Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: eJR0ji9DAvWAmD1cS3uSElHehoz15rjNDgoQnysTOsU=
Subject key identifier: 0A:F8:38:84:99:67:FF:C0:82:13:FE:BF:A2:27:53:00:C9:C0:09:D5
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0197CD2854AC1A42CDCBF12071558F7FD940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 15C4
Signing time: Wed 02 Jul 2025 22:01:01 +0000
Manifest this update: Wed 02 Jul 2025 22:01:01 +0000
Manifest next update: Thu 03 Jul 2025 22:01:01 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: ZY2kuoPznQqrG/Fxv8Gz3ytD46xE6+YYv4qcc2hCkQI=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:54:ac:1a:42:cd:cb:f1:20:71:55:8f:7f:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jul 2 22:01:01 2025 GMT
Not After : Jul 3 22:01:01 2025 GMT
Subject: CN=0af838849967ffc08213febfa2275300c9c009d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:07:a9:06:4b:8a:5b:8d:b0:17:23:2e:66:
8b:82:27:34:e9:49:f3:db:e9:a1:69:36:49:f9:53:
60:25:84:3c:86:9c:53:88:16:c6:30:17:61:26:f9:
2f:1b:c4:2a:ed:51:f0:24:64:2c:b1:d3:e9:16:2a:
2c:97:4b:e0:b0:76:97:3d:15:e0:58:e6:81:43:10:
d7:6e:d4:e5:13:e5:e0:7b:c3:92:07:d2:f7:f8:14:
0b:a1:e8:c6:1e:5c:d8:59:81:5c:2d:88:45:0e:ee:
29:63:4a:08:ee:dd:12:c5:9b:32:02:94:2f:0a:49:
cd:77:be:50:29:9f:51:3e:3a:99:18:26:36:d2:34:
d4:21:94:c2:64:12:5b:c0:3c:85:bb:87:b2:d7:2f:
5e:35:0f:70:a8:0b:14:76:2c:0a:39:a4:17:5a:e3:
02:93:fa:0c:05:df:3f:47:8e:da:6a:25:dc:54:0d:
eb:85:fc:a0:b5:a5:4c:85:46:a6:76:77:ad:b6:1b:
76:80:d1:9c:63:ae:19:1e:14:75:95:fd:78:ef:1d:
0c:9c:f6:b7:e0:09:3c:96:a9:ec:13:af:af:ce:72:
60:7b:c6:2f:51:01:2b:07:8a:88:29:65:16:ad:0e:
6f:44:0f:e5:18:31:5e:a9:aa:47:18:db:a2:0f:4b:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:38:84:99:67:FF:C0:82:13:FE:BF:A2:27:53:00:C9:C0:09:D5
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:27:6e:1f:37:fb:01:88:29:66:34:51:cc:9b:9a:cc:0e:e3:
46:01:fc:34:07:a9:30:7f:f6:04:40:47:da:3b:9e:0e:70:c5:
58:0c:57:b5:77:40:14:a8:64:83:78:9e:a7:97:3b:bc:0f:ef:
64:7d:73:de:21:57:3d:e0:72:f5:a0:80:b5:00:4f:17:0e:e6:
30:bc:4b:e4:de:a8:cc:f1:9e:92:7d:f3:fa:ed:40:38:01:4f:
69:98:ff:3a:a1:1c:11:1d:62:cc:86:96:7c:91:82:69:a8:ed:
00:66:82:fe:e1:10:a3:b1:48:f5:8a:2b:be:56:60:8c:77:8d:
32:4d:f8:fc:af:5c:63:81:a2:09:72:f3:08:e9:31:fe:3a:a4:
5b:0c:9e:94:18:07:0b:82:7d:3b:cc:81:10:6b:20:a5:d2:eb:
b3:d2:31:16:9c:09:94:88:7a:df:6a:6b:d4:99:87:09:b4:ea:
7e:3e:90:50:58:52:13:0b:c4:f8:e2:c5:27:9b:1b:26:1a:6c:
00:e9:4f:ce:f4:dc:ee:e0:e4:58:67:df:e3:4e:9e:09:68:b1:
ca:05:7a:36:71:79:e3:54:ad:12:95:d1:32:69:30:5d:14:a9:
72:80:67:6d:bd:b9:b3:fb:2c:55:80:fa:24:5f:b5:16:5d:d6:
d1:57:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:48:00 2025 by rpki-client