Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: b+2FLrWdtc8bK4zO4qwbaCsGpQmni2OMo6JWAL8kpGc=
Subject key identifier: 94:68:FD:00:CB:A5:12:24:E7:0E:5A:D8:C1:C6:B9:F1:43:D3:A8:78
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 0197B6A0CF38FB78796F41CC3D6C5D5DEE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0627
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: W2kWYV1shI30O7x0MO7i9byLaz6WTOQke7MnmaEMA+Q=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cf:38:fb:78:79:6f:41:cc:3d:6c:5d:5d:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=9468fd00cba51224e70e5ad8c1c6b9f143d3a878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:21:38:29:1d:6c:66:83:75:b7:6a:54:20:
3e:b9:f1:5e:77:26:cc:90:b4:91:fb:28:a8:c3:f4:
a9:db:ca:a2:78:8c:04:5a:c6:7f:f0:2b:c4:fd:3a:
64:42:51:29:dd:f5:27:fb:83:55:26:65:c0:38:85:
e3:cd:cc:c9:52:7e:67:03:89:fe:1c:00:ef:38:ac:
3a:24:a2:f8:a7:64:54:4e:67:77:e5:0e:c9:80:5e:
8f:52:1b:ae:29:ff:3b:ad:28:4c:65:2d:0b:7c:c7:
b4:d7:84:2d:1f:fa:52:12:94:a0:12:1e:aa:34:b1:
4c:55:f1:17:df:c4:1b:15:80:79:57:29:64:7d:de:
c7:35:87:31:07:5b:35:48:d1:38:79:8e:b0:7f:0d:
70:ba:e0:45:9e:40:5b:e8:d3:5d:53:fb:41:8c:ad:
6b:1e:ad:a0:02:5c:d1:da:69:72:68:46:df:36:28:
3b:0a:b9:b7:31:9f:0a:8e:17:29:f4:e0:64:20:01:
44:12:8f:cf:32:ce:2c:5c:a0:a9:e6:fe:95:98:60:
47:44:07:f5:24:27:5c:e9:8d:6a:00:37:f8:a8:b0:
14:7c:2b:c9:53:25:a5:38:88:e4:cc:67:f9:da:cf:
94:d1:5e:0e:3c:e8:98:2e:be:a0:6f:a7:21:85:17:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:68:FD:00:CB:A5:12:24:E7:0E:5A:D8:C1:C6:B9:F1:43:D3:A8:78
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e4:b6:69:02:52:0d:7a:ac:15:60:a5:04:30:ac:50:07:1a:
f0:e7:19:4c:b8:d2:9a:f4:56:24:17:ce:f9:d0:6d:00:3f:4e:
0c:13:25:bc:be:6d:90:97:10:05:fd:40:c6:e5:6b:7a:41:21:
62:23:18:f2:98:17:71:5d:af:d3:b0:b7:f3:df:fd:fb:83:4f:
c7:f6:de:6f:97:f4:4e:95:e2:5a:d0:64:03:18:11:88:42:77:
9e:65:5a:95:b1:d0:42:c3:e8:40:d6:2e:9e:04:f6:b1:45:45:
c8:bc:2b:1f:56:fe:f3:7d:b2:98:86:ac:d2:b7:99:f3:43:53:
69:98:8c:42:e1:63:70:7f:1f:b1:ee:89:d1:77:e1:9a:f3:ad:
aa:cd:7c:1a:fd:ee:2e:70:66:41:47:28:18:0f:fd:ed:00:c9:
0c:16:4e:2d:ad:6a:11:3a:2f:23:1c:dc:38:b4:bf:1b:6f:07:
11:9e:1d:1c:be:8a:86:23:fe:ff:6f:08:83:e2:a8:56:de:e1:
8f:be:70:9d:03:a5:bc:0a:d3:9a:8d:c4:fb:e7:37:e9:91:96:
39:55:b0:ba:97:a2:bc:36:2e:c7:e0:84:36:80:7c:00:2d:09:
24:8d:4f:6d:ba:62:10:b0:72:e6:4e:26:d6:17:8c:02:bd:c6:
5b:20:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client