
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: YU2rtsH+tolDJ6jLBCrpXZoUvTaTm02waeEp2FByMjg=
Subject key identifier: DE:46:B0:B3:DD:BA:FD:99:B9:D1:D9:B1:FB:7A:CF:65:50:CA:46:7C
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 0197B745883A48A2149EE6D91D5A4A82FBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0EB4
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: w/1mA70fVLHQ5EL6DZlbE6ebeOkCWenvQqdlDO6vMwg=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:88:3a:48:a2:14:9e:e6:d9:1d:5a:4a:82:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=de46b0b3ddbafd99b9d1d9b1fb7acf6550ca467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:bc:87:dd:8d:73:24:ac:67:3a:0b:85:49:
5c:fe:2a:cc:76:ac:26:e7:45:a3:64:28:60:63:88:
bc:86:69:a6:66:9b:68:f9:81:98:36:94:d3:a5:60:
bc:5a:62:36:db:fa:ce:08:80:90:09:f6:e1:a3:a3:
59:60:63:c1:71:cc:ba:02:d3:5e:51:de:84:da:b2:
fb:a6:da:29:92:09:ed:61:07:97:3a:62:1c:2d:c9:
84:bb:64:04:5a:63:1e:a0:98:d2:96:e4:58:39:7a:
a2:fa:4d:c6:fa:03:86:59:da:73:a7:63:c1:a9:6f:
fe:fc:9c:0b:3d:53:67:90:b7:fa:85:2f:cd:d4:81:
ad:0f:7a:4c:4a:6e:b8:ef:0e:f3:f2:76:fb:4a:2c:
47:b7:09:a9:fa:a9:ef:f0:48:64:e8:de:55:33:b9:
ab:6f:e6:7c:23:75:7e:68:6b:e3:cc:74:c4:a1:20:
67:90:c0:10:85:ef:23:4d:da:4c:aa:88:7a:27:e2:
8a:f2:1b:3a:ca:33:fe:17:9e:de:4f:eb:2e:b0:c7:
fc:f5:ab:10:60:31:6a:c7:f6:e1:2e:f7:07:5a:5c:
7e:34:f0:26:a7:ce:3b:83:05:66:fb:13:c9:eb:f8:
0d:3f:a4:c8:72:56:98:c3:a9:9d:f9:01:6d:90:d1:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:B0:B3:DD:BA:FD:99:B9:D1:D9:B1:FB:7A:CF:65:50:CA:46:7C
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:77:05:89:30:e9:e2:78:91:a0:d0:f5:a6:48:9d:48:2d:77:
3c:49:89:83:4d:57:27:74:ff:81:30:bf:df:42:d0:f2:f0:04:
9b:6b:f3:54:77:4f:0f:1e:3d:c3:96:a2:ee:f5:f6:bd:3c:ce:
bf:77:84:57:d7:6b:90:9f:44:ac:8a:82:ef:8e:f1:55:ce:fd:
0b:da:17:17:cd:da:d3:99:03:a7:33:29:ca:a1:97:13:52:32:
89:3b:e6:bd:8d:81:aa:f2:f5:e6:0e:98:85:d1:49:4d:7a:e3:
9f:b9:54:1e:8e:32:ee:6e:46:72:dc:ca:8a:0b:58:4f:0e:d4:
b9:f8:09:df:43:e8:da:bb:39:64:1b:a7:46:e1:51:23:9c:bc:
d8:f6:f3:74:18:18:bc:79:d1:4e:58:23:b7:61:3c:81:dc:d8:
54:ed:a7:65:b9:ce:1b:6f:b2:2c:36:88:da:f2:f4:7c:59:72:
31:76:10:38:b9:07:36:e8:7c:a8:c8:35:66:c6:ed:1c:19:e4:
c2:7d:ea:2c:b9:12:39:8c:a1:f4:a8:80:db:ee:ec:2f:cf:9d:
5c:5d:aa:c1:52:47:6b:c5:f3:85:36:fc:82:13:cd:49:a0:04:
6e:69:37:3c:1f:fd:81:5a:03:4d:50:18:0c:ce:15:0a:c3:d8:
f0:f4:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:50:49 2025 by rpki-client