Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: 8xC1Ohk/66iAft6+E+CiGNu8WN5BfghZWLUqNarwWAI=
Subject key identifier: 5F:EC:75:53:0A:0B:1A:5F:D7:EE:0B:DE:B4:D7:8D:75:7A:9C:0A:A5
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 0197B74583C07BBEB8015F383135660E0327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 12C6
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: ovQiZPzmbdQDuiHpVpMKXSrOKojaFu5a4NS1RrkggfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:83:c0:7b:be:b8:01:5f:38:31:35:66:0e:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=5fec75530a0b1a5fd7ee0bdeb4d78d757a9c0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:db:3c:75:a5:0a:d4:5d:92:0b:57:59:12:
e8:60:34:08:df:ce:08:6d:fb:bc:3a:97:4a:ad:4a:
05:95:02:3c:1a:d3:d0:cd:fe:c7:d5:31:9a:f9:3c:
66:99:cd:50:bd:b7:d8:d8:ae:87:ec:b9:7b:0f:05:
1e:b0:fd:a9:4a:af:61:6d:ed:6a:4d:44:32:0d:87:
14:b5:d2:0b:16:7d:5d:27:58:17:90:7b:f2:45:16:
9b:e1:72:e3:fd:94:a1:dc:fc:d0:d5:dd:44:3b:f6:
17:96:19:5d:3f:ed:35:7b:01:5e:1d:28:aa:07:08:
5f:f2:7b:5d:8a:65:c9:c6:c4:5d:aa:a3:76:eb:69:
be:32:74:81:de:97:b4:61:cd:b1:45:73:51:d2:3a:
f5:7d:93:61:1d:b0:8c:3a:8d:1c:1e:8b:9b:30:db:
25:5e:87:5a:48:9c:83:a7:94:fa:82:21:7f:fb:5b:
9c:4d:f4:04:03:b0:d4:c4:f3:41:b5:cf:b0:af:a1:
82:b3:26:22:60:03:6a:f3:8c:8c:55:40:aa:45:cf:
61:b2:be:92:5b:1f:58:2b:d5:f6:65:6e:9f:d0:ef:
da:8c:ed:4d:ea:e9:b5:88:d8:8c:eb:e3:64:f3:9c:
70:ae:24:43:09:86:66:af:64:74:ac:6f:3d:4a:7c:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:75:53:0A:0B:1A:5F:D7:EE:0B:DE:B4:D7:8D:75:7A:9C:0A:A5
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:10:d7:0e:a5:86:d8:90:db:99:2e:54:a5:4f:f2:aa:a7:
3c:31:cd:f4:dc:1e:06:1c:cf:4c:f6:74:24:ec:a0:f8:a2:1a:
85:6f:c6:91:bf:78:39:1b:5b:bc:73:01:d6:53:dc:b9:f4:5e:
93:54:38:b2:74:5d:81:34:d1:e2:ee:4a:2d:17:8d:e5:fd:92:
83:7d:d8:62:29:41:a6:b4:b9:33:ce:33:31:87:82:b9:21:e6:
a1:69:b8:b7:bf:76:8d:1b:71:5a:bb:b1:76:7b:98:8d:f8:69:
e7:48:bb:46:b3:36:5e:47:38:c8:3a:5d:0e:09:53:e7:22:0f:
62:61:63:f6:17:88:3d:01:96:2d:b1:2a:28:2b:83:e3:86:26:
1e:15:b1:13:cf:3a:8d:2d:b9:08:d6:4f:47:7a:87:83:41:96:
1b:c7:b1:e9:c7:5f:2b:49:1f:b1:12:86:52:e6:74:4a:33:6a:
6f:35:4f:55:6d:62:df:b8:31:a4:7c:b0:41:e6:2f:72:b9:a0:
c8:bb:1a:a1:03:a7:2d:dd:bb:b7:6f:e5:50:69:b2:99:40:93:
a0:93:30:48:d6:4c:8c:c8:81:58:fe:a2:d2:01:73:15:66:e0:
9c:ac:e3:e9:52:e7:ae:38:28:19:34:4a:df:b5:3e:77:1a:b4:
1a:6a:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:28 2025 by rpki-client