Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: UlD6t8L0BOAFoiy5MlgbxllurTiJWEmRMesa0SfOAPM=
Subject key identifier: E5:A1:1F:5C:71:02:0E:2E:A4:F2:61:86:A3:E4:BD:18:F6:C4:E4:5D
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 0197B8900ADE607C6340EDCA04FC43117B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 1091
Signing time: Sat 28 Jun 2025 22:02:17 +0000
Manifest this update: Sat 28 Jun 2025 22:02:17 +0000
Manifest next update: Sun 29 Jun 2025 22:02:17 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: QaP+N/tPJ0I9GwOpV4jCchi411dnWYn2c4vOHwtTbQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0a:de:60:7c:63:40:ed:ca:04:fc:43:11:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Jun 28 22:02:17 2025 GMT
Not After : Jun 29 22:02:17 2025 GMT
Subject: CN=e5a11f5c71020e2ea4f26186a3e4bd18f6c4e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:4f:fd:78:db:15:45:d3:53:8e:dd:80:36:
00:b5:8c:fd:d7:97:e8:8a:36:3e:bc:44:fa:55:fd:
5b:52:68:0b:55:a6:68:2e:84:74:8d:11:37:86:66:
70:26:7b:9d:d4:7b:3c:4e:2b:28:0d:5e:fc:8e:48:
60:5b:08:12:ca:55:02:f9:db:e0:06:19:ca:03:8f:
7a:f1:51:e1:e8:8a:bc:40:e6:42:01:b8:8e:9e:f6:
05:30:a6:03:8e:9b:d3:6e:53:f1:1a:f8:ed:ba:69:
0d:f8:1c:cd:f4:77:73:34:45:ab:2e:cb:b1:f7:d0:
3c:18:e1:f4:07:11:e0:39:b0:97:c5:19:15:c8:ab:
3c:ed:dd:27:ba:8a:69:09:80:15:e9:d6:4a:18:77:
23:18:1d:79:c3:e5:b4:c9:93:0b:34:9e:c1:89:e6:
c4:57:7a:e2:92:1e:f9:19:93:95:5c:de:29:95:d1:
e4:45:3c:0e:51:58:4e:23:03:d3:40:d5:31:4f:3d:
f9:a7:1b:02:6a:09:e3:ff:3b:d3:f2:49:01:a9:a4:
64:6f:cd:5c:92:13:70:03:85:de:9c:f1:cf:53:6b:
fd:2b:29:0c:fd:8d:bd:2a:36:56:8b:0c:31:b8:dc:
93:fb:e3:0f:6f:96:61:91:53:55:e0:97:48:b5:9c:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:1F:5C:71:02:0E:2E:A4:F2:61:86:A3:E4:BD:18:F6:C4:E4:5D
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b9:f8:14:3f:61:26:a9:aa:14:35:87:4a:78:81:24:42:e2:
e8:43:63:d0:4d:03:b7:4b:76:95:b8:24:c2:6a:d0:38:46:f6:
41:42:11:bc:22:ef:da:79:fa:44:53:db:94:49:16:40:31:45:
9f:4a:40:26:f5:24:20:db:bf:6d:fa:60:fc:4b:e4:9f:8b:65:
ac:21:94:2c:69:eb:70:cf:8f:5f:e7:2a:53:33:c7:10:0d:81:
49:e2:fe:41:0d:66:af:86:41:c7:51:88:49:df:a0:57:ce:95:
20:af:86:5d:a1:7d:54:10:af:56:81:82:91:d8:e5:e2:9f:15:
3b:34:45:4c:9b:26:ca:c1:bb:5e:ab:12:9f:c3:2a:a7:44:73:
9b:88:e8:ff:9a:34:2f:9a:37:c6:52:0f:80:86:f9:40:aa:34:
cd:28:cc:7e:8f:1e:af:fa:21:7d:c9:d7:cb:71:94:b9:61:ad:
62:89:59:01:ee:80:bc:9e:4f:24:78:79:66:0f:25:fa:47:3f:
a6:81:b5:16:af:27:3b:b6:a8:35:b1:27:32:5f:27:5a:a6:39:
70:ec:16:61:ed:0e:5a:34:bc:22:43:88:e2:00:a6:ce:25:26:
d7:35:a9:7a:a4:8f:ff:5a:38:80:ea:4f:98:eb:42:49:a6:33:
85:c2:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:10 2025 by rpki-client