Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier: Uzo/GZUdmu3XT+pn4zHTq+k7iUwNlDO1mfN2WW2mU50=
Subject key identifier: 58:5A:09:50:45:97:D8:57:45:1F:B0:65:F4:01:D7:72:A2:4B:F0:04
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 01977150F2D508EA14F4B4ADB04CCBABEC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 02:00:19 +0000
Manifest this update: Sun 15 Jun 2025 02:00:19 +0000
Manifest next update: Mon 16 Jun 2025 02:00:19 +0000
Files and hashes: 1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: DNwgW6haO76/6T4yf6dCR1jKSsjRKE5FjHSBtKt2ers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f2:d5:08:ea:14:f4:b4:ad:b0:4c:cb:ab:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Jun 15 02:00:19 2025 GMT
Not After : Jun 16 02:00:19 2025 GMT
Subject: CN=585a09504597d857451fb065f401d772a24bf004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:51:d7:6c:2c:7e:94:61:27:b0:21:02:67:
4f:35:7c:1f:9e:65:64:ab:87:af:42:f4:73:dd:e3:
28:d0:56:c0:7a:f9:99:b4:4b:25:5f:27:4e:d1:e3:
bf:08:0f:9f:c9:65:38:0d:df:a7:61:3f:7f:79:04:
85:8d:8a:cb:ee:60:74:49:5c:0c:84:f9:cc:e0:ce:
0e:79:79:5f:a6:c2:af:5e:53:14:9c:01:94:10:c9:
e0:03:1e:22:09:57:d6:33:45:80:06:e0:58:3e:f7:
76:da:fa:a9:bb:76:96:54:63:7f:89:ce:8a:25:59:
80:19:52:da:dd:ff:83:dc:70:f3:cc:8b:18:1c:e6:
ff:0f:71:e5:bf:15:de:80:be:a2:00:7a:ce:82:06:
96:77:c3:b5:3f:0f:47:e4:fa:58:26:44:b5:8d:97:
78:78:d3:87:bb:09:23:23:34:98:97:43:66:7e:0a:
2d:14:20:b2:5b:69:0d:49:ab:ad:92:ba:cf:3b:5f:
cb:aa:8f:ed:ff:f0:14:96:75:ad:e7:28:3c:79:1f:
79:bb:02:52:37:11:6e:e5:03:4c:1a:a5:f4:b8:60:
56:5f:39:a8:b6:e6:d9:57:5f:60:0f:ac:54:04:e5:
5b:d3:2d:1b:7f:85:1d:23:58:c6:2c:82:e9:55:e4:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:09:50:45:97:D8:57:45:1F:B0:65:F4:01:D7:72:A2:4B:F0:04
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:53:ed:b1:e9:00:de:b6:65:50:75:07:4e:72:8a:48:78:cb:
3c:c4:49:db:ec:b5:66:c4:e2:01:07:55:18:62:cf:03:15:d2:
1e:cb:0c:5d:c6:f9:45:44:4d:e7:3d:f8:c0:c8:d4:b8:a7:84:
c3:e5:8e:3a:93:fe:59:4d:28:f8:81:0a:a9:14:47:79:db:ae:
d5:95:eb:86:82:17:9d:ff:fa:cb:1e:b6:a4:cc:22:f7:f9:23:
62:dd:cb:ff:95:4c:9a:e6:90:a6:92:c9:16:1a:b2:24:78:b4:
d3:51:f9:81:bf:a9:6a:0e:4a:c0:ce:e3:37:fc:83:46:7b:a2:
c1:30:85:56:64:a0:41:c2:40:e5:45:0b:d0:43:ad:b8:72:59:
8a:09:f2:a5:8d:d7:32:28:8b:4e:8b:88:2c:24:f0:1d:ef:a8:
7c:5d:21:68:55:f1:20:31:a3:8a:a4:df:64:8a:7c:58:99:32:
b5:a5:35:43:fe:1b:4b:95:87:81:06:18:50:83:ef:bb:63:26:
9e:47:1e:90:2c:e8:07:4d:ab:00:c3:7c:7e:de:e7:dc:fc:3b:
75:5c:b7:a5:68:12:73:9b:08:a1:22:2a:dc:30:5a:3a:d9:1a:
f0:1c:b3:af:01:41:54:1b:9e:5b:cb:dc:c7:27:23:a1:9c:03:
e2:83:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:46 2025 by rpki-client