Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: FyLAeV1UEqqhYeGVW/Aayuv8C2uj4iGxJ2upZNtW/p0=
Subject key identifier: A8:22:EB:18:48:53:02:DA:E7:43:CC:4F:8D:8E:AE:F6:85:C5:74:E2
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 0197B820F2B656BD5416881782E82D04FFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:00:56 +0000
Manifest this update: Sat 28 Jun 2025 20:00:56 +0000
Manifest next update: Sun 29 Jun 2025 20:00:56 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: MfNeL/7DOe7QMO69Tr7cQXr6+6EEtgf8Qcf0eqza2gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f2:b6:56:bd:54:16:88:17:82:e8:2d:04:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Jun 28 20:00:56 2025 GMT
Not After : Jun 29 20:00:56 2025 GMT
Subject: CN=a822eb18485302dae743cc4f8d8eaef685c574e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:ee:36:c8:48:8a:a0:4a:61:7e:4a:6b:d4:
a7:97:41:83:91:4f:6a:21:f2:8c:8d:23:3a:29:e9:
d5:7f:18:ec:04:a1:fb:46:67:69:27:d2:dc:4c:8b:
b5:8f:79:7c:5e:77:aa:f9:bb:63:7c:3f:90:2d:de:
19:de:58:6b:7a:ed:ef:31:2c:b5:46:01:8d:d5:07:
b9:f2:d1:65:26:2f:bb:4c:0d:d0:68:bc:e1:bd:c7:
b6:13:02:0c:5b:0a:0c:db:cb:5f:d6:07:21:a4:9c:
0e:b1:79:e0:96:07:06:25:0c:84:fd:31:1e:36:91:
09:0a:3d:11:65:f0:06:d3:09:1e:f7:b1:db:dd:5a:
c9:cc:3f:c8:59:83:7b:ac:c8:a6:73:c0:8e:f6:90:
3d:9e:a5:ba:59:ce:13:bc:1c:e0:29:d4:29:98:ab:
46:2e:69:95:17:7c:57:08:f2:24:d9:29:2d:94:54:
b7:07:6e:00:07:ba:64:bc:a9:01:c4:b1:a5:05:49:
77:4d:82:ef:15:40:bc:23:76:58:41:56:f2:f9:ad:
a7:c2:d2:d8:6d:73:93:d3:23:cd:f3:23:f8:94:f7:
fb:37:dc:c2:f1:af:a2:37:6f:e9:c1:48:de:53:e5:
81:fc:f4:3b:22:e4:d4:c2:94:5f:78:bb:33:97:51:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:EB:18:48:53:02:DA:E7:43:CC:4F:8D:8E:AE:F6:85:C5:74:E2
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:18:10:ec:18:5c:19:d6:bd:70:59:fa:27:6e:57:98:88:b9:
73:ba:76:50:2c:e0:de:0a:bd:77:3f:5a:78:57:66:2c:de:c6:
53:84:c5:4a:d6:9f:fb:02:3f:c8:13:ad:47:6e:29:eb:b0:70:
7a:a1:bd:65:81:2d:52:f0:2e:9d:d8:d1:4f:24:73:5f:76:8c:
62:df:05:b6:55:3c:74:ea:75:1a:fd:c0:e7:78:b7:c5:bb:de:
6d:15:f5:c9:3e:98:27:6d:8d:a9:52:94:65:4e:2c:ad:e1:b2:
9b:f2:9e:66:16:dc:f7:15:44:06:d3:f1:09:14:7b:ee:29:bc:
55:5d:0c:36:d0:78:be:1c:c1:cf:61:8d:07:66:ee:33:b7:0d:
4f:3b:50:84:b3:72:f1:41:c5:ce:e0:e0:2e:8c:3a:99:3f:68:
ba:12:89:a0:7e:25:f6:37:61:c7:64:ee:9a:e1:bd:3d:36:fc:
f7:4a:d6:f6:af:8b:ba:13:4c:35:25:5e:a3:ef:fe:e4:2c:e5:
f7:65:dd:8d:3d:74:90:58:f0:d1:43:8e:fb:4d:9f:73:d4:08:
87:23:63:3d:c6:a1:ac:bb:77:6b:5f:5e:cf:c6:76:0b:08:10:
6e:03:f5:f3:dc:b6:79:95:83:cb:35:e1:fe:0a:72:01:c1:b6:
43:a4:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:14 2025 by rpki-client