Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File: EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier: Kpy3xE9N8heWcpkkfARYobBI/TePfne7sBqaqcTBlKY=
Subject key identifier: 4E:FF:CA:3B:8A:F2:DD:9D:34:37:BD:21:C2:03:53:E3:BA:84:FA:9D
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial: 0197B77C8C7676B7240AA440469D14EA8CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number: 08D6
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: 1eXto-EsRD2_BRDc9smA9RA0iPI.roa (hash: g1hRvTrzsnVFScKTJJdFlUgNjwgiZOniAlwWxxAKEuA=)
2: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: goTjdDaehfgXyNsOJBMlfFkMdQESpCBBdrF61tDOlBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8c:76:76:b7:24:0a:a4:40:46:9d:14:ea:8c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=4effca3b8af2dd9d3437bd21c20353e3ba84fa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:5c:5b:e3:9a:7b:e0:38:0c:20:76:eb:bd:
fc:a7:51:1c:56:df:2c:fe:05:07:c0:03:9d:5b:95:
43:6c:36:16:34:c6:12:fd:41:37:32:4d:70:7a:a4:
e0:c9:e7:f4:d6:88:45:62:e0:fa:b8:67:14:ec:f9:
b3:c0:0a:c5:85:0e:48:1e:15:49:ce:51:5e:f4:41:
e2:9d:fc:30:24:67:e8:9c:33:51:cd:21:c5:53:77:
65:0f:50:a8:43:63:b5:6e:d5:4b:00:5e:2a:56:f4:
de:1e:25:5c:d3:ce:1c:e0:0b:94:0f:f1:5f:c0:ea:
5c:57:88:35:31:53:fe:32:32:b4:39:ca:d1:c3:a7:
48:74:fc:9b:86:6f:6f:ef:23:1d:8b:a5:0e:68:87:
48:3a:53:b3:6a:a7:5d:74:ca:db:d4:e9:c7:37:06:
26:4f:15:7d:32:84:4f:0f:16:0a:61:6b:ed:e5:81:
56:eb:da:cb:d0:31:c5:48:c2:10:5e:9e:28:8c:9f:
1f:79:81:74:4b:70:f3:ad:1a:71:b8:31:74:1a:a6:
d4:0a:9e:ab:0c:1e:62:a6:77:1c:05:6c:e6:7e:9d:
80:e9:3e:5b:67:31:c8:8c:37:fc:5e:fd:d0:d8:c6:
37:3e:e6:15:39:b1:34:65:a1:d9:80:cd:fc:37:8c:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:CA:3B:8A:F2:DD:9D:34:37:BD:21:C2:03:53:E3:BA:84:FA:9D
X509v3 Authority Key Identifier:
keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:46:ea:47:5a:97:d9:ba:42:82:41:89:a7:47:1b:c4:d8:
ba:06:35:dc:5b:0d:50:a1:76:ab:15:70:c6:fc:17:c7:5d:3e:
63:14:56:51:4e:a9:b7:2e:12:31:22:f8:a5:03:c0:bf:4d:8e:
f3:e5:c7:d3:0d:bb:c3:92:44:50:9f:59:16:34:81:0e:c0:81:
68:81:b3:a0:59:19:03:89:a7:ed:c1:f5:72:17:47:26:0e:6e:
16:65:e8:c7:0c:8f:1a:6c:d4:25:80:37:d6:ab:f2:65:9d:a0:
5e:41:09:46:4d:86:ce:ec:c4:d5:44:57:85:7e:5e:9c:0c:40:
72:a1:98:9a:d3:7b:50:13:b4:f8:ec:58:0a:f8:c5:f7:7e:33:
ff:ed:5b:93:c1:4f:21:b2:b0:08:18:83:cf:a6:64:87:ec:bc:
7f:f2:c0:5c:a5:b2:6e:47:ef:13:31:e8:aa:91:2d:c0:d6:63:
76:75:e4:f5:33:bd:89:c9:9f:79:5f:1d:d8:97:e8:31:0a:24:
5e:1b:91:1a:de:9f:8a:30:bf:4e:a6:9e:5a:e4:42:45:7f:4b:
f8:fa:5d:d0:44:a0:c3:61:c2:70:19:5d:99:d5:f1:d0:6c:93:
54:63:01:a0:93:7f:39:88:f4:1d:36:eb:10:3f:67:e3:6c:43:
28:d8:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:33 2025 by rpki-client