Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier: zFPEZ+Lhul2ET3TLoEwc+XKVKb0eCCB1us45jWvBxVM=
Subject key identifier: CA:22:9D:31:DA:2F:37:FB:4B:53:53:57:D3:12:49:7F:98:38:D8:DB
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 01976F2CF94AA8778E8506F70BD540A7B6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number: 10A0
Signing time: Sat 14 Jun 2025 16:01:47 +0000
Manifest this update: Sat 14 Jun 2025 16:01:47 +0000
Manifest next update: Sun 15 Jun 2025 16:01:47 +0000
Files and hashes: 1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: WFfB52HK4/69fBogAJSoJvow9sWeZwUxphwyFSI+nsE=)
2: GzhIxob9bA8Czihl63s_AVDH8xs.roa (hash: WxcqeaBj1wEhDd9uj+K5AOhKzURT0h/j4LhtZQ31WLU=)
3: PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa (hash: usR3Xps8iALKamgQOqDuPMkcsTbDs9FVlCIAfdu28Yg=)
4: RA-miC4KaEWvGjUqoItCz1hzspU.roa (hash: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=)
5: RYqwCne0Subns8-y8iVavkOq2Qk.roa (hash: Z+d4X06SrKehtMK8KmBcdyINkP+XRfxB7bKH0XKqtgs=)
6: aAjiTGjBvK-qa1UvGqne8OL4KrA.roa (hash: BjZaYz009qatAltLmOSug4n6bf9uQdN4teDrrkkHNbw=)
7: fe1oOTHUFPkwFLaBhSJgtXk18K0.roa (hash: fkkgIxypjSY0trqrdH7vDswC8HMHlpDfymztaFU8S48=)
8: xSBLAUIBkAaXVfG28KwmA-ZeLjA.roa (hash: +GtT6G/GYlmVcKLK3ncI4uHy4NjU73KHg0yKe98N+yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:f9:4a:a8:77:8e:85:06:f7:0b:d5:40:a7:b6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jun 14 16:01:47 2025 GMT
Not After : Jun 15 16:01:47 2025 GMT
Subject: CN=ca229d31da2f37fb4b535357d312497f9838d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:d6:0f:73:92:b0:66:f0:a3:df:4d:3e:cc:
21:fa:41:cf:ac:64:60:06:9b:b7:fc:51:05:60:8c:
22:bb:2d:be:3b:ef:61:2f:40:0f:6f:5e:36:82:e5:
30:05:43:df:a8:22:4c:05:04:b2:96:f7:a5:51:3f:
f2:94:8a:87:7d:5f:d9:48:79:bb:15:ec:ac:e1:b6:
03:4b:ec:77:e0:49:3a:52:48:6a:94:28:2f:15:77:
0b:86:29:d3:28:7b:e4:e3:9a:c9:63:36:ab:71:98:
f7:de:4c:72:a1:28:a2:51:4a:a0:9a:50:43:c0:01:
96:2b:39:93:33:b0:33:a3:bb:b1:9d:29:35:00:ba:
a5:16:88:8b:57:a0:09:c4:5d:9e:a2:71:1a:13:9a:
37:9c:61:e2:ab:8b:07:98:f5:66:66:84:0f:50:73:
bd:94:d4:da:69:94:49:90:ac:9e:75:40:61:7e:a1:
c1:4d:36:e1:3c:7c:b9:e5:1b:91:f6:ed:a6:fe:aa:
e9:79:54:c3:3f:bb:c6:14:57:c6:a0:f7:35:cc:07:
79:b6:57:49:be:e0:c4:c2:28:20:6c:00:6c:d1:91:
a3:84:51:17:ef:51:9a:21:24:f8:07:bc:84:96:5e:
f5:76:2f:87:4b:47:15:b2:72:15:fe:55:9a:a4:42:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:9D:31:DA:2F:37:FB:4B:53:53:57:D3:12:49:7F:98:38:D8:DB
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:d8:a5:df:c0:38:6e:2b:75:ce:df:6b:9d:9c:43:da:26:
9e:71:34:7f:43:70:78:bd:b8:86:44:56:f5:e6:09:76:33:53:
f0:5a:8c:a9:e5:a1:55:59:c3:23:09:01:ba:24:c4:96:b3:a0:
96:e5:9e:f6:1a:0e:ff:b0:d6:ab:cf:c0:8e:a9:32:66:29:a0:
26:2d:57:0a:e7:6d:4f:bb:af:94:39:c6:26:db:85:3d:63:4a:
3e:d4:7d:50:4f:0a:fa:41:4b:6a:33:2c:8c:d8:e3:04:51:98:
d7:92:9f:1b:a9:59:39:61:c6:92:6a:e2:ae:e6:c1:45:2a:c2:
73:9d:4c:a7:bb:b5:d6:e1:06:5f:fb:eb:85:03:f0:10:20:c9:
7a:85:6c:bb:99:c2:6f:97:ae:d8:0c:a4:d5:a2:81:63:44:7b:
3c:90:ce:db:e4:90:73:b9:0b:cd:ec:ab:a5:cc:a7:8e:a5:1c:
da:83:b0:3f:97:75:fa:f0:bc:b3:67:4c:78:63:ab:aa:00:8b:
d3:9d:4b:e2:1e:09:4c:ff:1b:ad:54:32:c4:ca:81:04:66:bb:
cd:19:0a:8c:d9:74:b2:53:32:d8:2d:47:a5:b4:cf:28:64:2c:
c7:13:11:48:03:9e:4a:38:2b:9e:17:19:f0:bd:fc:bc:68:b8:
ff:a4:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:29 2025 by rpki-client