Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: 3B3eag7C1QMk/yC/ewSfH50Y/DI7XWI9uQeNaHor2NQ=
Subject key identifier: B8:1A:1A:4D:50:4F:B9:C1:D5:46:60:62:CE:72:6C:28:DE:70:03:D3
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 019768F2CC5AE96A9244EC382E13C2C86899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 11:00:31 +0000
Manifest this update: Fri 13 Jun 2025 11:00:31 +0000
Manifest next update: Sat 14 Jun 2025 11:00:31 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: fOecMSjdTeTZFrZmnuBsVv+9ks/z+nTCTE2aHDVorX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:cc:5a:e9:6a:92:44:ec:38:2e:13:c2:c8:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Jun 13 11:00:31 2025 GMT
Not After : Jun 14 11:00:31 2025 GMT
Subject: CN=b81a1a4d504fb9c1d5466062ce726c28de7003d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:3f:7d:ad:54:e8:b3:fe:c2:cd:49:b7:57:
a5:aa:ec:fb:5b:a1:97:c8:a9:0c:20:45:33:9b:35:
ef:28:f8:b2:36:f4:a4:6d:d1:de:b1:f8:66:8f:de:
b4:51:6c:10:7b:d1:c6:97:3c:d0:63:3d:d0:4d:c0:
b1:4e:f6:b3:5d:e6:df:c2:5e:b8:e0:05:99:6c:9c:
d1:b0:07:f3:75:4b:31:c2:e3:ab:d7:65:1b:f4:b8:
2f:4f:91:2a:54:c2:fc:f8:39:d9:d1:6e:58:cc:86:
4c:0c:ce:d1:8a:96:55:3b:26:0f:ec:d4:d6:cc:40:
4e:e1:2e:26:5b:d1:4c:69:b5:fa:6e:58:a6:7c:ed:
a4:3d:6e:ff:bf:3b:39:78:b0:ed:b3:38:b0:e2:99:
c6:d9:e2:ed:57:c6:92:a4:84:ae:57:bc:92:99:f5:
0d:63:2d:6c:85:17:4c:68:c6:ac:a1:32:fa:41:ea:
05:22:d9:44:74:4e:d8:be:9a:a5:3b:04:bb:89:e8:
54:85:6f:39:53:11:a1:67:67:db:79:fc:73:02:d4:
e6:cf:c6:e4:b4:ce:73:85:ca:d0:ec:43:56:b5:03:
9a:11:e9:54:ff:58:89:d5:06:d9:86:a0:e7:54:c0:
c7:07:f7:48:bf:82:03:94:5f:1b:18:2a:22:95:84:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:1A:4D:50:4F:B9:C1:D5:46:60:62:CE:72:6C:28:DE:70:03:D3
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:7f:66:ea:f7:18:f8:3d:bf:e6:3f:dc:19:1f:be:99:7a:
69:15:c6:5f:90:09:74:a1:ef:f8:2b:8c:ff:a2:ff:b0:70:56:
05:53:34:6a:9e:a9:ed:d1:b0:c8:5b:b6:7c:4c:2c:6b:a4:02:
0a:16:b2:91:f5:a3:bc:0b:e2:8c:08:72:26:d1:78:00:71:67:
30:72:ed:3f:37:7d:a7:32:ef:26:33:dd:5b:d3:f8:e2:a9:cb:
f4:67:1e:13:6e:a6:df:ea:02:35:29:40:72:0c:c2:37:cf:39:
76:68:d7:a4:3c:34:74:06:a8:d2:24:14:6d:14:eb:cc:0d:9a:
56:48:57:55:7e:cb:b7:f6:8b:fa:fc:fc:b0:2b:1e:47:e8:36:
b9:9f:35:42:dd:2c:b4:87:3b:b4:d4:19:c2:32:56:bf:a6:8e:
16:62:f8:00:59:ca:6f:91:c3:82:2d:73:24:c5:29:26:6b:70:
51:5d:05:2a:2d:ef:25:9a:9d:39:70:41:cf:9c:00:05:3d:8b:
7a:95:a8:80:e5:ca:85:16:5a:77:aa:db:97:50:72:ac:d2:7e:
ee:18:ae:e0:ad:a0:2b:95:0b:76:04:05:03:b7:73:12:7f:5f:
53:c9:ab:47:a4:e2:86:a5:3a:6c:0d:02:30:f4:98:f6:60:7d:
fd:09:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:55 2025 by rpki-client