Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: PVrLeLRkpoBVmzcJmlH1gtoajXshJnKHJKgmBnz6PWE=
Subject key identifier: 42:73:86:55:23:36:1D:E4:76:C7:DE:71:E1:DF:54:7F:DD:41:E5:DB
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 01987E65C6DE13963D755D350F2E04B0526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 13BB
Signing time: Wed 06 Aug 2025 08:00:55 +0000
Manifest this update: Wed 06 Aug 2025 08:00:55 +0000
Manifest next update: Thu 07 Aug 2025 08:00:55 +0000
Files and hashes: 1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: 8YZB75eLdESnxIGJEUxkGAAfejoLV5gPkfaZFB/ThaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:c6:de:13:96:3d:75:5d:35:0f:2e:04:b0:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Aug 6 08:00:55 2025 GMT
Not After : Aug 7 08:00:55 2025 GMT
Subject: CN=4273865523361de476c7de71e1df547fdd41e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:7c:cc:b8:97:95:c2:3f:e1:ed:80:00:87:
0e:e9:d3:da:1a:eb:9a:90:d6:93:c0:2f:d6:5c:72:
d9:fd:d3:88:36:1e:15:83:30:06:42:6d:c2:e2:d6:
bb:03:99:db:f7:55:c6:1e:aa:cd:d7:1b:a0:21:eb:
f2:41:2e:af:75:ad:53:9d:e4:c9:ec:68:ff:61:82:
5a:c4:af:48:b7:d2:71:de:c5:9d:6f:b9:66:9e:8d:
66:8b:b0:21:bf:d3:aa:4f:d4:18:56:92:ea:98:df:
92:19:8f:c7:1f:cc:bc:17:45:83:b1:a0:0e:b9:88:
0f:22:c9:c1:b3:b6:ea:59:03:63:ca:09:9a:63:1c:
fe:fd:79:04:9c:62:65:3d:67:3f:2a:b4:47:29:19:
db:fb:bb:db:5b:e3:54:88:26:56:0c:3a:dd:4c:a0:
2a:22:24:d4:5d:60:36:ad:fa:cb:c1:aa:84:b2:12:
78:a5:c8:d8:11:fc:d2:fa:a0:d3:57:8b:4c:76:f1:
27:28:2c:77:40:13:69:f2:cb:8a:cf:78:ef:06:d5:
a7:19:93:52:23:86:12:f1:fc:c2:7a:ee:6b:ff:b0:
ac:2a:66:b8:1b:4c:c6:79:6b:e7:16:6e:71:05:97:
06:dc:fe:0a:dd:bd:6c:8e:7f:9a:cc:3a:e9:99:6b:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:86:55:23:36:1D:E4:76:C7:DE:71:E1:DF:54:7F:DD:41:E5:DB
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:f3:f4:78:89:e7:a1:fd:18:0e:90:6a:0c:d1:57:01:31:
fd:35:0a:90:e8:ef:31:60:91:4d:12:22:b4:6e:36:f3:69:7e:
fe:ab:d0:4f:7f:f0:95:2c:34:86:03:9a:ad:66:36:0a:5e:4b:
50:cd:09:d3:2e:ce:10:aa:dd:12:42:17:c4:2b:55:05:db:0d:
c2:89:6f:19:27:d7:77:eb:ea:03:60:42:f1:82:19:07:c8:ab:
b0:9c:9b:d9:3c:95:55:6c:e5:f3:55:db:b0:af:2f:3b:65:76:
40:a1:aa:38:55:4f:df:22:ac:6d:e0:e5:f2:bf:c0:a7:5c:8f:
d7:5a:7a:09:b6:fc:b8:51:dc:99:aa:0f:13:8c:5d:51:78:59:
1f:f0:67:c1:99:9d:ef:3f:e5:ed:59:bb:4f:a7:ee:70:a0:d3:
c5:95:e8:1d:d6:b5:04:f4:7b:9d:2f:da:ca:10:b1:ca:a1:d9:
69:b3:47:e5:94:93:b8:c0:06:c3:89:31:8e:87:07:7e:e1:04:
67:6d:08:f5:31:28:a4:59:4d:88:11:00:37:3b:a6:49:88:ff:
17:d6:c4:76:4f:c2:54:90:5c:60:62:2a:1f:5d:6d:fc:3c:54:
08:cc:56:9a:6a:53:be:d5:5f:48:2d:b0:ae:09:c1:43:27:86:
b2:ec:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:14 2025 by rpki-client