Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: 8mAzZ3+XogDPgwdgsIoX1Pwsqm4xj7ZtPJxg5KveJco=
Subject key identifier: F4:58:E2:38:25:85:F7:A0:F5:27:AA:7F:DF:1C:A1:CA:F0:3A:A0:55
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 01974E57134DF01764ECF793CC1538E06FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 07:00:18 +0000
Manifest this update: Sun 08 Jun 2025 07:00:18 +0000
Manifest next update: Mon 09 Jun 2025 07:00:18 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: EP7MMKMnOZvLxe1HGzcM3Ne7fkjtgBiUbwfVcsJu5g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:13:4d:f0:17:64:ec:f7:93:cc:15:38:e0:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Jun 8 07:00:18 2025 GMT
Not After : Jun 9 07:00:18 2025 GMT
Subject: CN=f458e2382585f7a0f527aa7fdf1ca1caf03aa055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:73:78:ee:c8:43:ba:ae:ef:5b:24:1e:81:
a8:25:ef:69:e8:d9:f3:0f:b7:d8:46:a1:02:b8:23:
54:b7:2b:58:c2:1d:59:08:c6:78:0e:e6:1e:0c:d5:
2d:61:0e:b1:83:83:14:b7:0a:14:b3:ec:ff:4c:1a:
d4:48:c9:e8:55:25:34:80:92:d6:cf:84:e3:86:b8:
58:f8:c6:1a:a0:f6:90:66:b2:24:7e:fd:ec:3a:f0:
38:4e:3d:05:8c:a4:4f:a4:d7:40:5f:21:e5:23:aa:
2c:f3:4c:94:24:bc:49:c8:69:ec:15:ef:51:c9:df:
ba:4c:69:b6:f9:c5:45:9b:47:1b:ce:46:85:aa:56:
3c:2f:43:2a:5a:3a:3e:b5:12:17:a1:88:6c:f2:81:
ff:f5:a2:d8:6b:4e:3f:4a:ad:0a:77:ab:3c:0f:a5:
6a:ff:ca:38:c6:36:d3:04:76:6b:60:35:b1:07:d6:
d5:e0:c5:36:ff:0e:5a:19:90:86:b6:9c:74:c2:d1:
9a:37:01:44:41:43:23:2d:42:0d:38:38:55:11:cf:
f3:5b:88:53:98:48:8b:1b:b2:5d:18:2c:e2:1d:bb:
fc:4b:54:5e:00:97:eb:99:42:70:92:8c:21:9c:0b:
23:3b:5c:b2:d2:1e:6a:a7:99:8b:0d:d2:c6:8f:7a:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:E2:38:25:85:F7:A0:F5:27:AA:7F:DF:1C:A1:CA:F0:3A:A0:55
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:9b:84:0f:52:1e:5d:68:9f:d7:99:87:c9:8a:9c:cd:75:86:
17:d2:81:84:6e:38:0f:ba:d3:0c:8a:83:25:65:1f:e7:2c:b4:
08:7a:b7:76:fd:93:6c:3d:91:61:66:ea:b2:dd:6c:37:9e:76:
99:d5:82:0a:18:8f:d7:10:e0:66:52:d2:61:a2:fd:db:81:50:
e9:be:c2:ec:f5:29:c4:8e:75:3f:0a:72:31:d5:87:2d:ea:83:
b4:bd:22:5a:f6:c7:c7:a5:1b:42:a7:77:41:01:52:38:0d:91:
80:87:b1:08:5f:3e:60:60:97:da:99:0f:47:4a:6c:92:04:aa:
85:2b:db:ea:8d:b3:d6:5c:fd:23:17:3e:03:6e:ea:24:56:f1:
60:04:9f:cf:e3:63:6d:40:ac:d4:d3:6f:41:74:49:2d:f6:c4:
88:a4:1a:7c:69:3c:3a:7e:62:d0:79:49:00:2e:e8:9d:2c:37:
6c:ca:b5:4f:16:c1:a6:00:1e:1b:7e:ba:c4:7c:d0:a8:47:d7:
fc:60:68:c0:86:0f:51:b0:0d:5e:fe:90:99:15:1e:41:89:c5:
f3:22:f6:24:92:69:87:3f:fd:df:99:46:37:60:c4:c2:2e:45:
ba:be:c1:ac:9f:6e:24:79:37:7c:a9:41:56:5b:70:a3:2b:46:
b2:56:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:09 2025 by rpki-client