Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: a8tovXnhYacylEEwGjZiFh5E+JY2UJCfTfgVq7A8b+c=
Subject key identifier: D4:60:61:72:21:3B:E8:FC:B9:25:CE:E8:A6:3A:3C:DD:E7:70:CC:7D
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0197B7457376BF68DFB1FEF97F0D62FD9B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 1405
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: 8nAKIlrqM7fWYApTYNOHj0JKqODD9XrT5xEM3Gey4KM=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:73:76:bf:68:df:b1:fe:f9:7f:0d:62:fd:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=d4606172213be8fcb925cee8a63a3cdde770cc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:7f:7e:0c:58:cd:8e:f9:aa:11:e6:b4:ab:
67:a5:9a:0b:cc:18:ab:24:50:72:84:ce:4b:17:9c:
1a:e6:d9:19:2a:81:c1:c9:b4:6c:3f:8d:b1:1f:54:
38:4f:bd:bd:e9:1a:7f:96:db:b9:1d:a9:fc:b5:12:
e5:74:1f:60:b8:68:88:c5:a7:17:8a:37:3f:87:ef:
24:39:00:e8:ff:56:77:0e:3f:3c:e7:85:8c:e5:b1:
30:5a:53:17:a0:6a:20:d2:0e:ee:89:c3:6c:8c:e4:
fd:aa:49:b2:d3:b7:8e:6c:a8:9a:5c:52:5c:de:4d:
a3:18:b9:ce:46:81:43:ff:c1:d8:cb:0b:e2:65:8a:
7f:1b:48:d7:29:fc:47:a5:6a:5b:37:d7:c7:4e:ce:
49:8e:2b:63:9b:ba:70:d7:97:96:49:f1:be:06:02:
5d:91:dd:c5:96:02:d3:df:bc:91:ee:eb:b1:7f:99:
5d:60:05:9c:87:43:42:81:f4:e0:ea:0a:32:cd:fe:
dd:06:a7:2c:4d:cf:3a:1a:5e:f0:26:45:37:71:4b:
33:ee:f1:0c:c1:44:0a:f0:f2:68:05:16:53:04:5e:
a4:90:89:92:92:dc:0e:74:d3:46:79:22:6e:2e:17:
3f:2f:bf:76:73:0f:d3:e9:9c:46:5f:f2:17:92:85:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:61:72:21:3B:E8:FC:B9:25:CE:E8:A6:3A:3C:DD:E7:70:CC:7D
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:7f:79:20:57:bb:3a:da:d1:98:2a:53:e6:72:ca:f2:0b:
6a:07:15:da:0d:f2:61:49:47:c0:da:95:30:f2:ae:09:c2:9e:
f2:cd:2e:7f:db:a7:b1:62:cc:47:66:96:04:39:b0:b3:d5:dd:
10:bc:b8:ba:ac:5e:8e:0b:18:a0:35:db:b1:44:db:76:57:42:
72:29:72:8b:9a:c4:18:e0:62:15:e5:c7:57:e0:ca:d4:48:be:
57:2c:ac:7f:89:bc:97:5f:bd:f9:3a:2c:11:63:52:b6:53:bc:
6e:91:00:f3:9a:b4:f1:ba:44:0c:8d:4c:dc:d3:e8:72:21:ed:
e5:d5:7e:f8:40:72:35:93:ef:0f:c7:d6:60:9d:dc:78:7e:61:
10:01:a4:67:64:07:b5:33:dc:33:ff:49:12:93:b1:bb:bc:ae:
b9:7a:f0:16:9c:ec:6f:78:cb:b4:3c:29:6d:6e:08:78:ad:5e:
53:37:99:61:fb:07:a2:43:3a:cb:2d:e8:f3:44:c3:67:10:b7:
58:eb:56:3f:dc:5d:d9:ee:af:17:f8:11:3e:a0:a4:a8:13:f6:
67:3e:c0:75:8d:dc:2c:8a:e9:83:f2:41:46:74:68:0c:f2:0b:
5b:7e:fa:e3:2b:47:04:3a:ea:ff:a1:de:e1:71:82:02:38:9f:
c0:4f:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:47 2025 by rpki-client