Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: ay2IJnFRqHK5hyvcN7vxJm8bRzNKt9LLrJkvPl9Sn+E=
Subject key identifier: 9B:C4:29:97:2B:D2:F9:85:66:18:8B:E7:50:A1:F6:11:66:19:08:69
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 0197B7B38DE391A6FDAEA12B6A1677516420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 15A3
Signing time: Sat 28 Jun 2025 18:01:27 +0000
Manifest this update: Sat 28 Jun 2025 18:01:27 +0000
Manifest next update: Sun 29 Jun 2025 18:01:27 +0000
Files and hashes: 1: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: ur93/uit+P45IOj0GDUbOSa5J0SAG/kaSwpTBUxyoz8=)
2: irIscEtMW7wUDwc_jX73mZGmgDY.roa (hash: GYzHbNbhG0WM1T4likEpev4kbQzCpDdQtfyeZ8vI/B4=)
3: ydbrje3UPVm8R15QS_gI4G8JkZ8.roa (hash: 9YZIlSpD5UZTI51LVS8V+r0vUFmlrJTcDfEwmIT9Rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:8d:e3:91:a6:fd:ae:a1:2b:6a:16:77:51:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Jun 28 18:01:27 2025 GMT
Not After : Jun 29 18:01:27 2025 GMT
Subject: CN=9bc429972bd2f98566188be750a1f61166190869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:d4:9e:97:97:84:90:94:1d:89:eb:44:44:
f7:2b:25:c6:25:d0:b1:fc:86:4d:a5:4a:93:95:23:
82:26:13:1b:27:f1:8d:ca:6f:d0:67:3c:72:c0:a6:
45:f4:89:36:81:fa:d4:d9:56:0a:57:17:e5:9e:9f:
41:b3:48:3a:38:a8:5f:c9:16:02:7a:c9:08:99:9d:
fe:51:a6:42:d9:0b:fd:a0:cf:55:31:16:23:f7:a7:
62:2f:ba:4c:6d:fe:fe:7c:79:c0:4c:b1:55:16:75:
16:48:e5:9c:b2:1d:a8:7f:89:87:fc:37:62:fb:05:
91:63:6b:0b:eb:48:cb:80:d4:b5:f1:c4:15:96:24:
0e:a9:c2:dd:2f:fd:66:a9:2e:20:38:64:81:3e:1f:
5b:d0:78:b5:3e:80:bd:20:9d:8f:6c:49:31:6a:57:
6a:5c:b7:e8:f2:db:e9:8c:a1:f2:7c:ad:6e:51:57:
c6:f6:3e:a5:de:4c:35:5b:77:a1:53:a7:f2:ef:5e:
b3:8b:08:66:28:fe:38:99:b9:4f:67:e1:db:95:0a:
47:20:91:c7:4f:42:1b:dc:53:95:8c:92:65:f5:51:
b2:ab:c3:04:8b:87:11:d8:2f:ef:09:d2:6f:8d:44:
cd:82:b0:b7:5e:b4:e7:31:75:21:2b:c5:38:ea:bf:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:29:97:2B:D2:F9:85:66:18:8B:E7:50:A1:F6:11:66:19:08:69
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:c1:84:9c:44:fb:d3:ec:17:dc:fd:50:91:ef:9e:b3:41:
df:f7:58:d7:cb:1f:02:e9:d1:ff:a5:e9:b9:26:52:71:57:90:
66:dd:1b:84:7c:b2:92:dc:b8:38:d7:98:f7:c8:51:5a:bc:3d:
7a:9a:ce:12:d0:e0:fc:6a:aa:85:cc:b4:bc:de:c8:cf:94:4e:
f5:35:12:68:fe:f8:61:6e:43:f0:58:45:f2:1e:a8:79:49:3f:
e7:07:78:68:b5:76:c0:c4:21:c7:70:66:f0:d1:dc:94:59:16:
2b:90:ae:67:61:98:61:ca:d0:60:43:42:ca:bb:73:9b:cc:e3:
b7:4f:6a:2f:f0:14:2b:65:f9:a4:35:c3:9c:b7:0e:a9:b5:1e:
d8:1d:20:58:b6:e7:7d:f1:ce:ff:8c:97:5d:72:49:fc:13:87:
b8:61:47:52:ae:38:e4:53:8a:3a:48:c8:a1:07:6e:9c:22:10:
61:de:a2:53:88:5e:89:a8:1d:80:35:28:96:e1:2f:c2:f3:2c:
01:3a:fc:f0:45:f5:56:2c:bd:37:8c:19:fa:13:a7:68:8b:c8:
ba:97:6f:b9:31:30:52:dd:45:0e:b9:1d:c5:da:89:d5:ce:09:
ae:bb:a6:26:80:cb:67:0f:26:b8:c8:61:df:f2:ea:94:42:38:
fa:0c:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:11 2025 by rpki-client