Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: x4iBefHXe4uHUc8fGG8JERmrf/aJfXh6dKOdBaFDCLQ=
Subject key identifier: D6:C2:D4:DA:4A:9B:51:8D:17:23:81:86:3F:7E:62:0A:BA:A2:1F:7A
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01976D74880C3EB1C56848154EC44BB943FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 08:00:42 +0000
Manifest this update: Sat 14 Jun 2025 08:00:42 +0000
Manifest next update: Sun 15 Jun 2025 08:00:42 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: WSo/zNlSFLGdEnakxxuKX9cg5FhCc0REYwokCZSYM10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:88:0c:3e:b1:c5:68:48:15:4e:c4:4b:b9:43:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jun 14 08:00:42 2025 GMT
Not After : Jun 15 08:00:42 2025 GMT
Subject: CN=d6c2d4da4a9b518d172381863f7e620abaa21f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:90:ce:c6:7e:86:42:ed:cb:38:6d:20:86:
f3:3e:eb:2e:38:a7:9e:1b:d9:65:3b:ec:91:2d:84:
7b:7e:43:48:9b:97:d9:d5:b1:ab:84:30:de:96:6b:
c9:05:28:6b:3b:a1:60:7b:a5:35:a2:0f:d3:d6:5b:
90:ce:be:76:78:41:83:68:d3:52:f4:86:54:54:d0:
37:9e:32:81:9a:03:80:7f:4e:15:1f:1c:7d:bd:06:
f5:57:ef:ef:26:ee:f3:dc:15:7a:44:46:8d:62:6b:
9f:3f:86:7b:9f:86:63:eb:61:7c:75:20:00:fa:5c:
5f:ad:fc:82:50:02:98:c5:95:39:79:53:9b:fa:44:
c5:34:30:83:a3:9c:35:2b:96:6f:4b:91:32:a4:9b:
ce:92:26:5b:75:24:53:27:3e:fc:ef:f8:fe:20:e9:
61:6b:e2:1a:d2:c8:9c:9d:ab:8b:5c:fb:a3:bd:19:
d4:2d:23:3e:b1:1e:32:32:5b:2c:2b:c9:24:f3:a8:
9b:d9:42:d0:14:0b:8c:10:12:72:f0:39:72:5e:84:
f1:e3:04:32:c6:f6:be:01:3c:6f:2c:13:e2:43:b6:
bc:5c:bd:80:e6:13:83:ff:25:d7:2c:78:a3:da:cb:
20:25:09:42:0e:04:f1:44:a9:87:05:90:82:7e:b3:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:D4:DA:4A:9B:51:8D:17:23:81:86:3F:7E:62:0A:BA:A2:1F:7A
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:90:71:5e:72:10:bb:2f:fa:67:c5:0e:11:e0:1c:52:9a:
11:d3:68:0c:b3:42:ed:93:94:0a:f7:4f:2a:b8:d4:3d:2f:3e:
48:11:a2:32:74:a7:b2:ee:d4:9d:a1:3f:c6:ae:2b:ae:ee:68:
51:e1:ff:02:cc:9b:ec:6e:c2:4d:d9:7c:f5:39:0c:24:5f:15:
c6:ce:41:37:b5:ca:ae:ab:fa:cb:e9:bc:d7:28:0e:2d:6c:32:
64:d9:06:9f:6d:c4:b7:c7:b2:d6:5f:63:c2:b5:37:98:79:32:
0b:c0:9a:4a:a4:ae:10:83:ed:ec:66:b1:ff:1e:11:dd:8f:b5:
0c:f9:6f:40:af:d8:f0:1a:09:cd:ab:ef:89:3a:fb:7f:e1:9e:
fd:96:53:f4:29:0e:60:b4:96:42:fe:ad:9e:0c:d3:e6:d6:ca:
8a:4c:00:b3:12:51:21:85:30:4f:82:c9:f2:cc:fe:2f:1e:60:
27:24:11:87:b6:c8:91:b2:79:c6:df:c7:21:99:a9:8d:70:ca:
99:1c:9f:39:6d:fb:1d:9d:57:52:3e:97:f8:a9:8b:56:0b:09:
bf:40:06:e0:23:a5:64:ca:72:82:7b:2c:f0:1a:d9:c0:4f:f6:
06:3f:88:32:6d:7e:39:f4:3c:6e:c1:48:d6:15:4d:c7:84:ef:
03:7c:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:21 2025 by rpki-client