Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: DJQnfNmUAZkS/8UxlEiXnRmS4JnCmtokb2ZHMY4JFWg=
Subject key identifier: 00:82:43:10:1B:43:C8:03:DD:56:24:0A:D4:77:D3:4B:3D:C0:C1:CF
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 0197B77CAF6E6BEAA4AF88295172ED14F41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: TMY0smRIetWLiKBKWdAJb6bX6j6HIKQYrrp7HuklEiE=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:af:6e:6b:ea:a4:af:88:29:51:72:ed:14:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=008243101b43c803dd56240ad477d34b3dc0c1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:fe:ff:42:24:4d:1e:29:79:b0:e8:2f:af:
89:ff:0c:bb:7b:cc:61:d8:e4:79:df:4c:15:2b:97:
cb:a2:dc:9c:00:31:79:8f:dd:a3:ed:90:7b:45:c3:
ea:77:0d:7b:cf:15:ce:a1:52:8f:ab:51:8b:1f:8a:
26:1f:83:ce:63:91:b7:38:36:7e:86:92:fc:50:6e:
76:55:ce:5e:ae:f8:a4:29:b3:a2:c7:f9:9c:ef:7d:
c3:63:ed:f7:c9:b5:83:9f:f5:5d:2e:a1:f3:26:8a:
8a:eb:12:8e:48:61:7a:59:b9:38:05:d3:f6:68:a3:
bd:b9:e2:8b:81:6a:01:a9:b6:af:f3:59:23:c2:b6:
5d:d9:09:d3:32:b2:6d:e2:a0:e5:1b:f2:53:7d:38:
33:7e:0e:26:ce:83:2d:af:2b:f3:17:72:f7:68:b3:
bc:3e:1d:8e:07:0b:15:44:5e:41:87:a3:8c:94:a6:
40:c1:c8:a0:18:41:e4:b1:31:f0:40:56:d8:62:e6:
7f:24:53:00:22:ba:99:1a:53:81:2d:b9:ed:ea:63:
42:37:32:47:31:55:89:8c:7b:57:5f:74:4d:04:21:
3d:ad:f7:ca:a2:bf:7f:58:8e:1b:a9:22:32:8f:d9:
18:e1:c9:74:53:58:5e:6c:bc:1e:3a:aa:39:61:46:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:43:10:1B:43:C8:03:DD:56:24:0A:D4:77:D3:4B:3D:C0:C1:CF
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:c0:92:98:27:16:e6:b0:2c:5f:7c:e2:29:67:41:33:60:
95:6a:15:db:e0:73:5b:5c:ed:11:7d:20:65:04:06:de:08:2a:
01:ee:3f:39:d2:2e:66:e3:e7:7b:e4:73:d4:cc:19:09:31:15:
e3:d3:e9:21:91:93:d7:83:e9:3c:d5:a9:5b:a6:50:91:d1:0b:
60:9e:ef:57:ca:84:1e:17:06:7d:e9:7a:9e:bb:f4:12:87:d1:
fd:d3:7a:ea:af:8d:5e:f8:e1:53:08:86:fc:be:47:d5:9b:5e:
19:52:13:21:d5:27:32:3d:44:a2:13:b3:fb:1e:48:06:6a:ed:
52:9c:39:d1:fd:09:3e:43:35:bf:29:04:6c:4d:11:c0:10:3d:
ec:7e:97:17:c6:58:05:04:4c:ce:89:7b:9f:54:ec:e2:44:ff:
aa:ee:26:18:f9:0a:5d:08:20:5b:ff:7a:23:e5:14:66:a0:c0:
04:90:0f:dc:17:82:7e:e5:7d:7c:b6:88:f0:f3:9e:84:1d:9c:
e2:bb:d5:1f:b0:87:28:29:eb:e6:88:bb:12:2b:2f:e3:3d:b7:
e4:49:37:33:44:58:0e:a9:68:70:37:a5:15:9f:94:83:dc:2e:
6a:0b:1e:17:70:f0:b5:63:53:f2:c4:8e:8d:3c:d6:a8:78:90:
86:11:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:38 2025 by rpki-client