Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: 2uB2xGE1iZAmCyK/Pa56CzwzOt92RnLidAyLClO5yJ8=
Subject key identifier: DE:CC:8D:B5:99:BB:18:4B:87:E6:E6:D3:94:98:D0:22:3A:75:BE:34
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019787D8DE91446BDE5E902770B038EE636C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 11:00:26 +0000
Manifest this update: Thu 19 Jun 2025 11:00:26 +0000
Manifest next update: Fri 20 Jun 2025 11:00:26 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: hlI4nxvAVxXy5LF1xFHg4PE28HlHMc0lvFMrfMpclnU=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:d8:de:91:44:6b:de:5e:90:27:70:b0:38:ee:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Jun 19 11:00:26 2025 GMT
Not After : Jun 20 11:00:26 2025 GMT
Subject: CN=decc8db599bb184b87e6e6d39498d0223a75be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:de:c3:7d:52:9c:65:fa:06:b1:17:bb:c1:
11:7f:e1:12:5a:0d:7e:86:ec:7e:9c:e5:22:06:f1:
17:a4:6c:c5:08:4c:da:77:1e:09:27:1f:df:0e:f9:
1e:29:0d:47:36:2e:ba:ea:b8:93:fd:26:55:2a:f5:
73:14:57:c8:30:18:f2:ef:f3:04:46:71:ca:aa:a6:
73:a5:99:25:cc:e6:d3:d0:39:ea:21:a5:c5:23:86:
74:4e:5b:c6:dd:1a:86:3f:38:3a:e9:7a:00:57:a7:
a1:1c:68:77:80:d7:a2:0e:5c:dc:6d:ce:eb:a4:e7:
ce:25:af:37:29:68:9d:aa:01:aa:46:e7:fd:36:7a:
f1:94:c2:5d:78:42:a8:c2:91:e2:75:24:ab:1f:44:
ba:a2:13:2c:b6:49:8c:f9:15:5d:c3:f0:de:03:f2:
d0:96:35:6e:f4:98:34:c8:a1:5c:a1:7a:4f:63:80:
95:71:2c:67:b1:d0:b8:f6:48:db:76:be:56:42:df:
8a:aa:30:42:5e:de:8e:dd:03:f4:18:4a:a1:0d:62:
4f:32:a8:de:a2:de:5b:51:b9:a5:4a:0e:2a:9b:c4:
6c:7e:5f:15:c7:7a:cc:0b:cd:55:e8:ef:46:3e:b2:
76:22:8b:b1:46:6a:41:ac:f0:6a:88:8e:45:e2:fe:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:8D:B5:99:BB:18:4B:87:E6:E6:D3:94:98:D0:22:3A:75:BE:34
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4d:15:e1:6d:b4:6d:a2:9c:b2:c2:ca:15:f9:9e:fa:c5:1d:
94:5d:d8:90:23:8b:63:e5:0d:18:3d:07:78:b4:c2:3e:e6:50:
fc:36:e4:0a:96:cb:79:34:e1:34:0a:34:50:fb:18:57:de:f1:
c6:26:b0:8b:56:58:75:57:d2:e1:34:8c:8a:97:5f:45:36:50:
a3:93:d2:cd:ab:c9:e4:c0:6a:bc:97:0d:2c:1d:bc:38:41:b5:
24:32:b4:90:4d:43:dd:76:34:a0:fa:11:73:04:3d:ee:16:2f:
59:fd:d1:c1:a4:0d:e8:57:47:2c:fc:8b:30:7b:84:f5:59:2e:
6f:db:ab:77:e2:e5:72:f5:80:4e:f0:d3:2d:ff:45:18:31:36:
bd:c3:96:e0:5d:ff:87:05:56:0c:68:25:e3:9f:df:dc:83:45:
4a:24:21:7d:55:b0:cb:7e:54:62:b5:65:47:a7:6e:25:46:d3:
f0:85:c2:a3:f7:60:58:7f:24:31:c0:2a:36:b6:86:1c:60:61:
f9:2f:69:a7:f8:18:a4:00:f1:2b:b6:84:10:0f:53:95:5c:43:
a1:b2:dc:e3:c0:a1:f5:ef:35:ee:49:5b:6d:87:81:8b:71:d7:
cb:66:ca:38:57:5b:83:dd:0f:27:47:53:6f:34:f0:88:13:ed:
5c:53:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:07:16 2025 by rpki-client