Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: /aDKwIGm6VLTboHfDjQimWIKgXEg2ECkO0LufctccDU=
Subject key identifier: C1:5A:8A:99:64:22:67:80:DC:11:F8:7D:47:C2:C3:0B:E8:D6:34:32
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 0197C1C917D899B63510EDE8C6EB91408AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0BE9
Signing time: Mon 30 Jun 2025 17:01:10 +0000
Manifest this update: Mon 30 Jun 2025 17:01:10 +0000
Manifest next update: Tue 01 Jul 2025 17:01:10 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: vbhD24gteZRNYNtnxZnIMMAzOk9OZAz3VCmHSRjAUMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c9:17:d8:99:b6:35:10:ed:e8:c6:eb:91:40:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Jun 30 17:01:10 2025 GMT
Not After : Jul 1 17:01:10 2025 GMT
Subject: CN=c15a8a9964226780dc11f87d47c2c30be8d63432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:1c:be:b7:98:f8:9e:25:6f:e6:be:7b:ad:
4b:aa:f0:35:73:ad:2b:ff:90:41:cd:83:b8:f3:df:
db:08:e7:15:08:16:66:59:ba:8b:d7:a2:66:fc:14:
71:eb:33:c8:17:fe:72:ce:c0:09:41:12:49:2b:ba:
5b:84:1f:79:56:3e:ab:8f:35:83:f7:91:0b:3c:13:
8f:25:8e:19:fb:69:20:56:99:d0:b9:63:34:52:36:
fe:94:1f:7c:4a:1f:a4:ed:18:d3:9a:0b:74:b5:93:
43:4d:2c:8f:55:d0:67:f3:fd:f7:be:68:e8:a0:a7:
6d:46:e2:b5:e5:be:b5:46:cb:97:b6:18:c3:e5:72:
d1:ad:84:44:f3:bf:a3:2d:6b:3d:e8:0c:17:86:ee:
6a:7e:24:08:e6:ee:2c:5f:fb:b6:6c:72:5d:78:d9:
9a:ea:d7:fb:87:1b:f8:54:a8:cb:fd:3a:f2:44:aa:
f8:48:4e:bb:24:86:77:d3:02:4e:10:3c:d4:30:b4:
71:43:a8:c9:29:9b:3c:23:75:a5:cb:f4:78:8a:06:
37:24:a6:b5:b6:d3:74:1f:01:8d:81:f3:d6:f0:9a:
67:15:0f:8e:8b:4e:e5:5b:33:ed:64:3e:56:dd:ed:
f7:d0:4f:2d:9a:d7:ef:d7:4a:97:44:04:c4:c6:dc:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:8A:99:64:22:67:80:DC:11:F8:7D:47:C2:C3:0B:E8:D6:34:32
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0c:3f:ea:f2:e9:44:21:7c:4f:9e:3e:42:59:08:b5:89:9c:
b7:d9:59:3b:7c:64:47:61:bc:ff:cb:d6:30:30:88:49:34:2e:
3e:1b:34:02:9b:df:5f:d4:74:e2:b3:dd:0d:88:81:5f:87:3e:
01:ad:52:06:1d:bb:cc:05:7c:3c:54:60:b6:2c:8a:38:9e:62:
f9:95:74:49:98:c1:5d:7d:c0:94:79:eb:53:5c:6b:62:ad:09:
08:df:f7:36:bc:ff:e5:22:58:5c:bd:99:2a:e6:fa:0f:82:9a:
46:9c:70:23:33:7b:ef:e7:b0:19:9b:1f:1c:68:e5:65:48:c2:
ba:7b:1f:c1:6d:e9:6e:25:37:ed:2f:ed:bb:c7:fc:88:fa:35:
87:00:d1:b5:00:11:b9:66:42:c7:46:55:3b:fc:27:48:6f:12:
a5:9c:7e:09:ed:4b:8c:59:ac:72:a3:50:b4:b5:a5:86:57:31:
ee:79:d0:14:09:20:7d:81:53:3e:3c:11:d2:c8:fc:e3:fb:1c:
94:34:74:9b:f3:f2:5c:82:06:d2:97:9e:f5:87:78:49:d8:23:
5b:64:e9:71:3c:15:31:98:03:d8:a7:d3:6b:e8:07:a8:d4:dc:
cd:b9:ea:3a:82:bd:f5:27:1b:a2:81:43:7c:e2:7c:90:60:cf:
82:52:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:24:25 2025 by rpki-client