Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: pzNWkf4hPt100uWTNSTNHKuyczlMdlPl0L7Ruqg4fWs=
Subject key identifier: F5:43:07:6C:34:37:2F:DB:F0:05:13:C0:0B:A9:8D:B2:2A:72:8A:6E
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 0196BF6F8BA27FCD0843941CAE10F1DC852C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 13:01:20 +0000
Manifest this update: Sun 11 May 2025 13:01:20 +0000
Manifest next update: Mon 12 May 2025 13:01:20 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: 7QC480BIGOrXVzW8WQgm1RVFGFwq93aWQJ8ysw+q8xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:8b:a2:7f:cd:08:43:94:1c:ae:10:f1:dc:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: May 11 13:01:20 2025 GMT
Not After : May 12 13:01:20 2025 GMT
Subject: CN=f543076c34372fdbf00513c00ba98db22a728a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:2e:8b:e7:4e:c0:11:81:db:40:88:02:20:
ba:a2:c2:de:fd:14:1c:68:66:2f:95:3e:7d:6b:f1:
ba:73:dc:39:51:fb:d7:77:1b:95:27:96:dc:47:79:
b4:c1:29:99:e1:2c:e7:18:e1:31:ff:86:6a:0e:95:
ba:1f:c8:19:a8:a2:cc:c1:f0:a7:fb:2e:70:5f:8f:
ae:52:58:2d:1f:68:ff:6d:61:fe:82:93:9e:b5:fa:
4f:46:8c:23:ef:3b:1b:da:b5:bf:69:4e:a2:11:fe:
c6:4f:45:74:ab:64:1d:50:3a:0f:d5:e8:0a:1e:0d:
90:0b:4c:83:fa:65:9c:41:d9:94:12:33:61:e6:4f:
41:ca:1c:fc:40:0f:a0:8d:cd:a3:f1:31:01:22:1f:
d9:29:6c:ba:95:c4:27:50:be:64:01:d3:69:00:76:
00:92:c2:e9:40:0f:b7:a4:fc:db:21:64:e5:5a:2e:
28:1b:17:ff:8d:77:bf:d4:44:d6:0f:0e:25:8f:04:
9d:55:63:0a:72:86:21:57:bc:17:07:61:d5:13:06:
02:4a:4e:ee:4e:25:1f:55:5b:77:fc:12:78:64:6a:
39:ad:33:58:5b:a3:7f:93:f3:65:56:56:b1:41:df:
e4:b3:cc:ee:61:98:65:aa:4b:30:ea:28:01:3a:aa:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:07:6C:34:37:2F:DB:F0:05:13:C0:0B:A9:8D:B2:2A:72:8A:6E
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3f:0a:d4:1c:e6:d5:f4:9b:ed:1b:0f:2e:1d:30:14:f6:2f:
a1:71:6b:2b:0a:35:d0:17:b2:a0:f3:e0:98:4d:be:63:52:33:
2d:21:e1:a5:04:84:3f:37:09:fa:b4:70:88:cb:a8:9f:11:7e:
31:2d:d6:04:78:94:01:79:26:ea:ac:94:f6:09:65:44:a0:32:
fc:86:ab:06:f4:c9:58:62:c0:5a:31:52:a4:fc:f0:a0:f5:c1:
30:b1:23:c7:68:e8:1f:8b:92:f0:d3:43:2b:7a:41:89:27:c6:
3e:67:63:51:d2:73:77:43:6b:a2:5c:42:2d:26:f7:2c:e0:88:
ed:61:32:ab:b5:eb:2f:1d:fc:c5:60:c4:b4:8c:d1:52:51:81:
4d:3e:bb:5b:93:25:3c:38:b1:7f:28:8c:71:2d:74:74:d9:c8:
42:c8:7e:46:1f:2e:3b:63:14:f6:3a:fc:c1:78:8b:d5:ab:32:
eb:8b:fe:1c:17:a4:40:b7:aa:b1:2c:e8:96:e8:93:01:38:7d:
b8:50:57:d6:5d:ba:34:06:6d:4f:1d:98:54:37:e3:50:68:85:
86:82:13:36:49:6e:65:55:1f:f6:d0:84:55:c2:4d:31:c1:70:
30:f2:5c:3f:ce:da:c6:4f:a4:f0:18:8a:b0:c4:e4:f2:db:cf:
95:7a:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:00:30 2025 by rpki-client