Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: rSokYNv8B+pkvxcU3YRhLkzsYsU48C2kCsRyOh1uVrE=
Subject key identifier: 9B:0C:5D:02:3C:72:C1:F2:99:DD:8B:73:B5:21:EC:DF:C0:C8:C8:BB
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 01976F62CF82E8BC13758D5F75C2CDA67A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 143E
Signing time: Sat 14 Jun 2025 17:00:35 +0000
Manifest this update: Sat 14 Jun 2025 17:00:35 +0000
Manifest next update: Sun 15 Jun 2025 17:00:35 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: e9Ldp75EPQcqLCyjHy+NhJ0jTg5Pb3qhFquHgsIOz48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:cf:82:e8:bc:13:75:8d:5f:75:c2:cd:a6:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jun 14 17:00:35 2025 GMT
Not After : Jun 15 17:00:35 2025 GMT
Subject: CN=9b0c5d023c72c1f299dd8b73b521ecdfc0c8c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:0e:84:91:d4:ef:86:83:bb:6b:cd:12:34:
97:1b:2d:8b:7a:cc:0f:35:9a:06:3f:ee:3a:27:61:
f9:e6:92:cc:5f:ab:96:bb:76:ca:ab:be:0b:57:91:
78:73:85:9b:c2:88:87:f2:0a:3c:9e:3d:fa:64:e6:
c4:aa:b4:b4:69:db:a4:c1:ad:c0:54:1a:86:87:43:
55:e2:cb:ab:8b:a9:db:b3:7c:e3:4f:ce:6f:63:9c:
6f:ae:d2:eb:61:31:a8:01:1e:1a:a3:7d:48:91:0a:
30:38:c4:2c:bd:04:7b:ec:a9:d3:bb:01:a3:a8:58:
df:c8:66:3f:53:ae:fa:47:16:6e:89:aa:fe:6c:f3:
a7:34:f1:a8:cb:f2:20:66:c9:0f:9e:d8:a3:01:d5:
a3:91:d4:a5:8f:8f:34:f8:a3:79:3f:4e:85:62:14:
21:ce:ff:18:e9:73:52:57:e3:57:ae:9a:f0:6c:fa:
81:64:bc:80:ce:7f:f3:69:9c:5d:7b:7e:e0:e3:64:
a0:2d:13:84:58:37:1f:21:51:11:79:99:eb:48:9b:
f0:ca:c5:35:3e:54:46:b8:76:d9:d4:57:5a:f0:22:
17:a7:2e:c9:68:4e:85:dc:37:c8:7e:e9:d4:73:cf:
ea:2c:45:78:ec:52:fb:1f:86:57:21:19:00:2c:25:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:5D:02:3C:72:C1:F2:99:DD:8B:73:B5:21:EC:DF:C0:C8:C8:BB
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:ed:d2:a1:bc:92:d8:d2:ca:f1:d1:8f:03:04:1e:7e:f8:
6b:9b:9d:b6:79:7a:b5:88:a5:2b:87:f9:42:38:30:d6:ee:cb:
52:b2:50:87:87:fe:7b:f1:0d:fb:65:f2:b4:ff:b1:0c:d5:be:
77:6e:63:d4:63:2f:08:50:b6:dd:02:8e:82:9c:1a:84:f0:80:
bb:2c:7f:5f:8b:76:93:00:f6:3b:f2:a6:a9:61:35:26:91:21:
58:25:86:44:7f:5b:e8:57:ce:89:dd:28:9a:97:46:53:07:05:
42:4d:33:c0:d9:d5:44:84:21:93:92:06:fd:22:15:b1:e9:4e:
5f:22:dc:57:54:88:09:81:6b:7c:a7:58:0c:7d:67:9c:2c:2d:
ad:42:50:22:c9:06:f1:07:5a:91:12:ca:41:a5:3b:b0:2e:ed:
5b:d6:cc:0e:04:cc:98:a0:1a:9d:a9:bc:4d:9a:19:80:00:fc:
99:1e:58:fc:4c:24:22:c1:04:9c:c2:6b:6b:79:ab:4d:18:02:
0a:e4:3a:68:d8:47:c6:e8:25:5c:88:81:42:cf:56:f8:c7:f2:
e2:98:4b:49:b1:ae:5a:8c:f4:f5:77:2c:43:3c:02:c8:90:79:
15:5e:e9:dc:77:9e:01:92:86:4c:63:0c:55:62:b9:2d:6b:a3:
01:2b:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:27 2025 by rpki-client