Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: M4haUfFRu3aXKp5dQEBvmYltWT4H9awvSwmzk+izKNU=
Subject key identifier: E4:D0:4F:1D:8F:01:D8:FF:16:26:64:5C:69:47:2C:69:32:C2:10:0A
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0197E00A6B5955AB826079F8AA7456BCBE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 15CB
Signing time: Sun 06 Jul 2025 14:01:08 +0000
Manifest this update: Sun 06 Jul 2025 14:01:08 +0000
Manifest next update: Mon 07 Jul 2025 14:01:08 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: ZkjUriRAr+4olUIBDVo4YmcEPMSWnXEKOYS7bSJ6Z7Y=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 07:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:0a:6b:59:55:ab:82:60:79:f8:aa:74:56:bc:be:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jul 6 14:01:08 2025 GMT
Not After : Jul 7 14:01:08 2025 GMT
Subject: CN=e4d04f1d8f01d8ff1626645c69472c6932c2100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:c4:08:18:6d:dc:19:f8:da:5f:ae:6d:cb:
d0:3b:f1:00:b2:69:bf:e8:5a:bd:cf:28:e7:89:6e:
6e:04:61:eb:08:00:6c:72:d9:cf:fc:cf:86:0a:86:
86:e8:0c:6e:9d:d6:43:52:8e:9b:f4:35:68:3a:e2:
bb:2c:46:e4:61:c8:77:a3:58:25:3a:58:41:6a:09:
c0:68:5d:25:89:b3:1a:d9:ba:89:31:4e:fe:1b:ef:
37:65:fc:46:a3:ed:1a:73:c9:7e:69:25:0b:0c:b3:
77:dd:2c:fa:68:78:7d:25:45:2c:44:38:10:a2:9b:
d1:99:8d:01:61:c7:17:ac:47:17:1e:74:ab:ca:21:
da:77:6f:8f:ab:67:df:60:10:da:83:ff:ca:3e:60:
07:a6:27:61:18:b6:0b:37:ac:d5:4e:d7:2f:e6:06:
13:f1:b0:d7:f4:5d:46:ce:47:56:29:c0:f1:10:82:
cd:ed:6c:59:ec:0f:db:75:45:78:02:3a:dc:a6:c4:
e2:6c:fd:cf:f6:1a:bf:9e:58:9f:69:cd:02:0e:48:
fb:ec:76:78:65:0f:52:d7:a9:7b:ba:35:52:ae:dc:
4b:d6:5f:0f:10:22:d8:5b:9b:b5:a7:c9:46:ca:ae:
59:5b:5b:08:54:d7:7a:9e:f6:19:57:61:05:e7:bf:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:4F:1D:8F:01:D8:FF:16:26:64:5C:69:47:2C:69:32:C2:10:0A
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ea:43:46:0c:05:ae:b1:da:4c:2f:3b:60:86:99:9c:cd:41:
fb:8a:4f:1a:82:4b:68:5f:da:32:53:96:53:07:01:de:35:4c:
9d:24:4c:ee:ac:0f:21:3b:29:05:78:26:88:52:91:bc:a8:71:
33:ac:88:1d:90:e8:d5:19:fd:c5:03:a0:0d:b4:fb:1e:13:d1:
65:bd:62:b1:21:24:c4:70:06:74:16:27:36:a2:e6:00:71:aa:
f1:ef:51:bb:74:5f:83:65:73:4f:9f:73:b1:38:52:09:b8:6b:
66:4d:30:3b:0e:af:ad:61:50:52:40:91:96:f6:f3:ec:c9:0b:
50:6c:8d:12:8c:71:72:29:4e:d9:56:89:d4:c0:da:42:0f:93:
78:b4:62:b3:7c:ba:ba:2a:d3:8b:0b:ce:c7:55:00:a9:1b:e5:
3b:8b:47:d4:2d:66:f8:f0:9d:ce:42:aa:34:ea:0e:06:f3:a5:
55:d5:d9:88:b2:33:4d:e7:36:0c:69:9e:a2:50:0f:44:09:06:
d2:92:b1:dd:2d:82:40:ad:a0:55:61:be:5f:cb:20:c9:94:28:
9d:dc:30:72:c0:6d:e2:34:9c:13:81:ed:d2:cf:72:d7:1b:2f:
9a:63:1b:5b:56:76:ac:c5:45:6c:a6:c3:0d:7a:27:1f:2a:e7:
d0:38:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 16:28:55 2025 by rpki-client