Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: N3cLVwf3q/BuDSvk+QogveHXhbKj382ywJosMnLliFM=
Subject key identifier: 6E:72:F1:97:9A:21:EA:EA:69:65:C6:0E:77:68:9C:73:85:8E:39:99
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 01984A0A6EA7970E3B18907F01589E3EE7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:54 +0000
Manifest this update: Sun 27 Jul 2025 04:00:54 +0000
Manifest next update: Mon 28 Jul 2025 04:00:54 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: JhEwoh82Q1j3Y5I1Bx3up0Z0x2+mRfcvTQ3hVSnwdiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6e:a7:97:0e:3b:18:90:7f:01:58:9e:3e:e7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Jul 27 04:00:54 2025 GMT
Not After : Jul 28 04:00:54 2025 GMT
Subject: CN=6e72f1979a21eaea6965c60e77689c73858e3999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:12:a9:77:1b:8e:70:28:ef:4d:7d:30:3c:
13:1f:b7:f8:7f:ef:ce:ba:46:86:3a:3a:b8:ff:cc:
c5:41:3f:fe:57:1d:1f:65:15:00:13:a7:44:e6:49:
46:06:fd:da:44:a2:af:24:d7:22:75:d2:a8:dc:21:
a0:b0:57:f7:35:ec:29:22:f3:3c:b7:7a:20:06:3e:
63:85:0d:9d:ef:82:42:5a:20:d2:94:86:a1:1d:c3:
fe:ab:9e:4a:f0:33:78:43:05:0e:4a:7c:7b:a9:51:
19:17:67:16:97:07:e7:84:5f:04:90:a9:4d:e4:45:
ae:3a:22:66:25:60:90:5b:41:0b:d3:af:11:54:c3:
ab:9c:0e:34:3d:44:62:02:3a:58:2b:e6:94:e0:5f:
42:d4:2e:91:25:a0:5d:72:f4:9d:8c:af:67:08:4f:
95:90:a8:34:54:ab:cc:86:0c:32:53:2c:c3:25:9b:
6c:57:d9:8b:11:97:a4:14:e7:89:f6:78:9f:ac:c0:
51:ed:3e:27:b8:5a:a3:aa:bc:d8:5d:55:7d:d3:0c:
41:e5:6f:16:9f:6e:18:3a:ba:15:7e:4c:d8:bf:50:
c0:d8:07:a6:43:38:eb:6a:4c:99:13:88:b2:2c:2c:
1b:1f:2c:c0:95:c3:80:a4:6a:f6:30:83:3c:96:db:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:F1:97:9A:21:EA:EA:69:65:C6:0E:77:68:9C:73:85:8E:39:99
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:14:40:aa:42:b3:80:ca:f0:96:b9:4e:fc:36:aa:a4:33:
18:a5:4e:6e:16:7b:af:de:ff:a0:c9:0d:50:b0:2d:d7:6e:25:
55:a8:17:07:38:ed:4b:b0:1f:db:d0:0c:60:a6:44:a7:5e:ce:
a9:4b:76:4e:47:c6:0a:71:ad:f6:24:15:02:78:14:6a:7d:2f:
36:65:ed:35:2d:11:73:82:71:53:8b:1d:c4:55:54:63:73:7e:
c4:88:c4:d7:15:62:39:b4:58:e4:e0:54:76:68:bf:7b:7d:67:
b0:11:ae:5c:e0:51:b2:41:fd:7e:37:7d:5c:a4:b1:48:68:bf:
d6:70:88:18:40:8f:87:66:b2:d1:e9:84:f9:da:60:d9:6e:ae:
c2:55:c8:57:d8:4a:a0:2b:7e:7c:24:67:c9:11:2b:f8:a6:50:
b3:3c:2d:65:46:33:fb:0d:a1:7b:42:b4:57:5c:5f:a6:6f:68:
20:28:27:48:bc:93:c3:06:2f:7d:dc:2f:da:cf:13:94:f7:54:
4c:e4:70:d7:3d:76:d7:b5:f9:77:87:fe:e7:b9:b6:c5:75:cb:
43:69:eb:ae:dc:ba:08:f3:49:09:a6:b6:f3:7c:04:e7:06:89:
3e:42:90:53:31:3c:68:1e:f7:f4:30:4a:e7:b7:42:69:01:d5:
be:c4:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:19 2025 by rpki-client