Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: LO0uGg3GAiEfIab1jzsUSIdE42hEvGIo2axT7WD3LfY=
Subject key identifier: 91:9D:2F:0F:5B:04:3F:65:2C:5F:4A:A5:A2:01:25:26:13:8E:26:C7
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0197B890015E428393AD5592515EB0CA3517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0B59
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: yJei1ISauTHi86WkOizInFc9Hh3vZDyJseqULQ5iC7E=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:01:5e:42:83:93:ad:55:92:51:5e:b0:ca:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=919d2f0f5b043f652c5f4aa5a2012526138e26c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:21:b7:a3:98:8c:a1:8a:f3:d4:20:0a:2a:
2c:bd:b6:84:e4:2c:b1:c2:b6:9e:47:00:b6:d3:47:
52:09:61:06:7a:bf:ee:40:16:60:4b:52:83:d0:9d:
bb:62:c4:12:d9:de:10:d0:41:6a:ca:12:50:a8:35:
db:6a:e8:44:1c:7e:d2:23:a6:99:60:be:0e:9c:70:
12:e6:79:a6:05:0d:56:0a:80:d4:2c:a6:41:c4:fe:
d7:a8:a9:7a:f3:a2:f9:fb:fe:29:ee:35:b3:e9:e2:
ea:a4:65:c5:cc:3b:13:3f:41:9a:75:b0:be:6e:b7:
6f:94:05:f6:b1:ca:0f:43:af:b0:c3:06:92:c9:0d:
b3:0b:5d:4b:43:01:0e:65:ae:2c:a0:12:aa:0f:3c:
01:b9:66:f9:3e:74:df:cd:69:18:50:0f:bf:9b:70:
fc:1a:fe:9d:31:84:71:4a:32:16:27:78:dd:1f:32:
cf:74:39:af:e9:37:a6:e8:0d:81:8b:82:1e:c7:db:
04:be:27:39:08:41:21:21:d0:c7:24:d8:1d:5c:c9:
9a:29:ab:1b:96:fc:76:af:01:0f:03:5b:1f:9e:28:
cd:bf:4c:63:ee:06:29:61:95:4d:8c:f6:80:96:f5:
8f:1c:a3:e7:70:4b:f7:0b:46:6b:41:5b:fd:70:a0:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:2F:0F:5B:04:3F:65:2C:5F:4A:A5:A2:01:25:26:13:8E:26:C7
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:20:95:2c:e9:c0:71:15:52:1f:47:c4:8c:dc:dc:dd:2c:
fe:2c:0d:57:a6:76:25:05:4a:60:cc:5c:2c:33:2f:3f:4e:67:
4d:e6:f9:5c:d0:d3:3f:67:3c:d8:d8:5f:be:ca:fd:c8:d9:d4:
b0:a2:a0:c5:01:6c:82:62:9d:b3:86:59:a4:3b:c7:54:66:51:
48:f3:9b:5e:0e:7c:df:82:68:29:98:b4:fc:fa:b8:78:15:c3:
d7:21:ee:52:a7:a9:d2:fc:c2:7a:2b:a4:31:0d:ff:89:0a:2c:
4a:55:5a:a8:61:e3:32:e7:cc:ed:66:43:49:e6:7b:8c:ff:1c:
68:29:ea:cd:6f:ec:c7:2f:6e:23:7a:9d:71:20:04:98:c1:69:
93:8e:74:f4:c5:57:44:da:2e:aa:1c:37:1c:5d:3f:fe:42:46:
cc:f4:e1:e0:b1:11:d1:3e:79:02:1d:2f:b0:3d:f8:90:9e:fd:
fd:77:e4:44:ad:7d:1e:6e:ba:87:24:47:0f:09:e3:c9:8b:45:
8b:80:23:ad:f5:92:56:f7:ca:0f:16:cd:c3:02:27:06:80:07:
6e:4a:c8:5e:f1:e3:06:1c:bf:bb:d8:76:bd:39:1b:c2:2e:f0:
39:d9:32:83:00:05:26:0a:1e:64:24:3e:0f:73:07:cb:30:91:
2f:29:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:51 2025 by rpki-client