Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: kk3KpfQcDDasgWO/kcnTiqjyCdNpbqbBl8rcOnctUS4=
Subject key identifier: 19:E0:7B:CA:F5:89:38:6A:45:54:96:A5:73:AC:EC:7D:55:D2:AB:85
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 0197B6A240A7C1281BEA42F8222E473709CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 108D
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: 8L8y0GRQigzyaqRmZFbJIQANvA7c0NT0TAaEU6PJjSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:40:a7:c1:28:1b:ea:42:f8:22:2e:47:37:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=19e07bcaf589386a455496a573acec7d55d2ab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:3f:63:5e:af:b5:c5:eb:1b:33:78:8f:92:
4c:ca:33:91:f5:e6:b5:d7:bf:01:2d:b3:00:8a:45:
59:52:c9:32:e5:6d:71:5c:2d:ef:12:bd:f9:05:17:
8a:31:93:a4:47:a3:3e:fc:51:9d:9e:67:40:54:ec:
bf:ea:86:be:89:75:ff:a7:19:7e:19:f7:49:27:1d:
87:86:97:5f:75:d4:f6:90:ec:81:47:4a:7c:6b:a3:
73:54:23:56:96:8f:eb:ab:22:92:b6:9d:ad:12:19:
e8:e8:03:87:c1:40:51:c9:c0:ec:29:22:58:64:e6:
20:22:d9:62:d9:86:f5:47:f1:3c:66:50:67:ce:3d:
2c:c3:5b:52:ea:a7:b0:c1:a2:aa:a1:43:20:61:ea:
be:9b:b9:06:de:c3:cc:59:63:39:8f:4f:7a:de:2d:
7c:6e:a6:d4:a3:1f:a1:1e:f5:71:43:fe:25:79:e9:
59:cd:8b:24:50:91:19:71:99:49:4d:18:60:b1:2e:
21:a4:e3:8f:a3:2f:c5:32:5a:f8:35:c9:ca:94:77:
a0:6f:73:77:72:18:41:0e:53:f4:87:ef:6e:c8:b3:
e5:a6:db:e8:f5:0a:74:ae:d6:01:36:e0:31:e0:02:
05:96:25:86:74:28:ed:78:a3:4e:ed:4d:32:dc:aa:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:7B:CA:F5:89:38:6A:45:54:96:A5:73:AC:EC:7D:55:D2:AB:85
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a3:12:7b:86:d7:0e:0d:77:72:dc:99:fb:3f:c8:7c:a3:18:
2a:0d:34:0b:ed:de:e4:5f:e7:ff:dc:ed:60:e1:2e:e1:49:48:
8c:07:29:f3:ba:6a:22:e9:f4:c6:2d:7e:12:99:b8:9d:57:96:
8b:23:df:fb:ed:bd:af:d0:ec:47:54:60:6d:c5:62:67:5c:9c:
7a:94:e3:b4:26:04:e3:1f:19:9d:87:09:a3:2b:4c:92:a2:42:
1d:5a:3f:f7:ac:a3:44:aa:7d:cc:c9:f8:b5:66:c8:77:3d:da:
ab:e9:ba:1d:0d:4c:9c:37:a5:b5:74:6a:09:0f:d5:b4:6c:79:
af:c0:0c:a8:4a:ab:29:2d:20:d6:ec:59:69:57:07:e4:98:fe:
58:3a:18:b0:e5:56:69:cc:ee:8f:a4:78:bb:87:c8:10:35:0b:
29:4f:bd:a0:21:54:18:98:5c:ab:d4:b2:18:e1:be:90:e0:1c:
d4:1f:0c:e7:97:e6:2a:6b:11:66:53:cb:8f:9f:a3:5d:96:e7:
f3:c4:81:3e:14:13:14:b5:ae:f1:7a:15:6a:52:aa:0c:8b:9f:
55:5a:d4:75:6c:22:e6:66:d4:84:22:8f:63:3d:cc:2b:ca:a8:
99:cb:90:17:8e:11:cf:82:28:b7:e3:e3:b8:56:02:d3:44:9a:
43:7c:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:07 2025 by rpki-client