
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File: Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier: 4W7j7TCnDufRIsuMTqo98ao5EML39fiFMkuFnfM24+A=
Subject key identifier: 3A:F2:B3:D9:63:C7:29:1F:70:87:4C:81:83:9F:3E:97:C6:A4:FF:B1
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 0197B6A1DC80F58C898245CFB72DBF6AB588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: J+dNk/nEny5h/PrYU2sjJGfIluPLAiqHxbE9SPdh1xY=)
2: ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa (hash: pOwNfstFAL1zr5tNQSEDWIMsfqU4J9T9Io0xMgEThiM=)
3: lmg8TFGUlHLh94h8C2YmH1aKN7I.roa (hash: /G2RJ6kE/znQ/BtVoL2ygrSOBDDhTzMPkkZBmwvtXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:dc:80:f5:8c:89:82:45:cf:b7:2d:bf:6a:b5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=3af2b3d963c7291f70874c81839f3e97c6a4ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:04:e3:61:f9:f0:4a:a0:b3:17:6e:c1:a9:
88:49:a3:31:a6:8b:ab:83:0e:31:35:57:91:ce:1b:
1d:2e:d7:2e:40:aa:e6:be:c1:9a:2f:0a:bd:a7:46:
e1:88:84:97:92:d5:fe:e9:35:b3:fb:b5:91:11:a7:
8f:41:78:3b:ef:9a:fc:bf:7f:d8:3b:db:c8:6c:65:
bd:b8:d4:df:8c:eb:a4:ca:e3:dc:b0:7b:9b:4e:d8:
54:31:bc:b3:a6:75:85:99:04:7b:3d:3b:a1:c5:e0:
fb:21:6a:a6:39:9b:ba:59:ff:0e:b6:4f:f0:bd:f7:
3c:b1:6a:94:2d:ec:4b:94:86:cf:d7:c3:b9:97:84:
e6:78:c6:7b:81:63:f1:52:b1:a7:2b:b0:ad:30:05:
7f:de:1f:fa:5d:8b:79:f0:67:99:b6:af:b6:1e:cd:
bd:b0:60:b9:26:e5:68:51:60:3d:49:34:19:2b:e3:
c1:22:39:d2:80:ce:d3:33:96:fb:1f:90:de:e3:09:
be:e9:ea:b5:fb:85:8b:5e:52:a7:4f:b7:9a:e5:ed:
84:33:81:b1:68:c9:1e:89:a1:39:3c:9e:b4:8b:01:
c8:70:a2:49:ea:31:6a:65:d1:dd:d7:e7:69:a1:8f:
ad:33:54:4d:e6:f1:bc:8a:f5:d0:c9:a2:67:30:33:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:B3:D9:63:C7:29:1F:70:87:4C:81:83:9F:3E:97:C6:A4:FF:B1
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:77:dd:da:fc:2b:51:bf:a1:a9:21:8f:84:73:13:82:14:
5f:ac:44:24:81:95:3d:af:5a:5b:b4:9c:18:6d:4d:c2:ec:2e:
3c:da:b5:91:e3:f5:f0:c4:cb:7b:bd:17:42:e6:e2:0b:72:94:
07:0e:ea:df:5c:4c:71:13:2e:28:60:2e:32:62:e4:79:8d:b9:
86:27:4a:c4:bd:0a:f6:38:6f:ea:ef:51:8b:c7:3a:d2:6e:41:
b3:a8:d7:01:a6:71:da:09:31:3b:df:56:93:bc:d2:c6:f7:48:
1c:ef:c8:92:8c:5b:40:ca:b4:60:02:30:e1:26:05:05:66:7a:
44:09:e6:98:35:f4:7e:e3:6d:3f:d4:31:ee:ee:ec:43:7e:35:
bc:07:52:55:fa:ef:26:16:84:03:0c:c2:7e:62:19:c2:99:86:
21:9a:68:89:e3:be:ba:15:1f:23:fb:69:ad:20:8c:9d:58:7c:
b4:92:3c:df:04:bd:17:2f:95:a9:65:31:73:99:57:5f:b0:61:
7a:a4:50:93:ac:10:56:63:40:01:53:e5:e9:6c:1d:ca:7e:68:
71:2e:59:4c:a5:10:fd:90:8d:cb:c2:3d:4f:69:07:b9:96:c5:
e0:44:d7:16:6f:a5:3c:8e:61:e7:8e:18:41:00:85:11:46:c1:
54:d2:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:45 2025 by rpki-client