Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: oRjzZaW4koqp5CJ5rfIs63QZHrr5ofbPGGu8htH2tUI=
Subject key identifier: 1A:3B:B3:D8:29:BE:40:B6:29:84:E9:C7:86:01:FD:6A:91:74:AF:0A
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 01976960874D85F3C0B5F08FF99AA4C13A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:00:23 +0000
Manifest this update: Fri 13 Jun 2025 13:00:23 +0000
Manifest next update: Sat 14 Jun 2025 13:00:23 +0000
Files and hashes: 1: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: iTN+5uoaSZAQ+0Totea1/dXVQ+mublxug7xQiqMsyF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:87:4d:85:f3:c0:b5:f0:8f:f9:9a:a4:c1:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Jun 13 13:00:23 2025 GMT
Not After : Jun 14 13:00:23 2025 GMT
Subject: CN=1a3bb3d829be40b62984e9c78601fd6a9174af0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:1d:0c:33:29:1a:d9:14:0a:65:05:91:99:
66:37:9a:c6:57:a5:48:80:bc:81:cc:d7:6d:87:b6:
5e:cb:37:c5:6c:ed:4e:ac:65:a6:5a:78:6a:08:b9:
a7:40:c6:55:a0:50:81:ae:d5:a7:8f:00:d1:42:67:
09:ab:df:8e:ec:f2:51:6c:ca:19:93:a8:2f:c3:32:
cf:ff:15:ba:64:84:ae:46:58:4a:ba:61:48:fb:4e:
11:2b:50:73:38:62:f6:c2:f9:77:c2:f3:8c:06:dd:
fa:60:d2:2c:88:76:91:19:c3:e6:2d:1f:3a:87:35:
fc:18:bd:5e:8c:4a:ee:cd:fd:e8:98:d1:e4:52:6f:
5f:a2:1f:ea:02:5a:20:0e:00:10:14:d8:98:ba:ab:
2e:ce:21:07:f3:8c:05:1d:56:40:38:f9:ca:26:0d:
f8:1c:57:e7:0d:21:45:8a:49:ef:c1:22:20:9f:9a:
9a:f3:b0:25:f9:95:79:ba:12:54:2b:fc:d8:fe:d3:
e6:cf:f8:72:da:70:31:d8:7d:d7:8f:91:7e:fe:62:
f8:0e:12:c8:b5:16:bf:c2:cd:7a:18:11:9d:c6:9b:
cd:2f:0a:73:0b:64:f4:78:e1:3a:1b:3c:15:c0:e7:
1e:1e:e8:fd:66:63:92:fb:97:f6:66:0b:95:60:9f:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:B3:D8:29:BE:40:B6:29:84:E9:C7:86:01:FD:6A:91:74:AF:0A
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dd:00:c3:72:1f:07:3a:93:5e:57:90:37:aa:43:55:b1:c3:
20:d9:4b:70:a5:f6:00:7e:35:d7:44:8b:3a:1b:0d:9d:8c:73:
b4:09:f3:fc:6b:8a:81:38:45:bf:db:03:63:4a:2f:54:42:d8:
ea:8e:f6:db:99:d9:f0:18:2f:94:b3:02:12:f2:70:aa:67:09:
ed:ad:03:d2:ce:23:a7:21:f3:da:da:7e:91:0f:41:20:cc:23:
61:e4:7d:b5:e6:cb:2c:92:49:70:4a:6d:6b:b6:45:f7:0e:4c:
d2:bd:5f:dc:29:66:76:f0:74:4e:46:85:33:65:68:1c:1c:cf:
bc:63:86:6e:13:7b:95:e0:cc:53:e5:86:ae:ac:fe:56:d7:57:
f6:ec:a3:5c:5d:58:12:b6:3a:4b:9c:60:c6:31:87:60:78:ef:
da:a7:2a:6e:7a:ab:e6:0e:97:50:33:07:75:c7:e5:ec:4a:52:
7c:60:73:54:d5:47:13:5b:4e:94:63:1d:39:42:cf:fe:eb:19:
fb:32:28:b8:27:44:63:ae:cb:f3:c1:1a:1c:63:ea:bb:5d:f2:
1e:0a:ec:52:fa:c3:50:b3:13:0e:5b:f4:34:54:81:82:d6:df:
e4:d2:21:8a:be:6e:43:1c:6f:78:23:93:e1:b2:45:60:54:23:
32:83:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:06 2025 by rpki-client