Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier: /SLs7Xo5VEhCe0prvGaKSQGPobmB7BoLa5sdnAyD2yA=
Subject key identifier: 22:4C:BF:D9:8F:52:E1:EF:44:4C:A4:14:25:29:F9:85:A8:A4:1A:D7
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 019775D2F13570727319659A341156170277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number: 0DA4
Signing time: Sun 15 Jun 2025 23:00:47 +0000
Manifest this update: Sun 15 Jun 2025 23:00:47 +0000
Manifest next update: Mon 16 Jun 2025 23:00:47 +0000
Files and hashes: 1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: ajnAhC+xkH9FMD6WxRb12CWBO1qdId4q30GSukaxRE4=)
3: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:f1:35:70:72:73:19:65:9a:34:11:56:17:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jun 15 23:00:47 2025 GMT
Not After : Jun 16 23:00:47 2025 GMT
Subject: CN=224cbfd98f52e1ef444ca4142529f985a8a41ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:41:7a:6f:9c:88:33:99:01:49:98:e5:09:
6e:eb:dd:c7:47:5e:04:19:61:5d:c5:f4:ac:de:f2:
a0:74:a0:ce:42:42:ad:ce:1b:b1:01:66:1a:ec:2f:
9d:2b:4a:69:e1:6a:f1:3f:74:1b:fa:13:c3:d7:63:
19:84:f5:b4:d0:c9:ce:84:bf:8e:89:90:3e:0e:88:
b3:06:b6:e7:38:12:99:f4:97:89:b3:f3:99:86:69:
e8:d5:ee:10:1e:40:a0:1d:ff:a1:3b:1f:24:43:af:
e9:7d:95:00:90:73:ae:4e:00:7c:e2:f4:74:25:5f:
50:7c:a0:1b:e7:5a:2c:47:ff:c4:70:dd:dc:bc:5b:
d5:d7:6f:ba:42:fc:07:59:75:10:29:51:eb:75:45:
8b:83:a5:f2:7b:33:a2:65:76:3e:52:1d:4b:9a:90:
31:f1:81:b8:74:41:10:5a:42:c0:3d:c3:04:bf:3b:
d0:75:24:45:fc:f6:e6:ca:0d:9b:b0:a1:f1:c7:cd:
d4:c8:50:ab:5b:10:44:dd:eb:18:b2:54:76:b1:79:
b4:d4:36:1a:4b:2a:08:b8:a0:52:d6:58:92:f8:18:
33:43:53:27:f0:85:df:a3:e7:b7:d2:4d:bf:27:ef:
9b:e4:d1:06:98:08:58:5b:83:ed:e8:41:6c:fd:ec:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:BF:D9:8F:52:E1:EF:44:4C:A4:14:25:29:F9:85:A8:A4:1A:D7
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:47:be:36:55:65:13:f7:b0:1b:78:e4:d0:09:db:57:87:4f:
31:5b:38:5e:f6:40:8d:9e:35:44:34:61:59:ca:55:2a:f7:cc:
12:fe:74:a1:28:07:a8:23:2f:a4:07:df:25:40:fb:81:99:bb:
b0:8e:c8:e0:7e:a2:00:94:b5:5b:5c:64:9f:2b:9b:85:eb:83:
81:27:de:99:31:31:1e:d0:46:86:d2:77:9e:69:83:98:7b:be:
44:8a:44:77:bb:7a:8f:1e:91:38:cd:cc:bd:94:18:d0:f3:72:
58:8a:91:cd:93:0e:87:55:63:c7:d2:d0:74:af:64:6d:23:11:
6e:13:cf:8f:a6:09:9f:5b:54:c4:cc:56:da:45:c8:56:b8:5e:
d3:d2:1d:2d:1b:34:02:d2:36:b7:d9:d7:d5:25:6f:ae:dc:e4:
dd:90:c6:f2:8d:60:ac:3b:26:94:a5:f3:63:eb:93:98:1a:a2:
f4:14:78:54:44:54:8c:71:41:ff:4c:71:d2:67:c6:b0:40:e5:
bd:c2:57:4e:5b:34:a3:05:da:76:fc:7e:4e:7b:8f:fb:94:b1:
69:13:81:d4:45:16:ab:86:9b:23:b9:69:4f:85:e2:98:fc:5b:
a3:53:a8:ba:30:48:b1:bd:c6:a4:17:2b:3c:b7:ba:8a:30:47:
20:47:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:14:37 2025 by rpki-client