Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: wlrb7MtGABnAdZQihI+wb6CZCNtgk25rB08kumHOxZ0=
Subject key identifier: 88:05:8A:21:D8:7C:B1:06:CE:5D:CF:68:66:72:7A:C9:17:B4:2F:28
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01976C2AA7EFB2828DA5BD5E9E5AD8B28181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: SuTAFKX/CaxB2YvpD830pKLW5o9/9bGbCQemZYZc4Do=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a7:ef:b2:82:8d:a5:bd:5e:9e:5a:d8:b2:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=88058a21d87cb106ce5dcf6866727ac917b42f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:0f:04:52:2a:c8:eb:d7:57:bd:ec:83:fe:
2a:6d:e8:f0:94:50:af:a4:8f:ec:f0:c9:05:e7:32:
c8:2d:bb:0e:60:43:d4:4d:bd:1d:bc:42:3d:8c:51:
d4:82:8a:2e:57:8b:23:e7:27:b2:ed:2c:14:cd:43:
80:90:c5:b5:d1:9a:8b:b5:9f:49:c1:f9:43:c5:5c:
fd:6d:11:99:fd:c4:53:0e:40:0b:83:68:ec:3f:6b:
03:cb:0f:f2:42:b3:4d:26:dc:3e:64:4d:01:02:ee:
e9:01:af:5b:3e:69:1e:d3:f6:55:5d:71:ef:80:ca:
c0:bf:ac:38:28:e8:1b:7c:c0:a4:a2:97:34:2b:de:
1a:bd:63:af:02:30:b6:6d:ac:95:8c:17:56:0a:f5:
ce:b3:59:56:c5:5a:f5:8d:8d:20:5f:85:cf:8a:80:
f2:bb:4f:da:8c:e7:5f:05:37:ff:5a:2e:78:86:d7:
aa:9f:84:73:18:dc:33:e1:25:61:09:f0:4f:fd:05:
41:3a:30:b2:5b:61:e0:04:27:74:a0:82:78:a3:c4:
6a:9a:b3:53:b4:f2:2b:6b:40:ba:59:11:08:95:cc:
c1:68:10:87:0b:3d:f7:5b:5f:ac:23:26:3a:be:f8:
b2:90:3e:bb:35:b2:98:42:e6:73:37:1d:98:23:33:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:8A:21:D8:7C:B1:06:CE:5D:CF:68:66:72:7A:C9:17:B4:2F:28
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:97:15:92:43:fe:2e:d5:10:6c:9f:5c:22:c1:31:07:22:
c3:7c:4b:52:e4:fa:a2:35:8e:f0:32:3e:e4:54:33:d2:5d:f0:
e7:d2:97:ac:a7:4c:0a:72:6d:ac:ec:4f:b0:31:9c:8c:2d:74:
16:11:db:61:3c:2b:9e:d6:e0:fd:cb:90:f0:e0:1c:3e:83:1f:
83:92:11:34:a1:68:e3:f9:6e:f1:31:2f:43:2b:f9:bf:4c:41:
c5:ba:2f:6e:6c:e9:9f:67:cf:f3:3f:03:c6:d2:97:80:4a:00:
0c:49:34:6a:33:e2:7b:e8:8e:da:dd:4b:9c:8c:4b:97:aa:16:
e4:20:b3:2f:b1:80:62:81:13:e9:97:3a:13:89:b3:54:d3:4f:
96:8e:bf:0b:5e:05:18:43:3b:5f:e9:55:c4:de:e8:4b:56:a4:
05:ea:7d:3b:66:77:9f:68:55:c6:42:94:f9:51:6c:68:29:2e:
6d:db:24:43:19:0a:dc:bc:cf:4b:6a:db:80:ed:70:ca:07:79:
25:40:aa:45:df:5e:00:8a:19:fc:35:01:0d:6a:c2:6a:fe:83:
50:08:9f:d3:75:a9:ea:22:09:5d:fa:14:85:d3:ff:59:21:d2:
56:ad:f1:75:e1:52:2a:7e:2b:6c:8e:5f:7e:84:fd:19:46:dd:
e8:f2:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:25:35 2025 by rpki-client