Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
File: eeJLR_iUPK1uBMn2RssQd8FA_fs.mft (raw, json)
Hash identifier: nvmekfuqjtJMncoO5LxN7iWLO0NUYMnhdSJe7sMn2Yg=
Subject key identifier: 53:B5:86:0A:AD:FC:B4:F6:AA:E7:CD:73:C2:34:B1:82:41:75:94:55
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 0197B6D74B7E6BF4815071C3549BE1C5804B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
Manifest number: 096A
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: Ff0yLRBnCd2a-1PZFAaKXEt87-w.roa (hash: QzNWCIaA542I7LzlR5+5wOCVAclFkGjaeVPYZqjN+Sg=)
2: HmjrrvNNU1yqGq3_xmYXZ7xuiFg.roa (hash: Kbry8XJIb38Dn/hCakpXS7cXVbuwiYg0BYs5Jt2kXbk=)
3: eeJLR_iUPK1uBMn2RssQd8FA_fs.crl (hash: Shphr/huzG73dBHWNkKW0F3puu9RWdh8nnGdC1iBwSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:7e:6b:f4:81:50:71:c3:54:9b:e1:c5:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=53b5860aadfcb4f6aae7cd73c234b18241759455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:8d:fd:4d:e3:77:66:b6:64:04:18:c2:04:
12:99:70:18:fb:57:3f:de:2f:3f:9c:3f:1c:10:5a:
58:9e:1b:51:34:56:52:3e:fa:67:50:bf:a1:b3:d0:
b8:e2:4d:de:32:32:1a:59:d3:79:ea:34:1d:78:66:
a1:0b:d5:7f:5a:b2:cd:f9:60:88:d4:81:12:9e:d0:
c5:d8:8c:cf:79:d9:ae:79:5b:8b:a0:c2:bc:bb:c1:
cc:5c:34:e7:21:9a:2f:a0:fc:ba:9c:0f:05:f6:74:
e1:ed:fd:28:d7:2d:87:cb:32:0e:fc:ce:35:8d:88:
f9:7f:2a:03:4b:83:c4:cf:7d:dd:80:2f:6c:82:94:
93:6f:69:4f:e9:e8:7a:06:bd:e9:67:5b:6b:fe:d6:
c9:8c:83:30:1c:46:b3:7a:f0:32:68:81:d3:5a:4a:
b2:02:c3:56:31:18:fd:6c:28:42:6a:0d:82:e7:d0:
70:eb:98:0a:50:70:97:b8:bb:af:43:02:e4:3c:c3:
40:5b:9b:9f:20:7d:a2:e7:66:a2:49:34:d8:7e:53:
ef:73:62:07:d8:4d:8a:ed:33:1a:84:a6:32:97:61:
57:b1:e3:a5:cf:e6:a2:20:43:23:04:51:62:b2:c3:
7a:84:9f:47:ba:71:44:b8:01:5b:0d:c4:99:ef:da:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:86:0A:AD:FC:B4:F6:AA:E7:CD:73:C2:34:B1:82:41:75:94:55
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:2c:71:ad:06:44:46:07:ad:c2:2c:9f:31:4d:3b:5d:6c:
37:61:dd:5c:6f:d1:4c:1a:36:52:50:ea:d8:11:1b:9c:37:01:
73:de:6c:6e:94:c3:d6:06:47:0a:26:e7:3a:0e:87:b0:91:02:
65:24:69:57:ac:a7:5c:b2:f3:1d:b4:28:71:f3:36:67:e9:35:
c3:db:ab:ff:81:74:03:74:06:27:c9:8f:ed:6a:f7:23:80:c8:
58:fa:c7:4c:4a:10:63:15:8c:01:0b:96:53:11:b3:d2:0a:c6:
da:68:40:f2:63:c7:4f:10:13:40:72:e0:14:bf:18:55:9c:26:
ba:db:14:c8:ac:e1:a3:96:e0:53:c5:08:f1:75:9c:fa:e3:ad:
64:d0:78:c5:e7:73:0f:a9:5d:de:0e:17:b2:ce:25:2c:5b:d6:
b6:45:1e:8e:7c:c0:8b:7d:fc:6d:4c:19:ee:0e:40:59:98:bf:
a6:9e:01:a7:15:30:cd:55:58:95:1b:55:1f:e0:3e:b3:91:ef:
7f:86:48:eb:20:42:77:20:fc:fc:bd:bc:6c:79:81:7c:58:b9:
00:73:c6:e0:9d:5a:0a:20:69:6e:77:56:fc:0e:d2:48:58:ed:
f4:1f:ca:c9:3b:26:1d:f3:5d:b2:b7:58:90:e8:11:01:03:91:
be:8f:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:45 2025 by rpki-client