Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: oRCH5VLozxDtXNTeBGsMqrxNxgN3cbCpXLfSELKrrck=
Subject key identifier: E3:90:A0:56:41:95:9E:06:8F:F6:8A:91:41:99:AB:0F:7F:59:AE:5A
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 01976CCFADA2452DA3FC3F6872041F9E55EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 12AC
Signing time: Sat 14 Jun 2025 05:00:39 +0000
Manifest this update: Sat 14 Jun 2025 05:00:39 +0000
Manifest next update: Sun 15 Jun 2025 05:00:39 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: eDjXmMs58/zK729C27vup2+62/XgSbD5GoJS7dHmtnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ad:a2:45:2d:a3:fc:3f:68:72:04:1f:9e:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jun 14 05:00:39 2025 GMT
Not After : Jun 15 05:00:39 2025 GMT
Subject: CN=e390a05641959e068ff68a914199ab0f7f59ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:99:c6:40:2a:72:ba:46:a5:d2:c1:6a:d3:
56:98:55:24:05:fc:2e:b2:cb:cf:00:0f:b9:4c:a7:
f7:15:a9:4d:af:5f:f5:94:90:50:8d:da:e6:91:23:
2b:82:63:25:af:0d:0d:7f:20:9b:05:2f:5b:cb:f8:
c2:9c:68:a4:cb:ea:a1:40:db:a9:32:98:c9:b2:4b:
05:d7:5c:5d:c2:e3:ce:aa:34:93:a1:65:5e:6c:28:
3c:42:7d:25:f8:65:ff:91:a7:c8:2a:e3:34:e5:e1:
eb:26:05:44:37:e2:89:1f:61:fd:aa:1d:77:a0:18:
1e:06:34:25:da:38:be:b9:1a:ad:9f:39:9e:39:39:
75:3f:63:26:41:63:f6:bb:c5:4a:27:2a:84:5f:ea:
2c:5f:4c:a9:5d:5a:e3:9e:bb:6f:8c:41:d0:86:50:
01:7d:a7:6d:b7:c0:06:54:ae:84:89:a1:6d:0d:69:
99:bd:9d:5d:f9:86:53:16:c7:21:3e:93:b5:98:f6:
b8:22:0d:10:f3:99:fb:59:dc:58:2a:4a:e1:f3:ed:
cc:97:5d:41:e5:c0:29:d5:c6:b5:83:78:c2:5b:fe:
0a:9d:4a:3a:1c:5c:fb:0f:84:a9:66:6f:47:1b:58:
cc:c3:ee:65:b5:25:8c:a6:f3:c9:0b:ff:e9:00:24:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:A0:56:41:95:9E:06:8F:F6:8A:91:41:99:AB:0F:7F:59:AE:5A
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:63:6d:44:e4:f8:c7:24:97:7b:77:b2:6e:bb:52:f5:a6:7f:
a7:35:ba:6d:1c:05:84:c7:ce:e3:9e:53:7c:07:14:a4:07:e9:
37:db:68:b9:70:00:99:e6:a1:69:a4:83:a9:d2:0f:cd:60:ea:
f1:ff:79:45:f7:0a:5c:40:f5:87:42:9e:ef:e4:da:a2:19:e7:
01:28:50:31:3a:5b:4d:ea:c3:ce:70:b4:c7:d1:f7:81:f2:ea:
b2:4d:42:36:9f:9c:05:ce:9d:32:c6:bc:9e:45:77:5e:de:20:
ad:f8:49:4d:7b:cb:ee:b7:a2:58:db:27:c0:dc:4c:73:a4:46:
3b:55:1f:c5:48:f3:bb:11:09:9d:f9:4e:f9:06:6b:16:c8:16:
5e:9a:ef:02:0f:22:29:e1:48:c3:cb:13:4f:59:61:07:87:a3:
c6:20:f4:f6:9e:e1:ef:fb:75:82:10:65:c8:02:92:a0:37:ab:
dc:c2:ea:c1:c1:98:da:ba:53:28:69:58:37:71:7a:2c:09:51:
ae:02:12:b4:d8:1a:b5:58:c8:9c:71:66:eb:c9:96:6b:e0:57:
e4:9d:7d:8e:bd:cd:a8:bf:2e:e3:fa:65:85:83:c5:4e:8d:60:
cc:95:22:96:e3:f1:45:05:bf:09:21:c7:74:64:79:fd:c9:20:
dd:6c:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:34 2025 by rpki-client