Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: RkZuFhd1nnH/m3nw206SDZI5oAEGBRwnbhQJfnSB06M=
Subject key identifier: 97:9D:38:DE:93:38:2E:4A:F6:E5:7C:53:53:84:D8:C3:E7:20:BF:F9
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0197B6D734E3651CC82C92290261D5634A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1463
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: S7VJ/wjOOW0a/Xw2zp7SvFJnEu/f34dX2h8qQ+v5ihA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:e3:65:1c:c8:2c:92:29:02:61:d5:63:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=979d38de93382e4af6e57c535384d8c3e720bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:9d:a6:f4:41:44:6d:88:a9:85:71:69:e9:
07:02:8c:67:e1:8f:94:29:76:bc:b2:6f:2a:6d:60:
71:bf:97:14:5e:58:4e:c4:5c:35:92:5b:29:3c:ea:
9e:9a:59:99:bc:0b:21:ac:f3:97:4a:ad:77:09:77:
3a:37:2e:f6:1d:cb:3b:ad:90:ce:fc:17:bb:f6:7d:
d9:96:88:d5:ed:35:0f:d6:21:bb:c1:8b:f5:ad:44:
57:80:bc:57:f6:34:5d:5a:d8:c8:25:25:c2:d9:f7:
e9:0e:fb:54:68:59:12:75:0e:ba:a1:68:6f:a5:95:
24:8c:0f:a1:40:1c:49:d5:f3:0e:8a:c1:34:f4:ad:
da:16:50:f1:81:e0:6c:1c:c8:ee:be:cc:38:61:f4:
4c:cd:fe:fe:ff:42:22:f2:7f:cb:7c:a1:a9:ac:49:
7d:24:fc:8a:b8:87:37:1c:18:64:7e:cd:c6:b9:5f:
65:44:75:13:cd:14:91:8a:c4:11:d0:0c:20:4c:25:
34:ac:bb:44:ea:53:ea:1e:71:4a:0c:03:84:dd:0e:
56:50:23:f1:ee:1b:e5:0d:bd:84:9a:37:31:2d:02:
bc:11:a7:07:cf:77:d8:f9:13:ef:8b:69:fc:6b:ed:
3e:52:53:96:c0:e2:94:aa:cc:38:b2:f7:28:b5:a2:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:38:DE:93:38:2E:4A:F6:E5:7C:53:53:84:D8:C3:E7:20:BF:F9
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8d:aa:dd:0d:e6:2a:6a:72:66:3d:55:f9:1c:40:e8:59:a9:
50:ae:b1:07:a2:8a:aa:e6:7e:b2:be:da:a4:bb:bf:56:5a:5f:
98:8b:0b:f0:50:80:81:cd:fe:30:4e:15:c0:ef:9d:bf:05:72:
a0:21:33:74:0e:24:14:ca:4d:dd:af:70:e4:44:0c:c4:88:0f:
a1:57:6b:4b:22:5e:59:2a:11:4a:84:a7:35:a9:2a:fb:2a:13:
d5:a0:d6:d0:c8:9c:2e:6c:cd:22:37:18:a9:3c:ef:4e:a4:12:
f2:0c:fb:bf:2a:95:fc:e2:5f:e0:7b:31:d9:cd:58:60:79:fe:
f4:da:cb:a2:c8:9c:71:47:f9:4c:9a:df:b2:62:0e:bc:ce:b0:
d3:43:0c:b8:bb:ff:9c:67:b4:a1:7c:16:e6:53:a7:b6:ba:e5:
4e:d1:b7:3a:12:2c:03:9e:cc:7f:14:20:76:c1:06:3e:15:83:
5e:e0:2b:9d:c2:69:1c:18:50:e3:eb:16:45:7c:3c:31:f1:74:
57:22:43:dc:29:3c:01:98:da:8f:0c:48:24:fc:ed:a6:e8:8f:
85:fd:c3:0f:23:01:1d:f3:b8:8b:39:21:85:f3:8a:1c:12:60:
f4:1a:df:05:50:00:62:c4:69:d0:c1:d9:4a:21:18:b9:09:54:
3f:24:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:28 2025 by rpki-client