Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 91ARWL0HlpMLomKZsdI2QiazIL11iNoyK2emEeaxUHw=
Subject key identifier: 9E:56:69:66:63:7D:59:CB:58:49:E6:7E:5F:14:88:81:A4:46:EB:E7
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0197C8DD855BD1AC10BA692A48B607E84AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0E70
Signing time: Wed 02 Jul 2025 02:00:50 +0000
Manifest this update: Wed 02 Jul 2025 02:00:50 +0000
Manifest next update: Thu 03 Jul 2025 02:00:50 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: px11oJNaZci+I0DE+HnRU6H3AdQsSsuhiWUSKshrX3s=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:85:5b:d1:ac:10:ba:69:2a:48:b6:07:e8:4a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jul 2 02:00:50 2025 GMT
Not After : Jul 3 02:00:50 2025 GMT
Subject: CN=9e566966637d59cb5849e67e5f148881a446ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:85:e6:c5:8e:db:66:f6:ef:e3:08:fb:5e:
7f:db:e7:f7:32:7f:e0:14:c1:90:c2:a8:72:01:6f:
fb:54:f7:6c:e9:ab:a2:58:af:67:48:68:41:4e:05:
ae:4b:20:22:21:33:d6:5a:5a:8b:6e:67:cb:ef:c2:
15:96:b4:35:cb:71:df:4a:35:4f:1d:38:2a:18:3c:
01:93:e0:04:f0:12:0c:2d:3e:e7:a3:46:5c:cc:c7:
67:05:14:61:5d:ae:db:11:64:eb:7a:09:7a:10:56:
5a:64:47:d9:9a:f8:8d:93:c9:9e:00:6e:fe:48:89:
76:c4:2d:34:b0:c2:84:11:56:79:3e:aa:7a:20:82:
6f:cb:4a:44:45:13:07:8b:1a:ed:63:92:53:0a:fd:
38:2e:95:23:6c:f4:13:32:82:49:55:17:4b:bd:31:
34:e4:e1:76:1b:18:29:cb:0e:05:7c:24:6c:0e:60:
77:f2:fc:dd:db:ba:6a:e9:33:1d:0e:cf:a1:42:89:
ee:5f:9d:cf:b2:12:7e:b3:c0:d5:4b:d9:f7:fc:fd:
59:62:4b:11:ac:c2:55:96:cd:b9:47:7e:d0:b5:7a:
af:71:0c:a7:0d:18:66:2e:0b:de:7e:fa:8c:db:96:
78:a6:5e:4b:3a:05:f0:06:99:b8:17:9b:bb:ce:90:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:69:66:63:7D:59:CB:58:49:E6:7E:5F:14:88:81:A4:46:EB:E7
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:aa:d9:56:fa:c6:8f:96:63:f8:5b:29:9c:24:3b:90:5c:af:
73:a2:05:d8:d0:9a:21:b6:6c:fc:e0:9f:8f:59:df:a7:9f:49:
05:13:26:7d:21:79:ae:9d:0f:52:7f:89:da:8d:23:3f:56:0d:
26:51:14:f4:0d:7a:04:4d:6e:2e:de:fb:19:ab:94:b4:9c:dd:
52:7a:86:e3:21:bc:1e:57:36:a9:09:72:6d:44:2c:62:0d:24:
49:71:f5:f2:10:74:46:08:75:16:48:79:d4:90:c6:38:4d:ee:
33:55:4c:3a:46:b8:ea:44:e2:1b:b2:7c:26:16:d4:0e:a6:cf:
83:3b:3a:93:da:a8:c9:fa:58:6d:df:3c:50:37:6a:50:f6:ac:
8f:1b:10:3d:6b:a8:93:a0:1c:b0:58:96:8b:35:04:50:17:f4:
7c:45:a3:51:54:19:34:c3:eb:e7:99:7b:db:9f:fb:fa:ae:58:
59:4a:bf:b3:27:ba:13:3d:2e:db:1c:cc:06:61:d7:f2:63:a3:
ed:ca:c1:04:c1:d6:29:cb:95:a4:a7:a5:ec:4b:e3:c2:87:b2:
15:7e:de:3b:90:15:2b:3c:6c:42:cc:d7:4f:6f:6b:ae:9d:9e:
a1:ba:f5:0d:76:24:a8:3b:25:27:0f:4b:c9:a1:54:fd:c3:d7:
33:5a:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:05 2025 by rpki-client