Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: uiy7ug+q1paC2XOyMRBlHU1QLpII7zMWB1meS+Cb8WA=
Subject key identifier: 54:1B:F0:9F:01:FD:B9:8E:74:2D:07:11:A2:E2:55:48:30:7D:99:94
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 01977007920B7DADA2EF12692B5E79729E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 01DC
Signing time: Sat 14 Jun 2025 20:00:33 +0000
Manifest this update: Sat 14 Jun 2025 20:00:33 +0000
Manifest next update: Sun 15 Jun 2025 20:00:33 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: ajHfXrhrzqXUb/uLCo6TzHnWyk/VmjdM7VBuVQl19Jc=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:92:0b:7d:ad:a2:ef:12:69:2b:5e:79:72:9e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Jun 14 20:00:33 2025 GMT
Not After : Jun 15 20:00:33 2025 GMT
Subject: CN=541bf09f01fdb98e742d0711a2e25548307d9994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:cf:b0:0e:4d:24:75:de:1e:fe:7a:ff:13:
21:99:98:15:94:25:59:dc:1a:b0:3c:39:72:5c:38:
e3:95:55:e4:8a:ea:25:34:1b:86:30:56:32:7b:04:
58:d0:b0:a0:56:d3:3c:50:1f:b6:fe:e3:9f:db:88:
4b:72:97:b1:16:d3:81:b2:24:ff:96:22:38:f6:6e:
b2:3e:91:b3:84:0e:dd:24:c1:b3:5a:38:e7:03:3f:
0a:80:28:00:ef:5f:1a:72:77:bc:d7:ef:cc:f6:aa:
52:b3:aa:bf:e4:68:85:cf:1f:61:1a:dc:7a:5f:6a:
91:ba:b0:97:be:f8:f4:61:b7:d2:13:85:0c:6f:7f:
9a:a2:9c:38:95:cc:9b:0f:d5:af:2d:0d:dd:b9:19:
f7:28:6e:40:9e:61:47:dc:55:f7:0a:0f:ca:64:48:
46:2a:fe:4c:c4:ab:84:e5:7f:6b:33:7b:c8:98:f7:
78:eb:ab:dd:c9:49:a6:64:be:95:11:27:44:58:69:
cc:ae:79:41:5d:41:a0:c8:72:6f:d4:a6:8d:2a:60:
1b:a2:06:21:dd:70:91:b6:b2:18:86:ae:3f:db:e4:
f0:c7:85:a4:89:91:34:38:ca:1e:00:53:e4:e0:8b:
6b:2a:23:03:43:26:d4:ec:35:e3:4f:30:02:db:06:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:F0:9F:01:FD:B9:8E:74:2D:07:11:A2:E2:55:48:30:7D:99:94
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c0:8f:4c:2d:cc:65:48:a5:6d:dc:18:51:fe:0f:dd:3d:2c:
e2:10:44:15:c9:8a:6e:56:c2:9b:27:1b:73:b3:04:9d:a7:e7:
9b:7f:a2:e5:2b:7d:a4:f9:bf:f8:ab:9e:95:41:27:4b:c9:3a:
54:e1:74:ae:79:af:ae:a4:f7:2d:36:15:9d:22:93:8d:94:6a:
48:28:ef:15:ed:aa:61:13:7c:ad:93:4a:1a:62:e0:26:4c:71:
1e:71:6e:7c:f0:92:29:ce:a0:81:7e:30:e9:fb:45:c6:c1:22:
eb:38:c0:a9:0c:bf:08:fc:89:b2:2f:ba:dc:b3:06:f4:2d:72:
d8:22:88:e6:28:93:d1:43:32:6e:0c:e6:4c:62:d8:98:a8:d8:
38:d7:09:34:ec:78:ab:18:81:01:07:72:6d:71:59:07:a5:b4:
5f:68:61:d3:3d:06:0f:a1:83:7f:d2:e6:ed:63:30:ed:2f:e1:
46:2f:46:a2:42:b4:ee:46:c7:dd:72:ce:ef:b6:f3:11:f2:c9:
3d:4c:65:74:b7:65:db:d1:a0:1b:55:d5:dc:da:c9:86:39:40:
57:26:fb:1d:bd:69:41:3e:99:b2:fe:bf:9e:48:05:d0:df:a8:
12:1d:5e:31:56:3f:2e:28:67:74:6e:9e:86:ad:15:d0:14:7f:
19:bc:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:06 2025 by rpki-client