Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: gbpnY7WDBPc0W2Mm82VCQOb9qyT5Odyr4K9Pg/rz0gw=
Subject key identifier: 48:0D:D8:6D:BC:F6:9B:54:8B:1E:B0:D7:E4:6F:C2:92:10:74:1B:5D
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 0197C9F0228A7AA1A68F20BFF6972FAFE304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 05C3
Signing time: Wed 02 Jul 2025 07:00:47 +0000
Manifest this update: Wed 02 Jul 2025 07:00:47 +0000
Manifest next update: Thu 03 Jul 2025 07:00:47 +0000
Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=)
2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: cdiNKBXtYcBtX+B2w0vO6E8zxTchOy0sR0IAfcpCs9U=)
4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=)
5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:22:8a:7a:a1:a6:8f:20:bf:f6:97:2f:af:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jul 2 07:00:47 2025 GMT
Not After : Jul 3 07:00:47 2025 GMT
Subject: CN=480dd86dbcf69b548b1eb0d7e46fc29210741b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:c5:63:72:07:67:9d:7c:54:93:a0:26:11:
ae:88:2c:64:38:10:1f:d1:b3:d3:0f:7a:34:c0:6e:
e7:ad:86:7d:95:4a:b6:4c:51:f6:5d:40:53:91:21:
65:07:05:9b:2c:07:27:36:5d:bc:12:5a:46:43:39:
81:d1:71:19:9a:51:f6:11:eb:4d:cd:07:97:e4:5d:
c9:1b:56:45:0b:43:93:fd:55:d1:b1:23:26:6d:02:
96:30:d2:51:29:03:40:80:0a:c7:f5:9c:f9:2a:66:
14:c5:88:07:2e:96:62:00:a3:64:5c:f7:3f:3c:54:
8b:3d:0f:73:49:6e:57:f7:9f:d7:5d:5d:2f:b0:87:
1a:95:35:ef:fa:35:cd:10:cb:71:bb:85:08:e2:5b:
cd:bf:3c:43:fc:af:f5:52:ff:f8:f3:8f:f9:70:3f:
31:d8:cc:59:07:3c:ad:e7:b3:b3:47:10:84:da:89:
23:87:23:af:c6:68:d4:3f:5a:83:3f:e2:fe:a3:bc:
3c:ab:31:c4:11:f6:de:d9:6c:7f:98:83:7e:8f:77:
ea:4b:0c:12:b7:02:71:b6:7b:f4:d3:82:e1:49:28:
0f:a0:3f:4f:44:e9:d1:a0:4b:5b:00:26:ab:ce:fe:
32:27:3d:f9:b0:89:aa:62:b8:60:63:f9:5a:dd:5d:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:D8:6D:BC:F6:9B:54:8B:1E:B0:D7:E4:6F:C2:92:10:74:1B:5D
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5e:40:66:16:69:e1:bd:90:77:52:ec:9a:1d:b0:f5:65:90:
3c:08:10:eb:a4:1c:88:57:6b:97:45:04:58:f6:5a:d9:01:c6:
6d:96:1f:d8:60:f6:a0:5b:34:88:45:07:e7:3e:c3:eb:5c:d0:
ff:f9:53:6a:cd:b1:14:2a:32:20:4c:7c:68:62:b3:5c:59:40:
24:d6:06:78:28:83:77:56:a9:ee:0d:12:3d:5f:63:a8:7f:45:
26:43:2b:49:70:85:fd:48:95:37:ad:c9:28:30:47:e8:06:8c:
8e:92:70:d6:7e:09:06:7e:16:04:91:55:5d:4f:ac:ed:48:fa:
c0:71:61:9e:0a:66:48:34:69:c1:0e:42:5b:a8:1f:fc:d2:56:
76:f0:fc:15:2c:73:c4:a6:af:25:78:6f:c9:4b:48:83:33:e0:
a5:30:8d:28:41:d2:2f:88:20:6f:bf:e3:f3:21:b0:17:4b:6b:
e3:6b:17:c8:75:4a:0f:9d:81:9d:03:95:59:07:12:5b:4f:fd:
34:69:d1:04:71:7c:e2:db:65:22:25:95:11:23:62:d2:73:e5:
1a:04:17:68:ca:ab:f6:98:6d:a6:05:a0:52:f4:23:61:e9:d9:
96:e8:e3:10:77:23:7f:15:d7:7c:03:6c:1f:48:d1:3d:94:e3:
7d:35:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:44 2025 by rpki-client