Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: K86fnIyzkafZccy8gAzeIEMFMLrKgFjlS76qgLfvmN0=
Subject key identifier: DF:A7:9E:D9:8A:2A:8B:0A:B9:EB:99:96:CA:81:C4:91:01:30:93:65
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 0197CD5F6BF3E8217ABCB9325F634B681C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 23:01:12 +0000
Manifest this update: Wed 02 Jul 2025 23:01:12 +0000
Manifest next update: Thu 03 Jul 2025 23:01:12 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: CX5aqDwGxZWNl+BFcy11zMqHXF/CvdizvdLkRZ2FTy0=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:6b:f3:e8:21:7a:bc:b9:32:5f:63:4b:68:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Jul 2 23:01:12 2025 GMT
Not After : Jul 3 23:01:12 2025 GMT
Subject: CN=dfa79ed98a2a8b0ab9eb9996ca81c49101309365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:2e:c1:46:73:29:57:4d:aa:cc:d5:3e:99:
0e:22:c0:af:92:15:9c:f1:45:ef:1c:f3:2f:54:d8:
d0:7c:43:41:06:c7:b5:ad:f7:15:47:3d:02:5a:48:
04:f1:d3:8c:21:f4:46:d6:c7:29:31:56:cb:58:d2:
2f:c3:35:16:1c:10:b4:27:37:ea:de:80:38:bc:4f:
2d:8e:10:6d:d5:48:9a:38:0b:8f:7d:9c:29:34:c5:
81:7b:3c:21:df:e5:6c:80:4e:60:5c:89:0d:8c:57:
b3:23:d8:81:61:c9:ce:fc:d8:40:5f:88:a0:76:a7:
88:ef:de:7b:a0:d6:5b:55:5e:39:f7:4d:cc:b6:0a:
9f:95:5f:42:47:18:37:03:13:88:35:ab:50:92:2a:
4e:93:78:62:45:a6:8c:92:00:77:06:fb:7d:c8:36:
bf:08:d9:79:1c:54:ee:f1:46:f1:37:03:1c:df:08:
99:d6:27:81:a4:56:17:94:2d:7c:40:ce:1f:d0:cf:
12:94:55:12:bb:ae:b4:77:09:0c:d7:86:19:96:96:
47:fe:b2:1e:37:eb:0a:90:a7:09:1d:7d:2a:6d:10:
36:c0:8c:82:a5:64:e7:06:34:12:6f:74:af:2f:15:
e3:37:d4:a8:f2:a3:b3:6d:f6:20:cf:59:46:44:62:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:9E:D9:8A:2A:8B:0A:B9:EB:99:96:CA:81:C4:91:01:30:93:65
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d0:99:3d:46:28:8f:b8:f4:d6:d6:5f:c7:66:e9:ea:74:e8:
89:38:c0:00:8c:30:81:21:f6:8d:56:6c:2b:58:4a:01:90:dd:
ac:b2:b0:d4:17:9d:ca:04:96:2e:40:79:fd:fc:85:1b:42:6e:
fa:c9:5c:57:20:08:72:63:e8:45:fe:46:cb:51:11:f9:08:76:
01:57:3e:01:ff:42:09:71:63:2e:77:93:d0:28:17:fe:8b:0c:
00:72:e2:fa:1b:44:a7:b5:ac:e8:d3:3f:be:ba:ac:f4:59:5e:
77:9a:e3:4c:6f:f5:6b:af:4a:04:79:1c:75:fa:f4:6d:69:e9:
af:62:f1:e3:4f:d7:b4:5d:cb:1f:b6:41:6b:40:ec:59:46:47:
63:ab:85:3f:b7:30:42:bb:08:26:05:36:e3:1a:36:5d:42:67:
92:73:4f:0e:3e:60:a3:db:f3:1c:5e:07:50:dd:62:9f:73:b0:
82:7c:1b:8d:e2:a4:a1:0d:84:f4:86:54:5d:36:f7:20:51:df:
e8:67:c5:95:3b:61:e3:c8:22:e1:02:bc:df:78:ce:89:c3:c8:
99:f0:49:82:a5:4c:3e:70:b0:77:64:78:da:22:90:35:5e:dd:
f9:1b:5e:fb:d4:99:bf:50:d1:28:e7:4f:dc:6b:01:8f:5e:4d:
ed:2d:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:09 2025 by rpki-client