Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: ojXc6V9kk8sKp05ITNxX1N+BH776XXZ2SPKpxhgniZk=
Subject key identifier: E7:3C:C3:EA:86:3D:9E:F5:FD:F7:98:D4:45:AB:69:CC:1B:06:5D:8F
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 01976D3D6AB3412258C6AA9DE1AF6B30EA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0C36
Signing time: Sat 14 Jun 2025 07:00:30 +0000
Manifest this update: Sat 14 Jun 2025 07:00:30 +0000
Manifest next update: Sun 15 Jun 2025 07:00:30 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: frVWpue51wrfZRpm4t2IahzwPJ1PogvWgXKopu8Gk5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:6a:b3:41:22:58:c6:aa:9d:e1:af:6b:30:ea:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Jun 14 07:00:30 2025 GMT
Not After : Jun 15 07:00:30 2025 GMT
Subject: CN=e73cc3ea863d9ef5fdf798d445ab69cc1b065d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:d5:13:62:9c:6c:8c:29:fe:ba:9f:fc:64:
fb:2f:a7:40:d2:92:b8:ed:77:0e:2b:ac:d0:a4:54:
11:83:3c:df:bd:81:9f:a8:1b:62:5a:98:3c:27:f1:
ef:ad:c9:7b:85:0a:84:c8:8f:d4:5b:02:d6:23:3c:
c3:7c:7e:f4:dd:3a:df:29:d0:28:fc:a5:c6:7c:9a:
d8:a4:63:17:60:51:42:bc:fe:ab:26:bf:a9:87:2e:
13:8a:f0:02:93:9f:8f:ad:73:91:80:69:da:00:be:
72:e7:2a:f0:8e:0c:48:8f:c4:00:c7:0e:ba:c7:fd:
a2:4b:79:4c:72:8d:bd:b8:59:02:d5:15:27:8a:cd:
34:3a:a4:86:ce:14:f4:01:78:85:ea:38:bf:24:ed:
93:0b:c9:a0:51:dc:c6:d2:9b:4c:49:22:25:f4:75:
2e:7e:40:42:b0:ad:57:37:60:89:40:55:ac:d2:15:
8c:7a:68:ba:81:66:c7:8f:81:7d:03:c4:07:8b:a7:
fc:68:39:e0:56:67:bf:52:7d:f8:b3:26:9c:a0:d7:
1d:83:a6:e4:91:92:02:c9:13:4a:35:57:8d:f0:23:
99:8f:21:11:e9:ad:eb:8e:0f:7b:8e:8d:df:e5:4d:
2f:ac:66:7b:fd:65:b9:4e:8f:6a:e0:16:03:97:cc:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:C3:EA:86:3D:9E:F5:FD:F7:98:D4:45:AB:69:CC:1B:06:5D:8F
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:f1:ce:8b:56:91:72:c8:4c:9a:19:6f:8c:d7:fa:24:9f:
3f:2c:32:a4:99:c4:c1:6b:ca:a3:b3:24:f4:2a:e5:b5:d7:40:
4d:06:61:aa:c0:11:16:5f:fb:2e:15:1c:0c:c0:e4:11:7b:12:
3f:55:61:31:e8:65:ca:91:f3:6e:52:2d:92:5d:8f:2a:1b:d4:
24:fd:bf:5c:a8:79:9a:1b:db:36:85:3f:01:46:2c:d2:16:5c:
7b:7f:2c:2b:4e:70:59:f6:06:87:9b:f5:ee:52:de:09:ba:5e:
a7:84:98:c0:89:78:3a:f3:ae:26:a8:c9:94:ae:41:46:98:eb:
92:99:cd:b6:84:e6:4f:9f:da:39:e7:6c:d9:86:cf:dd:7b:b2:
a5:c3:71:8b:a5:81:80:9f:36:51:c4:04:ad:2a:e0:af:bf:36:
15:42:b4:fe:ca:f5:55:6b:8b:4a:b7:8a:ac:19:b2:a7:9f:e9:
2e:c3:81:c9:cf:57:95:b7:98:c3:45:88:4f:91:ac:30:c6:c6:
26:9f:2a:6f:db:bc:b0:98:f4:62:2c:e1:02:94:ce:97:ca:bb:
b8:95:5a:7d:54:6b:f5:df:ec:ba:2b:f0:ed:b3:e2:18:cd:55:
7a:e5:40:90:2f:4c:61:20:03:57:40:3f:67:e1:c1:48:ac:43:
4e:3b:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:01 2025 by rpki-client