Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: GXev6aIhClyYybHgsNsc+9Na9pXPIb/P44pFyHMQu/0=
Subject key identifier: 5D:7F:E3:5E:02:86:24:E7:C1:AA:AB:32:AE:58:71:F6:CA:75:8A:54
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0197782EC1BBC2E8AC987C4088AFFCF112DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 0845
Signing time: Mon 16 Jun 2025 10:00:19 +0000
Manifest this update: Mon 16 Jun 2025 10:00:19 +0000
Manifest next update: Tue 17 Jun 2025 10:00:19 +0000
Files and hashes: 1: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: Lr+cUjxnFA5DackJ6L6ClyoLwqmUvoAHyReLQoKlYac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:c1:bb:c2:e8:ac:98:7c:40:88:af:fc:f1:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Jun 16 10:00:19 2025 GMT
Not After : Jun 17 10:00:19 2025 GMT
Subject: CN=5d7fe35e028624e7c1aaab32ae5871f6ca758a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:48:07:89:70:85:56:17:86:4d:90:c0:e5:
84:ef:c2:6c:68:1b:21:a6:c5:41:9f:bc:54:57:51:
e2:45:c3:cc:c9:ef:e0:61:58:50:9b:6e:0f:83:2d:
47:93:3d:d9:2a:7c:92:23:83:15:6b:c5:fc:bd:69:
f5:14:e1:20:97:b1:3d:0f:50:46:ea:18:98:5e:f6:
cc:d2:2e:89:f2:d6:ce:a2:e7:85:c5:5b:19:31:83:
32:5d:be:a5:02:dd:aa:4d:9a:69:7c:c2:21:38:ad:
1b:f9:6c:bf:7b:c1:b4:0e:bb:de:2a:f7:7c:04:04:
61:3a:33:d2:c8:5a:13:e7:ad:90:4b:cb:32:59:9d:
b0:bd:c7:cf:b7:fb:5a:ce:86:67:63:3b:81:75:d0:
ad:1a:d0:6b:ba:d6:c5:a5:89:97:25:41:4b:68:f7:
a2:54:17:ea:7b:89:13:5c:c7:53:0f:01:f8:77:51:
d9:17:3e:ba:ae:35:28:8a:f4:30:f0:1b:b4:80:1b:
35:7f:5a:04:c9:29:4a:52:41:4b:0e:da:42:85:8a:
47:76:02:d3:46:76:a8:a3:c9:36:21:1d:88:3a:ab:
19:c6:c1:31:d1:2c:b6:37:62:c3:c2:23:09:d7:09:
8b:47:cc:58:d6:8a:8f:69:d2:4c:b9:0f:6f:71:29:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:E3:5E:02:86:24:E7:C1:AA:AB:32:AE:58:71:F6:CA:75:8A:54
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:7c:de:d4:69:b8:54:03:66:c3:53:fd:97:b2:81:f5:b5:
9f:b9:12:c1:b9:7d:4d:05:ec:c4:1f:f7:da:4b:bb:39:b1:79:
2c:bc:e6:b0:32:ef:68:99:6e:fe:53:43:1c:ea:a4:4b:1d:de:
d7:2f:e8:9f:76:ef:a3:d3:22:3b:3c:04:44:08:f4:c3:32:34:
79:2a:83:8b:8f:1c:4d:06:75:d3:32:d5:31:6c:91:8f:fc:f1:
c2:26:a6:88:ec:22:e6:9b:56:57:f1:8e:e4:eb:80:de:7e:81:
5d:dc:29:3d:52:60:5b:8d:aa:8d:6f:63:a0:48:e2:18:8a:90:
f6:2b:f5:b8:91:38:c4:21:80:a8:fb:d2:5c:35:13:a3:06:cc:
e3:91:aa:d8:a6:1c:49:ed:50:89:10:63:91:aa:92:32:97:aa:
b9:89:e5:84:60:c1:0d:b6:5f:d9:ec:f8:74:06:fb:c3:63:76:
b4:92:6c:b7:31:41:8a:5d:41:76:d1:e4:ab:09:aa:8c:13:ab:
dc:13:e3:31:3c:f0:6e:01:5c:95:d6:92:64:12:36:b6:ea:36:
6a:13:19:98:37:74:f2:d7:cc:84:b3:d0:70:35:37:2b:ab:9b:
1c:77:a5:41:28:16:8e:4e:54:71:32:2b:d2:a0:13:97:18:c9:
88:8a:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:18:45 2025 by rpki-client