:84:84:
37:08:f1:60:f1:d2:18:36:ec:ae:e6:28:15:05:00:
8d:35:98:18:86:6f:89:75:17:48:c9:0a:41:93:ec:
02:37:1f:fe:8d:a9:b1:83:8b:09:32:43:9f:ad:4a:
16:7a:e2:f2:b7:99:a5:44:c7:55:05:6c:07:46:9c:
92:9a:2a:81:a6:78:59:e7:e5:95:6a:43:ad:1a:8b:
b8:14:e0:b4:ce:31:d3:29:5f:0f:20:c1:17:ed:4d:
18:87:94:3c:e3:8a:51:b9:3d:84:ab:d2:60:ce:46:
1e:f0:ba:5c:0b:80:4b:a0:c0:d0:ea:d2:54:a6:88:
3c:f6:08:cd:d6:b9:91:9b:d5:b3:b1:2b:a7:d1:f8:
5c:ca:f0:74:fd:68:c0:0c:78:41:e4:0a:69:9c:aa:
d4:fd:5b:a7:79:92:92:43:39:8a:6d:e7:a8:12:33:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:9E:39:F5:07:CC:C4:14:F5:74:AE:6B:26:8C:FF:99:5F:A9:CA
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:25:4d:39:c4:44:e3:f4:07:42:d4:10:66:14:cf:94:5a:
3a:38:f9:7e:b2:c8:c4:4c:d1:50:a6:7c:98:f5:bf:df:c9:bd:
60:92:ed:6b:0a:54:e2:f2:fd:22:c9:4b:8f:93:bc:32:ec:ee:
2d:50:0f:03:fb:77:fb:2e:e8:0d:5c:6c:66:1f:6c:0a:68:74:
95:4f:54:50:9c:43:1e:02:e5:92:6e:74:67:98:a9:2a:b4:ee:
7e:4e:db:f0:3b:cb:71:01:e5:9e:cb:12:5f:f7:2a:7b:6d:ae:
46:e9:bc:0a:90:4e:e9:e8:d4:0d:c9:ae:4d:db:06:05:64:87:
61:19:c7:91:5b:cf:f9:27:04:70:f8:3a:c3:26:9c:9a:10:db:
7e:6a:eb:63:71:ea:f6:b3:84:de:3b:3d:c6:8c:c7:c5:f1:60:
77:25:17:9c:e3:bd:8d:1a:60:43:2e:bb:01:db:06:5d:dc:cd:
e2:ce:24:1f:34:da:95:65:4f:a8:ab:ea:d0:e8:72:71:83:76:
3a:66:e1:f0:22:11:92:1d:4d:05:20:84:aa:a0:b2:8b:48:1b:
80:46:4f:87:df:84:33:4f:2d:ed:e8:a5:9d:df:2b:b9:23:eb:
fe:1b:15:e0:37:39:6e:10:ef:16:9e:41:fc:da:4d:05:f8:61:
4f:24:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client