Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier: edc+TpKz+bs9pk3OgKqxmmcBVoP22ah5Ig/pHGT3RKc=
Subject key identifier: D1:1D:F3:4B:87:3C:C3:4D:AA:D4:19:80:02:AB:13:24:E4:EF:95:71
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial: 0197741B3F57DDE155DE8DD43FA7475DB36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number: 0151
Signing time: Sun 15 Jun 2025 15:00:32 +0000
Manifest this update: Sun 15 Jun 2025 15:00:32 +0000
Manifest next update: Mon 16 Jun 2025 15:00:32 +0000
Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: G/gsfv4lQAS2KxtZ7uELGaTsxQa9QMnCR+JB6TR9x7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:3f:57:dd:e1:55:de:8d:d4:3f:a7:47:5d:b3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Validity
Not Before: Jun 15 15:00:32 2025 GMT
Not After : Jun 16 15:00:32 2025 GMT
Subject: CN=d11df34b873cc34daad4198002ab1324e4ef9571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:1d:4e:4b:fb:eb:41:09:30:17:38:4c:bf:
a5:ba:41:76:c1:45:a3:98:87:20:c7:79:95:3e:20:
1a:7a:51:43:ca:bf:ae:b9:32:34:2d:bf:ef:32:a1:
c3:af:e5:b6:03:35:be:94:2e:ed:b6:ca:8c:69:95:
9a:c4:e1:10:ae:34:fe:82:55:d9:c9:13:0d:12:8c:
d3:39:a7:d0:c2:70:ae:7d:25:2c:44:48:cd:ae:ed:
e7:fa:f3:b3:ed:e9:5d:e9:a6:9c:2d:2c:84:f3:05:
67:b7:e9:8a:ce:84:27:af:52:e3:55:eb:ee:86:38:
c1:b8:a8:32:85:6f:1a:ca:45:13:d0:de:fb:cf:ab:
5f:10:c4:61:66:62:68:70:ca:39:94:bb:8b:59:f2:
83:5e:34:74:62:1d:f3:c0:3c:17:be:9d:34:43:38:
ee:0c:b1:02:6e:69:56:91:89:f6:09:db:0b:44:9c:
88:57:d6:06:57:6d:79:4a:68:ca:a6:57:be:f0:fb:
53:5a:61:c3:9c:ea:bd:9c:85:0d:63:1f:a9:95:e6:
bf:93:c2:73:32:0e:88:96:ab:e8:61:ea:a8:3b:8a:
2e:3b:42:9e:42:68:8a:7d:41:fd:08:5c:cb:bd:df:
45:e0:9b:fc:4c:e4:44:84:e0:57:30:05:20:7f:74:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:F3:4B:87:3C:C3:4D:AA:D4:19:80:02:AB:13:24:E4:EF:95:71
X509v3 Authority Key Identifier:
keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:e9:9f:7b:c0:b9:08:27:fb:46:c6:b4:c2:2f:bb:ac:5a:
86:81:f4:02:d9:f7:3d:a8:f4:fa:92:02:9d:42:a2:d6:68:90:
55:ed:55:bd:dc:9b:9b:77:2b:f5:85:eb:f9:9a:2e:19:38:e5:
90:b8:29:14:81:8a:0c:47:69:79:da:74:db:41:76:f8:8a:d0:
4b:0d:9f:f1:2d:ac:07:88:23:d3:ef:92:d5:81:f2:57:43:57:
49:98:9f:bd:a8:bf:f3:4d:b7:48:3f:00:f8:62:48:1c:1f:18:
0b:d4:c7:c1:12:cb:d2:72:75:36:44:58:69:be:b3:4b:28:10:
23:cc:14:09:03:b5:8a:c9:c7:bb:d7:78:9b:96:5f:07:42:ab:
39:bc:14:fc:cc:9c:ae:c1:f7:2e:32:08:56:66:f5:41:76:fa:
4d:6b:a4:4c:5f:72:c3:68:7b:68:4d:39:4b:e9:26:a2:d0:99:
58:c1:cd:30:63:96:ae:de:42:af:90:34:31:10:18:61:f3:c2:
81:f6:0b:6f:7a:b0:9b:da:d9:e4:03:38:ca:c7:77:16:fe:e0:
81:ea:8a:48:bf:1c:a4:14:f0:90:ee:12:c5:40:38:51:76:69:
2f:3b:88:19:fd:b7:7b:ef:c8:ab:56:89:9d:0d:2d:d5:d9:39:
58:ad:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:12 2025 by rpki-client