
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File: eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier: SAmizcPc8/4vp+YbQ0nTxXCzq49kpb4ZPMomrH3tc0g=
Subject key identifier: 8C:69:1D:E4:E9:31:F4:7C:00:C7:80:F4:16:EF:89:45:7A:1B:25:44
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 01976D3DAF30071C3C2860E60FE0C7D64E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number: 0E8E
Signing time: Sat 14 Jun 2025 07:00:48 +0000
Manifest this update: Sat 14 Jun 2025 07:00:48 +0000
Manifest next update: Sun 15 Jun 2025 07:00:48 +0000
Files and hashes: 1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: WboJOwch9M1uhjQQ6xTsgY9SWzlfkqV+Ye5u4S9o4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:af:30:07:1c:3c:28:60:e6:0f:e0:c7:d6:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Jun 14 07:00:48 2025 GMT
Not After : Jun 15 07:00:48 2025 GMT
Subject: CN=8c691de4e931f47c00c780f416ef89457a1b2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:67:1e:2f:f7:87:1a:ef:cc:be:f8:02:b8:
81:a1:d2:34:62:57:16:78:c1:40:d5:5f:42:18:22:
a3:6b:0c:f9:ce:de:93:62:0c:64:9a:36:d4:54:d9:
f2:bd:07:39:7b:75:f5:67:92:9e:a7:4a:bd:68:1c:
f2:d7:cb:b5:fd:c5:6a:d8:6c:63:d8:b1:a8:80:43:
52:f9:39:55:62:84:84:8c:e8:54:72:9a:f1:8c:98:
f5:08:e3:65:10:99:b7:5f:79:15:e8:72:68:f1:74:
eb:a0:5e:19:1a:e3:27:4c:15:84:48:72:68:ef:cd:
10:b0:de:5c:62:26:b9:14:b0:2f:79:82:d6:07:1e:
0b:ec:28:b1:9a:f6:62:c1:a8:d5:db:7d:aa:b1:94:
d4:47:45:97:43:82:6f:ea:88:80:5d:9a:1f:9c:eb:
f2:83:e4:68:d8:15:0c:b4:f2:5d:af:dc:4a:a9:63:
c7:7a:9c:b0:ca:ea:94:5d:a5:21:b4:1d:75:5b:ab:
6e:88:ba:d2:db:15:a8:47:e5:1e:98:ee:49:c5:42:
59:07:30:ff:9e:8d:b4:86:bf:ae:1e:26:5c:e2:e9:
a5:ef:3a:0b:ce:1d:95:d2:45:75:68:e7:d4:b9:04:
bc:67:01:80:40:25:4b:23:2e:0a:23:e6:74:7c:a6:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:1D:E4:E9:31:F4:7C:00:C7:80:F4:16:EF:89:45:7A:1B:25:44
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ee:b9:2f:f7:f0:ab:a9:15:92:c6:18:e4:0c:83:09:2e:ea:
75:b1:77:a1:59:a3:fd:b3:3c:b1:64:4b:89:d2:ea:72:f9:25:
db:8d:60:c1:11:57:30:3d:66:47:3b:28:90:94:72:f5:ab:82:
11:c3:3e:8f:aa:47:c8:83:6d:ab:aa:20:e8:54:20:6d:ca:c2:
ab:38:ff:8d:db:88:6d:94:f8:40:42:93:e4:65:4c:b6:16:d0:
92:48:55:2a:55:37:2e:2b:ce:8b:ac:81:36:e3:e7:fc:f9:73:
4b:f2:80:3a:04:a3:ed:d0:af:63:7f:b8:5b:a5:52:cf:23:f5:
ee:8c:66:59:b4:82:80:e7:41:78:85:70:56:f1:eb:25:63:c7:
ad:12:9a:07:e2:df:8b:e2:c7:02:dc:03:15:7b:4c:6b:44:ad:
c9:57:b6:87:06:e8:84:88:1f:6b:f5:33:3c:f3:e0:d4:d7:05:
80:98:65:7f:9c:33:57:2c:3b:d6:87:fe:a4:26:6f:14:6e:80:
d6:fa:19:ec:32:36:b1:d7:6a:5c:c2:69:b5:21:f4:c0:be:37:
82:ae:ea:c4:df:1b:7f:78:30:20:ff:4c:ce:7b:34:94:55:45:
4b:86:8b:1e:e9:ff:5e:48:85:7d:5e:58:24:47:b2:09:c7:8c:
88:17:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:09 2025 by rpki-client