Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier: mZ5hw/YohuX2isQT+/EOxTq/71h1ElBaqPEIs+Ny8BM=
Subject key identifier: AB:77:1D:31:61:97:2B:59:A6:83:8D:E9:EB:7C:D8:A7:60:AF:E4:EE
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial: 0197CB0324256B948AE489EA7C7D3FC7CEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number: 0867
Signing time: Wed 02 Jul 2025 12:01:10 +0000
Manifest this update: Wed 02 Jul 2025 12:01:10 +0000
Manifest next update: Thu 03 Jul 2025 12:01:10 +0000
Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: Qg0mzawzSZY349OVgtJmTqCMcLTSSojWpEbp3WcPTFk=)
2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:24:25:6b:94:8a:e4:89:ea:7c:7d:3f:c7:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Validity
Not Before: Jul 2 12:01:10 2025 GMT
Not After : Jul 3 12:01:10 2025 GMT
Subject: CN=ab771d3161972b59a6838de9eb7cd8a760afe4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:bc:01:34:25:1b:84:df:26:74:47:6c:18:
fe:80:ae:ae:c5:77:66:38:28:3d:f7:e7:74:01:8b:
39:4a:a9:a6:8d:05:b0:ac:d9:f4:db:b9:90:66:36:
b7:ea:a7:57:cc:29:1e:12:fa:d4:52:c5:80:97:f6:
21:77:55:28:ce:e3:5b:fe:1b:64:e3:2a:da:f7:43:
df:98:cd:a4:b1:16:95:b7:bf:d9:0b:56:8c:d5:5b:
9f:59:6c:c5:18:f9:79:02:38:a3:c6:8f:24:14:89:
85:86:21:32:a7:6b:0c:8c:35:3d:9a:60:03:1b:e0:
c2:e1:fc:2f:05:b3:68:89:bf:f3:b6:86:c0:77:82:
83:a8:73:ba:79:3c:05:22:bb:be:19:33:65:18:3b:
83:86:e3:c5:9d:85:2a:78:9d:b3:a9:a5:8b:1d:54:
3b:e1:6e:e7:f9:b7:82:f1:a6:3d:21:61:54:d6:f5:
d0:33:4d:dc:fb:27:2c:e8:48:5f:92:58:9d:77:f5:
dc:44:a9:a5:d4:1d:36:e8:d4:94:d9:04:9f:bd:23:
1b:19:9c:3a:d6:99:1f:c7:82:1d:32:c3:2a:dd:80:
a9:c6:2d:93:46:5d:65:11:f1:a5:b2:8b:ce:4e:58:
d9:50:ec:de:2f:27:6b:ca:0a:f8:47:56:7e:87:89:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:1D:31:61:97:2B:59:A6:83:8D:E9:EB:7C:D8:A7:60:AF:E4:EE
X509v3 Authority Key Identifier:
keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:14:90:5e:9f:84:88:1f:ad:57:a1:52:5a:b1:a8:07:3b:b9:
3f:ea:2c:2e:1e:40:cc:8f:4d:82:33:1b:85:5e:27:65:09:fb:
99:c1:f3:a8:97:bc:ff:bc:39:1a:b3:1d:ea:5f:ea:02:66:cc:
84:4f:2b:2d:66:4f:c8:82:4f:ee:27:d6:05:53:d2:e6:2c:2c:
00:da:3c:df:d9:ce:1e:c8:90:1e:50:8b:7d:a6:e4:ce:e6:9c:
2e:a4:3c:c9:ac:23:f3:4d:35:11:7e:95:ef:2e:c7:28:62:1c:
f6:61:e2:e6:48:42:2f:72:7a:cb:e0:f6:9a:2a:86:d1:75:a3:
f7:ed:2b:01:59:b5:93:30:ec:f6:06:2a:11:21:f9:90:48:94:
34:5d:a1:ab:2b:01:f8:c8:9f:73:20:87:46:21:30:a3:75:ad:
5e:a3:be:96:6e:a1:2d:02:41:ac:e3:81:75:eb:a1:c8:2b:d8:
2f:6f:36:ff:38:75:37:63:23:a2:a1:3d:48:a2:48:2e:8b:7a:
a8:e2:06:e1:93:90:18:de:4a:94:bb:fd:ea:fb:08:a3:94:2a:
e8:3f:d7:62:3c:9e:e1:c9:ad:9a:9a:8e:0d:f7:be:27:81:92:
44:a5:96:3c:bb:a9:27:f8:e3:4c:ff:de:6e:96:9b:cd:d6:99:
b3:e2:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:42:09 2025 by rpki-client