Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File: eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier: /QFcLC2aXqCB36tVIQngmCrZG7Toy1ewrV4EMCsvitM=
Subject key identifier: B6:AF:AA:C8:49:A7:F8:CD:AF:4B:8D:31:DC:4D:20:4A:A2:81:7C:30
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0197B6A0E9ACC0D69C55D363289B7FB8F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number: 0FBB
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (hash: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=)
2: 8ALCem6WNzZicaF6OTNthjeQfck.roa (hash: YpH6jIe+TynmU/8cQY6b28ehJOsvk8Ov/8Gxgmlkb/M=)
3: BOjqPIb3athrryYMVMll8dWYS_4.roa (hash: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=)
4: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (hash: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=)
5: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (hash: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=)
6: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (hash: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=)
7: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (hash: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=)
8: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: HOFK/KcwNvSlTI6Y85lUzZQu1nnkJdfduu+PrSVSDOs=)
9: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (hash: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e9:ac:c0:d6:9c:55:d3:63:28:9b:7f:b8:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=b6afaac849a7f8cdaf4b8d31dc4d204aa2817c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:06:8b:1f:b3:99:44:e9:ed:5c:d8:ff:8d:
8c:d2:b5:48:47:21:bc:70:07:4a:c3:53:9f:e3:6b:
cd:72:43:cf:34:e4:86:29:60:e4:43:83:d4:04:b8:
a4:ba:39:9e:62:31:3c:f5:1d:ac:06:71:b2:e3:e5:
98:c6:6c:8f:25:fa:b3:97:d5:cd:05:d7:30:3e:cb:
e7:7b:08:32:29:d4:81:0b:b2:30:66:10:92:9c:9f:
4f:39:a1:29:f5:9e:a7:58:a6:c0:dd:7d:8c:f4:00:
d4:30:b9:35:c8:08:ae:6d:5e:25:9e:ee:7d:79:f0:
25:bf:a6:5b:6b:11:39:d4:d7:bd:f1:55:af:5a:12:
af:75:ae:6a:ca:ad:ef:88:6d:96:28:55:18:dc:e2:
a5:d5:62:0d:1b:fa:46:0f:37:26:b2:32:97:f2:44:
bc:6a:46:6a:e0:cd:bd:c2:59:5f:cb:7a:87:ce:ca:
89:b8:a9:7e:d6:2f:6a:63:08:13:78:8a:28:68:ad:
3a:9f:79:f2:7c:d1:9f:7d:b3:cf:d4:7a:8d:1c:48:
65:b3:14:dd:9f:ef:d3:56:d8:f9:4b:97:33:5a:ba:
b8:28:0b:c0:c4:81:71:87:0a:7a:7c:70:51:31:36:
1f:d6:9c:92:a7:f2:d3:72:0c:35:9b:a5:6f:59:52:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:AA:C8:49:A7:F8:CD:AF:4B:8D:31:DC:4D:20:4A:A2:81:7C:30
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:9c:20:6c:80:bf:44:85:8f:85:4e:dd:95:1c:67:9e:9c:
c5:d6:a0:5d:60:7f:f3:5f:c1:ce:f9:3f:a4:a1:c1:67:27:8d:
88:3a:4e:fe:a3:7c:6d:6f:c8:c8:0f:d3:f2:1d:4f:76:2d:db:
c5:fd:2f:95:bf:6a:6c:4c:fa:ec:20:c8:60:6f:cf:ca:3d:f2:
5a:3a:2e:f6:d3:f7:79:c2:e8:2d:3f:96:8d:a1:74:9e:33:6c:
8a:ee:8f:7c:05:5a:3e:61:78:6c:49:be:1f:a7:01:aa:51:23:
57:a9:89:cc:c6:9d:c7:28:7c:a6:b7:cc:63:10:e8:85:75:66:
77:7d:18:5e:69:82:fe:91:d0:e6:a9:e5:a2:1c:74:3b:e8:b2:
23:7f:2c:8a:e6:5f:56:00:a2:43:77:5b:9e:ce:e8:35:64:a3:
0c:ca:0a:62:26:a2:a0:8e:ea:0a:eb:ee:00:82:34:34:53:3f:
5d:19:94:1c:6c:d2:97:b2:45:e9:2e:7b:6b:56:54:1a:52:e7:
5e:0a:ad:5c:3b:6b:4d:39:1f:95:6a:dd:83:a1:39:06:ff:e9:
30:12:b1:f7:b3:4e:06:5a:89:6d:ad:ca:dc:b1:24:cb:15:c7:
c9:91:01:1d:9c:a1:fc:88:db:b4:cd:74:9a:c1:95:3e:cf:97:
66:70:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:30 2025 by rpki-client