Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: 2PH4Ro3ZuKL1al+JzWNUhgKYDwcHVGRXPhAaWXJ2KsU=
Subject key identifier: 81:24:54:92:47:A8:19:63:1A:C5:53:B4:DF:FD:FC:E8:4D:15:25:0A
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 0197488C9FCE90362969D536D495F0A7E3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0BA6
Signing time: Sat 07 Jun 2025 04:01:04 +0000
Manifest this update: Sat 07 Jun 2025 04:01:04 +0000
Manifest next update: Sun 08 Jun 2025 04:01:04 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: TOykke6YM7IMByBH0LHeee3pXKx0rvzNjEFXU8Wfbc8=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:9f:ce:90:36:29:69:d5:36:d4:95:f0:a7:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jun 7 04:01:04 2025 GMT
Not After : Jun 8 04:01:04 2025 GMT
Subject: CN=8124549247a819631ac553b4dffdfce84d15250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:b9:40:19:a0:56:62:8a:20:a1:3c:f8:fe:
ca:70:0f:ca:81:1f:6d:92:1e:13:84:b4:fa:0b:b8:
b3:a9:a4:c0:79:90:d2:94:a3:88:9c:2d:d2:c1:a6:
ee:ce:ef:50:03:be:bf:0b:3c:2b:7b:61:ca:cc:f7:
f6:ac:7e:19:38:e0:0c:ff:bd:66:57:42:e8:44:74:
8a:34:b6:db:ad:fb:ec:6a:c9:b4:43:af:ad:95:8e:
6f:90:a8:a8:32:6b:99:4f:f4:ee:2a:76:51:97:32:
6f:b2:b1:6e:df:9e:bb:c4:cb:13:2e:1f:41:40:64:
f3:83:bb:49:6a:fa:a6:d7:b7:34:73:bc:dc:1f:06:
6f:6b:d4:d6:c9:fa:fa:fc:e2:df:93:54:85:60:78:
f1:35:0e:ff:8f:46:10:a1:06:af:fc:a7:0f:7d:18:
39:b7:3b:60:52:51:73:02:2f:c2:a4:31:c1:46:e7:
5e:c2:22:7d:c1:09:7e:34:4c:de:2f:a0:8b:6d:e4:
c9:a9:90:a8:7f:ac:cd:b2:09:93:b9:bc:87:d7:58:
aa:a5:59:90:b7:15:84:07:fb:b0:15:f7:0f:86:b1:
e0:ba:24:b7:30:4a:0a:f4:96:b2:73:2f:cb:b5:4f:
16:11:23:3f:80:44:d6:e8:9d:61:82:ad:b2:d8:49:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:54:92:47:A8:19:63:1A:C5:53:B4:DF:FD:FC:E8:4D:15:25:0A
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b1:b3:87:12:1b:b8:5b:b6:a8:52:4e:98:b6:dd:ac:12:eb:
3e:8f:e5:12:90:c5:32:db:63:8a:4b:28:a6:6d:3c:d6:dd:4f:
6e:cd:04:f8:31:c0:b3:eb:27:97:85:e3:52:dd:99:f5:46:31:
e0:a8:60:12:57:3f:04:ec:2a:b5:a8:b0:b2:11:38:5d:06:c9:
6b:5c:63:e6:14:be:bf:cc:bc:03:07:fb:ed:b1:32:06:cf:e2:
2c:d5:62:50:9a:d0:d0:60:02:05:e5:de:89:f0:c7:fd:c6:ad:
16:99:29:3b:20:2b:18:ce:56:ab:e1:be:34:84:89:da:1c:be:
2d:7b:d3:99:3a:64:ea:6e:41:69:6b:f8:68:1a:29:c5:10:12:
84:a4:e2:67:7b:5f:d3:9f:95:ec:9f:4c:13:54:66:e1:09:c4:
dc:f3:00:cd:ff:77:89:70:0d:eb:43:bf:39:b9:06:d1:81:e3:
24:91:c6:34:e1:0c:3c:79:a3:b6:23:72:8c:c2:8d:f6:f6:6d:
82:7f:9a:d5:ea:e6:51:88:46:d8:30:68:1f:fd:1f:1e:7d:a7:
91:6a:f6:2f:86:51:5b:6e:ec:b8:ce:d3:44:b3:53:80:73:fe:
b4:78:d3:6b:bd:ff:cd:51:08:f0:84:ea:d8:a1:2f:ef:da:d5:
97:a3:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:13 2025 by rpki-client