Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: XAaFnHe3b2JiUezaTtjgLwHNe9IWPzzT4V50Va80LqU=
Subject key identifier: B3:2C:0A:00:AE:D0:54:21:4E:E3:F0:7B:EB:42:A6:E1:2C:73:AA:35
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 0197B7EA81CCAF1A09AC4E20A5994725374C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: gnm5MGG9nOd0W/3PGNJAf7VO5dQs/b1YRXjC+JX2gvA=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:81:cc:af:1a:09:ac:4e:20:a5:99:47:25:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=b32c0a00aed054214ee3f07beb42a6e12c73aa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:a7:c2:2c:df:7f:3e:70:0b:34:a9:c5:45:
fa:e7:92:35:1a:8a:6c:c3:24:42:9d:6f:79:15:2b:
d5:9a:27:b8:1f:35:a9:23:61:a4:fa:0b:98:89:ce:
ad:e7:70:38:ab:4a:2a:b3:3a:3a:9e:9a:56:77:7e:
6e:6d:37:58:05:8f:cf:4d:91:51:c0:9b:7c:45:0b:
82:fb:ed:27:a1:39:21:7c:30:5b:3d:40:c3:98:7e:
0e:f0:59:09:08:5e:a3:13:1b:02:dd:0c:cc:14:81:
4c:b4:ee:03:84:2c:2e:95:55:29:f8:32:aa:e2:91:
2d:92:f2:ab:50:35:57:19:9b:b9:6d:59:7a:72:fc:
32:d2:bc:8d:32:7f:dd:63:4d:31:61:fd:d8:f3:29:
81:17:13:ad:e3:74:6d:fe:4b:b2:f4:4c:24:b7:9e:
84:79:6e:e5:7a:b1:55:b7:e5:9a:14:59:87:0b:a5:
26:f6:12:da:4f:1c:0b:5a:4b:e2:16:06:b1:e2:fb:
59:d0:0b:12:6b:0a:5c:68:a2:87:8e:a4:01:9f:88:
7e:f4:92:99:60:bc:97:1b:ad:a5:de:97:61:fc:51:
bf:51:6d:2c:99:14:cb:a5:30:b0:32:98:89:85:ac:
30:15:e4:66:d9:89:df:12:7f:28:b8:0b:12:6c:80:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:0A:00:AE:D0:54:21:4E:E3:F0:7B:EB:42:A6:E1:2C:73:AA:35
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:28:a8:12:9c:ba:e2:fd:9d:6c:56:83:20:bb:6a:03:ec:
2d:92:7d:48:d6:5e:a8:e3:8e:63:50:44:44:d7:31:ca:c9:1e:
85:68:5e:60:ed:ea:3d:09:35:bf:01:09:1c:2d:5d:bb:30:c9:
51:30:ac:51:77:fc:1f:00:95:33:40:bf:f0:3e:99:81:ff:9f:
4d:e3:d5:12:37:64:f4:0b:af:73:e8:b1:b8:0c:c3:fa:fc:2b:
0b:18:53:1a:51:fb:aa:37:65:94:f4:5a:13:8d:c0:de:04:ff:
e5:56:2c:3a:ca:a4:fe:8d:73:37:68:fa:a5:f5:46:29:17:9f:
93:27:68:12:7b:26:86:90:de:a5:aa:38:7d:ef:fc:c8:5e:f9:
ed:95:b6:18:84:03:f1:3b:3a:f0:cc:c5:ca:a7:50:98:fa:26:
d8:9f:aa:7a:36:7e:be:52:ad:be:35:9e:36:64:1b:68:b1:a4:
e2:02:62:dd:3e:31:6e:68:63:97:db:98:1f:45:a7:60:46:8e:
82:df:5a:85:e6:be:aa:1f:60:47:94:a8:fb:cb:10:8b:2d:dd:
e5:71:6a:1a:e8:98:a3:d1:8c:ec:44:1e:e9:c1:8e:c2:08:12:
3d:20:bb:f7:a7:cd:d8:f7:77:a1:12:f8:b6:4a:42:b0:5a:99:
de:fc:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:36 2025 by rpki-client