Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: ffIoYoUyvud/UuDuaRAsLQvj/r4kTPfSpAppNrB/HXI=
Subject key identifier: 79:5C:B7:BD:31:77:A4:E7:BB:0B:4E:15:51:9A:EC:27:2A:9A:E1:57
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 0197B70E6844D37F7861065DE2577A8F5C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0EAB
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: MRurvnndnWSIa29zmT80MbvhA/t8uvfRCVltLMjlYbU=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:68:44:d3:7f:78:61:06:5d:e2:57:7a:8f:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=795cb7bd3177a4e7bb0b4e15519aec272a9ae157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:28:13:f3:b9:99:2f:0d:33:10:f2:d3:a0:
77:63:e4:b4:ad:b3:ab:16:5b:e7:02:aa:f6:8b:cd:
9f:d7:03:30:1f:b2:8d:da:70:5f:f5:4f:c9:67:47:
d7:d1:26:60:6d:bb:a5:5a:05:b8:18:9c:1e:ab:fd:
d1:36:ad:6a:32:ff:95:ce:d9:62:98:ed:10:63:44:
be:38:ab:ef:f7:30:2c:65:e4:8b:5c:9f:cf:93:e4:
a7:b0:88:68:09:8b:fa:ed:4c:a5:56:e8:7b:c7:da:
c5:ef:8a:ec:cb:64:e5:06:f8:da:6a:39:52:3b:3a:
de:d9:74:c5:e6:f8:d4:9c:47:64:be:5a:a2:73:7a:
ba:94:58:fc:4b:82:0a:e5:dc:f0:f3:25:c7:68:06:
2c:32:bf:64:25:aa:e6:5e:69:c0:2f:2a:67:49:a2:
72:ba:79:68:9e:70:3e:3a:f5:fd:67:0e:d3:fa:4c:
73:44:fc:25:71:64:c3:49:00:90:43:64:3c:3c:8f:
67:5a:49:4b:a4:ef:e1:6c:35:37:94:ce:d2:57:53:
49:17:a6:09:d0:73:76:1e:7c:d3:06:52:12:d2:6f:
b7:97:b8:ed:28:59:74:d6:29:62:54:97:4d:5a:4f:
22:55:a0:89:dc:28:36:2c:01:14:fa:6e:9a:b0:56:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:B7:BD:31:77:A4:E7:BB:0B:4E:15:51:9A:EC:27:2A:9A:E1:57
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:01:85:0c:1b:bc:cb:ff:ed:33:28:9a:58:19:0a:bf:4a:
05:ab:07:ae:70:e8:b3:06:6d:66:37:31:85:bf:4d:15:46:dd:
80:47:58:d5:a7:ec:ea:cd:c5:81:63:67:d5:ae:ed:96:1c:c4:
b8:f7:9b:24:0f:cb:14:40:2b:7a:47:9d:8d:bb:5f:98:da:41:
20:8c:60:c9:3a:f7:ed:00:31:a2:9a:73:a8:ab:6d:f9:d3:e1:
01:f9:a3:1b:fe:5d:14:00:05:bb:e6:37:af:78:c3:c1:a0:87:
06:e2:f8:3f:db:92:58:50:16:68:3d:9b:11:06:a6:f2:5d:41:
30:28:4d:9f:64:81:18:1b:30:cf:72:36:4b:95:ec:45:33:c1:
1c:29:54:74:35:27:d1:a8:2c:f2:b8:83:e8:8d:47:a7:0f:9f:
02:fe:21:b3:e2:10:a2:28:53:4e:b2:97:2d:69:e4:3d:55:a8:
88:31:02:40:92:c1:db:0c:1d:f7:f5:e6:7d:7e:a0:4c:71:e8:
c7:14:22:f3:44:0e:32:b6:e5:30:1c:e1:17:15:1c:5a:3f:14:
88:b1:c1:40:c3:00:c6:e6:26:6e:10:af:86:fa:c9:10:97:65:
27:97:e1:80:af:c9:25:20:45:c6:b0:7d:ba:f4:77:84:2c:89:
85:e5:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:01:35 2025 by rpki-client