Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: meon1R9p2wIUx8yF7xIUHIPC6NiZwefcBStDu7gpTm0=
Subject key identifier: CA:34:15:38:98:6C:54:2F:50:3C:AA:0E:0C:3B:04:D3:8A:A5:42:4B
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 01977A8B0C969C42069D773A019C70ED986A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 21:00:22 +0000
Manifest this update: Mon 16 Jun 2025 21:00:22 +0000
Manifest next update: Tue 17 Jun 2025 21:00:22 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: E20lFLAfiyBKGsDDArJLJj8DKFeMOczmSAjRqItSUJI=)
3: hpKUEYSoGHkE0FTfiYlqZGeAk1A.roa (hash: aS+EY09klLsP1Q0iTAqB6odVzuvAAWvABKFa+TlzvPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:0c:96:9c:42:06:9d:77:3a:01:9c:70:ed:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Jun 16 21:00:22 2025 GMT
Not After : Jun 17 21:00:22 2025 GMT
Subject: CN=ca341538986c542f503caa0e0c3b04d38aa5424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:a1:a9:87:ea:2c:e9:6a:52:09:dd:66:c6:
05:15:5a:62:92:1b:a3:9e:93:ca:4d:d2:ec:41:62:
66:3f:a9:ec:6d:50:bc:cb:3e:88:c0:21:c5:d5:a1:
a7:03:85:70:5a:b9:e4:a6:4a:42:46:eb:5a:db:d0:
f4:16:8b:43:92:a3:5a:d0:33:e5:67:44:8e:82:d1:
f8:f4:6c:b8:c4:20:0f:d0:bc:af:ea:4c:f4:58:37:
f8:53:a2:f9:b1:50:e1:28:fe:c4:d7:60:05:72:d5:
4b:56:d0:7f:d9:42:eb:bf:40:c2:46:83:34:d4:46:
74:cc:a2:6a:34:32:08:dd:72:ab:dc:89:a3:bb:61:
27:4c:fb:0b:b5:72:d2:d4:c4:cb:cb:a5:c3:be:58:
be:7d:24:b1:eb:40:a8:bd:9c:b9:4c:04:4d:75:3e:
da:36:8d:ff:c7:84:47:4c:cf:4a:9d:43:18:5f:01:
cd:0a:6b:c6:30:ea:dd:84:5a:74:f6:a3:ba:fe:4c:
de:f5:24:82:8c:12:9b:45:18:33:8c:2d:dd:93:fb:
e0:d8:44:d0:8b:34:51:3a:4c:06:4c:4e:8a:7b:cd:
9e:e7:2d:b5:62:0b:b7:47:8e:97:d7:10:41:ad:da:
70:0f:d2:10:b7:3c:f9:4b:8b:15:20:6e:db:d6:6d:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:15:38:98:6C:54:2F:50:3C:AA:0E:0C:3B:04:D3:8A:A5:42:4B
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:89:16:58:54:84:24:96:d1:8a:e2:6a:2e:5f:0c:48:65:
7c:54:6f:14:f5:0f:b3:05:03:4b:35:6b:f1:8f:5b:c3:a7:e9:
80:c8:b0:66:f8:5a:5f:15:da:e9:bd:e4:82:18:e4:d3:02:5f:
03:44:bf:17:4c:1f:d8:6c:82:f0:82:0e:81:04:ca:13:2b:31:
eb:90:0b:ee:40:8e:67:e9:d3:19:99:f5:16:76:d9:8a:f4:08:
56:c4:f2:4d:c7:dd:e7:0a:85:b7:99:4b:f0:1a:c3:d0:43:96:
0d:10:ad:ac:62:07:37:f3:20:6b:d4:5e:d8:ad:96:4d:d3:f0:
9b:e5:03:35:b3:9a:a2:5f:81:63:c9:af:ee:bb:9d:ed:72:b4:
97:17:dc:44:84:73:53:af:83:af:a6:5a:e5:1c:1c:2c:9f:4e:
db:70:1b:dd:f5:6b:15:d9:16:89:ac:25:a1:f3:75:ad:dc:48:
48:f1:8f:b9:dc:9c:6a:33:b0:2b:d6:c7:97:39:86:9c:8a:97:
39:91:5c:99:63:59:fa:72:97:0c:30:33:71:c5:78:9c:a5:54:
46:dc:0c:14:0a:9c:04:e7:13:23:7a:03:8c:22:88:d2:21:61:
65:c8:8e:dd:4f:0e:b4:e3:94:75:09:20:a5:40:c4:fb:97:b7:
5b:4e:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:25:42 2025 by rpki-client