Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: tczK+8p5/UQ4STKaotGm7oUCCfe4cRHwy8vIIwpnWU8=
Subject key identifier: 21:0D:80:22:74:A9:8D:81:FA:97:11:38:3C:EA:13:C0:58:6F:C2:47
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0197B6327CAA36ED006D0664CA4656925435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 04FB
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: lDE4w/cKaE0cCsA5SZQhMi+kzPgsstySdYZtqws2Zak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7c:aa:36:ed:00:6d:06:64:ca:46:56:92:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=210d802274a98d81fa9711383cea13c0586fc247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:90:4a:e8:f6:dd:d1:ce:ce:18:fc:0e:42:
44:81:ba:d0:6b:94:32:e7:bb:9b:5c:17:57:07:83:
8e:6f:ca:f5:9a:f4:c9:78:d6:0c:36:22:d4:a5:47:
a4:c1:2f:11:b5:62:29:b0:86:66:b1:2b:44:03:3e:
35:b4:25:41:81:84:57:71:45:2d:ae:88:d1:92:9b:
85:86:be:a2:ab:47:69:2c:0e:aa:d2:f7:d5:12:60:
9e:d5:05:03:22:1d:8f:91:bb:63:a5:70:1b:50:58:
54:d1:ec:d2:55:44:04:62:0d:0c:7f:68:2f:70:aa:
d1:0f:86:9e:90:2b:d7:07:ec:a8:d6:f1:f2:f8:ee:
a0:87:e9:67:89:47:38:c6:e7:95:a2:02:39:f5:c2:
36:17:a6:ff:61:b3:f2:54:a8:77:4a:e3:1c:ef:21:
05:57:1e:3e:bb:b0:2d:0b:d0:ba:a1:9d:62:0b:b3:
d2:24:93:49:b1:fc:f9:06:92:fc:60:cc:3a:6d:4c:
88:6b:9a:1f:26:a8:91:42:49:e3:94:54:22:52:37:
cc:89:d5:5c:4b:73:df:c1:ae:51:37:36:ae:b6:16:
7f:5b:91:84:e3:f3:9a:98:a6:95:a1:1d:00:4c:8c:
0a:3b:55:f4:be:5c:11:f0:ca:79:76:32:de:f4:35:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0D:80:22:74:A9:8D:81:FA:97:11:38:3C:EA:13:C0:58:6F:C2:47
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:51:df:36:24:66:97:50:39:58:b3:09:d4:4d:bf:72:63:
e4:3d:6a:49:8c:73:2e:75:58:14:8e:d3:64:31:80:94:43:6a:
99:c7:a0:dc:41:27:62:95:7e:f1:f9:62:2a:47:eb:c1:82:75:
7f:77:b1:8c:02:31:4a:5f:fa:ab:dc:37:54:ee:0c:5f:c6:8a:
29:10:1c:a9:68:e6:f2:a1:14:c4:c0:93:8f:61:f7:23:86:42:
c0:93:e4:e4:ab:2d:54:86:db:15:6d:ea:27:0b:91:df:80:29:
8b:d3:03:d5:4b:5e:56:70:b3:24:04:f2:ff:30:69:69:ba:a0:
e5:b1:20:f4:56:6c:c7:cc:83:95:bf:35:d9:74:b7:ee:9d:d7:
01:30:8c:14:e0:0b:f8:15:29:63:cb:a4:03:82:3a:24:60:ef:
b4:6e:3a:02:89:f9:d3:39:2f:f2:1b:15:43:a4:75:21:0e:3e:
41:a3:51:61:e5:61:9a:ea:8f:67:30:c7:4a:8f:2d:0a:4a:24:
13:d3:bc:64:08:53:64:22:ba:bf:38:81:c4:a7:34:10:2a:a2:
fa:76:39:58:23:4d:2f:72:95:7e:c8:a2:3f:cf:b8:b8:21:a7:
75:c2:a5:12:1f:17:92:55:9c:65:25:40:ff:cc:8a:53:7b:28:
14:23:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:17 2025 by rpki-client