Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: u6cmRYYqasj4kAOEi38XXXeJ7TiEBuUpiBnWZzRguuw=
Subject key identifier: BE:5E:79:DC:C6:98:D2:7A:3D:E7:A7:84:18:D5:30:33:2F:9F:D4:56
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0196C4CBF64FDD2BDB4C0602F5F0F258FFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0EA0
Signing time: Mon 12 May 2025 14:00:23 +0000
Manifest this update: Mon 12 May 2025 14:00:23 +0000
Manifest next update: Tue 13 May 2025 14:00:23 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: fOiGgPR+/w6J+HxJEDOu2ipwMaYKA9ZN402ELS/E9/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:f6:4f:dd:2b:db:4c:06:02:f5:f0:f2:58:ff:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: May 12 14:00:23 2025 GMT
Not After : May 13 14:00:23 2025 GMT
Subject: CN=be5e79dcc698d27a3de7a78418d530332f9fd456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:ad:b8:ed:a3:48:83:0f:e0:df:48:29:66:
03:76:cc:d4:d3:8e:be:17:b5:f0:93:6d:94:6f:b3:
18:93:48:79:bc:f7:67:72:43:e2:ab:d2:4b:58:d8:
aa:4b:75:b6:8a:92:ed:4b:0c:ea:3d:24:bc:ce:6a:
6f:39:59:7c:bc:04:1a:cf:28:9d:3a:72:80:f6:9e:
31:62:28:09:02:a7:f3:57:5a:2e:6e:36:ba:4d:6f:
23:ac:84:02:6e:44:ff:88:a4:25:e5:35:f9:81:23:
ba:dc:84:c5:56:a1:e6:ee:c3:33:17:b5:89:63:72:
d7:6d:c0:0a:00:da:27:7b:97:e5:6f:b9:57:db:58:
ee:98:bb:53:f3:f1:5c:4f:e3:43:f8:cb:08:d8:78:
33:02:b1:2c:1c:82:80:51:8a:31:27:4a:70:ab:dd:
af:80:71:59:5f:20:0b:31:58:b0:ce:8c:84:b5:6d:
01:c4:5b:6d:63:47:71:a7:f3:53:c9:c1:d8:fc:f3:
e2:d1:e9:4b:0c:b1:3d:e9:2c:65:0f:2d:e3:0c:ea:
56:3f:1c:f6:03:4e:0c:48:cb:7c:b8:d0:d4:7d:fc:
88:d0:0e:09:22:e2:2a:db:b1:7f:e7:df:4a:3c:a1:
e2:42:70:5a:9c:fc:7f:70:a1:1b:74:0f:38:2d:44:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:79:DC:C6:98:D2:7A:3D:E7:A7:84:18:D5:30:33:2F:9F:D4:56
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:72:ca:f1:98:14:a8:b9:ba:d9:80:fb:d9:2a:21:e8:d7:e9:
c9:f2:5e:85:48:ba:28:83:37:66:63:65:d5:14:2e:3f:09:1b:
dd:ba:21:83:c3:75:8d:1a:04:8c:f8:b4:c3:5a:48:46:be:b4:
41:c6:89:03:54:55:dd:b1:a9:1a:b7:d3:4f:0e:8f:35:f5:4b:
f1:c0:4f:7f:1f:aa:77:c3:53:13:21:e6:96:c7:b6:aa:b3:d0:
cd:6d:96:89:e0:48:38:b6:de:fb:03:66:01:24:1e:fb:c0:b7:
8c:43:8b:3a:6f:5e:22:e4:b9:28:1f:4c:aa:db:03:ad:65:ad:
36:37:ce:6e:af:6e:fb:78:4d:fb:6d:37:67:df:6b:2b:3d:0e:
14:4c:41:e4:84:b7:5c:ce:93:47:d9:35:94:61:ae:1b:71:bd:
d7:88:aa:c5:7b:73:2d:04:51:8c:8d:0f:81:f1:11:43:cc:f4:
1b:51:b1:0a:67:97:43:5d:b6:dc:af:30:a0:94:90:a2:cb:5d:
39:c2:75:fd:3e:c3:fb:c0:c7:94:b1:69:76:6a:46:1e:cc:0e:
3b:13:2c:0b:8c:9f:48:fb:ac:4a:19:58:8f:b5:2d:63:f6:b8:
41:35:e2:a2:9b:cb:7a:56:06:75:54:b9:ba:53:2b:5c:3f:84:
09:9d:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:54 2025 by rpki-client