Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: HRkB9v1ZAaNteziRNW1y2Y2wUOPzNi/OEsouE1kBRXQ=
Subject key identifier: AC:E4:E7:30:42:79:F5:40:9E:31:D5:2C:C9:E3:29:87:AF:07:9A:81
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 0197B96AACF7924B9D0EB5167EDA29F3E0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 02:01:05 +0000
Manifest this update: Sun 29 Jun 2025 02:01:05 +0000
Manifest next update: Mon 30 Jun 2025 02:01:05 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: HyZI5AxJzq94hBhBLGufCOEvpqw5GPvP6vN7Zf+kKbs=)
2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ac:f7:92:4b:9d:0e:b5:16:7e:da:29:f3:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Jun 29 02:01:05 2025 GMT
Not After : Jun 30 02:01:05 2025 GMT
Subject: CN=ace4e7304279f5409e31d52cc9e32987af079a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:cb:1c:a1:94:bd:cd:55:2f:0b:39:6a:bd:
4c:b7:ea:fa:68:35:1f:ef:86:7f:ce:84:97:a2:d2:
a6:77:20:0e:b4:61:d3:31:cc:c6:7c:9d:40:e2:26:
38:8a:f5:bf:11:7e:56:e7:bc:03:04:00:c8:0e:59:
86:aa:67:59:4d:1b:96:9f:db:9e:1d:cd:78:1e:70:
f2:12:f3:06:54:50:85:7e:c6:05:99:e0:27:fa:4b:
e6:ca:2a:0f:28:0d:e9:8f:18:df:0b:5a:3c:12:b9:
32:3b:c2:f5:59:ba:ca:39:ea:a9:bb:cf:d4:d4:c3:
9a:81:6f:e2:c5:f5:ad:5e:0e:a1:da:63:05:02:e1:
8b:81:ee:e3:05:d0:8f:2b:14:4a:c2:81:9a:54:80:
d7:1d:0e:36:c0:17:19:32:e7:d4:b5:4d:44:11:7b:
78:7c:3a:61:98:6e:9c:6c:2c:4a:a4:ac:cc:31:28:
a3:33:58:db:7f:d1:62:2c:ac:55:1a:18:68:7c:6d:
ec:71:b0:55:cb:0f:05:b9:11:4c:c8:0e:c9:2b:e1:
45:33:e8:a7:4c:32:f8:b8:ab:76:44:ae:e0:07:76:
70:ed:64:99:83:39:b0:84:dc:09:04:53:d8:9b:8f:
46:06:67:7a:d3:c6:45:03:e7:c0:9f:c1:b5:e1:33:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:E7:30:42:79:F5:40:9E:31:D5:2C:C9:E3:29:87:AF:07:9A:81
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:0b:35:84:58:27:28:26:d4:3e:3d:1b:28:1b:89:aa:08:
84:b3:db:0b:16:5f:15:b3:71:1e:d2:12:65:9c:fe:02:98:ef:
28:c5:30:b6:c3:43:fc:4f:e8:72:f4:50:48:f5:aa:a7:ea:44:
f0:65:fc:2e:b1:05:4d:b8:e1:50:d2:c7:2d:34:96:6f:75:90:
ea:08:15:18:4a:52:bd:eb:5e:de:d2:ef:4a:39:fc:fa:cf:c3:
aa:e5:62:e2:15:7a:8f:ba:77:cc:75:5e:99:32:80:1a:d7:54:
b4:4a:96:7d:38:3d:b3:7b:58:68:da:35:a0:06:3d:11:ab:f9:
ef:4e:57:12:3a:7c:82:c2:7e:b7:04:24:0d:08:36:e6:d4:5f:
c3:82:8c:ab:22:b1:60:0e:66:db:ee:9b:be:2d:a2:fb:8a:36:
2f:53:d1:21:ae:cf:57:e8:5e:e2:2c:2f:d4:24:00:23:d0:8b:
74:6b:08:9c:65:69:6a:b4:da:9b:4d:03:0d:84:b3:08:a5:a4:
cc:f5:e3:26:09:45:44:02:e2:3e:99:81:34:0a:57:5d:5f:b6:
74:46:ca:6a:f3:39:fe:2e:44:39:57:96:fa:c4:ab:9a:68:75:
1e:61:62:1c:c0:0b:e1:3f:04:7d:ce:62:17:74:47:c6:a5:29:
23:37:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:53:01 2025 by rpki-client