Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: TlwVyYjiFUqXJ+IpO9DlWC1dd/QWTCjvzUOPs7GapkY=
Subject key identifier: E6:05:93:7B:48:79:73:78:7A:06:16:79:54:7E:A1:07:66:3C:A5:2E
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 0197C237C3AE460CD419A3C0CB3BBCE47A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0AAC
Signing time: Mon 30 Jun 2025 19:02:03 +0000
Manifest this update: Mon 30 Jun 2025 19:02:03 +0000
Manifest next update: Tue 01 Jul 2025 19:02:03 +0000
Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: jRi2gI3K3+O1jBmAwLLJtJ989nGjEWN2d1nBmai28BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:c3:ae:46:0c:d4:19:a3:c0:cb:3b:bc:e4:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Jun 30 19:02:03 2025 GMT
Not After : Jul 1 19:02:03 2025 GMT
Subject: CN=e605937b487973787a061679547ea107663ca52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:63:e1:57:22:3a:55:f5:a9:45:4a:7b:32:
bb:0c:f4:52:88:93:0c:d6:d1:24:75:6f:4b:a4:35:
9a:1e:81:7a:72:95:f8:25:8a:dc:5e:94:5d:50:3b:
0b:ff:90:c0:fe:c2:3c:c9:23:14:08:b5:f1:e3:7a:
22:41:9a:a4:33:5f:e3:3c:bf:4b:b1:09:f8:69:70:
2a:c1:3f:84:45:3c:fa:b8:56:87:1e:fc:5d:04:70:
41:02:c8:30:f9:4e:d7:f9:5b:89:14:ff:38:2a:78:
b8:b2:b3:af:e2:fb:53:62:f5:1d:b0:aa:34:bd:83:
43:60:ad:6f:2e:b6:d3:61:08:84:4d:fd:47:d3:78:
cb:9e:d3:32:b3:fa:a1:78:26:d8:cb:b4:3b:03:57:
36:c0:fe:8e:3b:3f:53:a4:6f:93:98:8e:15:48:bb:
4d:f4:34:ed:19:59:71:b0:22:9b:b4:08:9e:3f:f5:
90:b6:1d:66:6e:c3:29:54:9b:3d:75:44:aa:c1:26:
0f:3a:8a:1b:18:0c:e0:ea:f6:ec:3d:ad:fb:2d:94:
42:96:51:1e:fd:92:e0:29:66:40:7c:a2:b0:2c:09:
f4:bb:c5:98:74:77:bc:fb:8b:0f:fb:33:b7:fb:99:
6a:e7:94:00:86:48:43:07:3c:d3:25:3f:f1:c5:86:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:93:7B:48:79:73:78:7A:06:16:79:54:7E:A1:07:66:3C:A5:2E
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2e:55:fe:b5:4c:28:87:f7:3b:ab:75:61:e0:b7:ae:92:d4:
21:89:da:0c:b0:93:3f:a1:a9:93:0b:f6:95:72:6c:84:5c:f6:
46:b0:e4:d5:9a:1c:56:dd:37:c0:52:12:ea:01:9b:7f:8e:d1:
e6:98:26:61:94:d9:9a:6b:33:d3:c7:22:df:a6:d3:2a:b5:03:
fb:f4:40:59:0d:cd:ab:4a:8d:42:2a:b9:43:6f:3c:c6:9f:ab:
ac:45:71:6f:de:31:4d:53:0a:ae:d0:21:b4:29:ac:55:be:ff:
9d:a2:b9:8c:df:83:a0:e0:37:9f:63:bf:a8:52:73:13:af:ec:
82:9f:93:28:b8:cc:0f:5f:ff:30:03:1f:a1:6d:d2:9b:d8:35:
7d:16:e5:11:de:59:c5:5c:a9:09:ae:66:40:96:d6:02:fb:b7:
a4:4c:27:f2:dd:62:e3:af:d4:b7:e6:1e:8b:80:e6:2f:2c:ae:
08:24:54:3a:8e:14:73:00:bc:b0:84:54:dd:73:3e:c8:94:d6:
cd:c5:6d:91:91:ff:7b:43:b4:ae:6c:a8:19:59:9a:0c:cb:93:
59:f2:64:40:df:16:c4:97:32:74:70:ba:f6:39:6e:bb:0b:2c:
56:ce:c6:7f:b1:48:a3:8e:c0:e2:d5:a3:78:7b:a4:b5:2d:5f:
42:b3:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:29:23 2025 by rpki-client