Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: 0A/5pyHAEHljhB/RO2t3pF4lvbAlOywjmdh30CHgOmo=
Subject key identifier: F7:2F:B8:B6:67:BB:00:65:BF:68:1A:93:42:4A:54:A3:75:AA:2D:8D
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 0197549095EAF411862F3FB53EF215C0B1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 12:00:51 +0000
Manifest this update: Mon 09 Jun 2025 12:00:51 +0000
Manifest next update: Tue 10 Jun 2025 12:00:51 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: OY2z0NgaazzKBXLp1ArQ86Ye01asJz/SUaBWXVN/g24=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:95:ea:f4:11:86:2f:3f:b5:3e:f2:15:c0:b1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jun 9 12:00:51 2025 GMT
Not After : Jun 10 12:00:51 2025 GMT
Subject: CN=f72fb8b667bb0065bf681a93424a54a375aa2d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:31:36:e1:9f:a7:21:34:c6:37:7f:e8:3e:
2c:3c:90:aa:09:36:9b:bd:31:af:1e:8b:4c:8b:45:
82:39:14:2b:dd:09:da:87:de:88:33:e1:05:ea:ba:
7c:cb:7b:23:34:75:6a:54:0c:b5:b5:b5:0b:45:44:
27:15:c0:b4:85:f5:f0:38:4e:93:8c:83:1f:4b:dd:
4c:f0:fd:01:2c:05:fe:01:a4:59:1b:3a:51:e2:26:
50:44:2e:bc:ba:4a:3f:0e:64:a7:37:7c:41:61:2e:
29:b1:fb:d2:87:ba:61:68:1b:49:3a:f6:19:50:e6:
3a:b9:8a:48:4b:f4:7c:b6:56:7f:32:a5:48:69:da:
2d:16:ff:c0:e7:3d:16:88:c6:43:b5:e8:d1:2f:2b:
77:32:31:27:2b:b9:0a:c6:00:04:76:34:ab:ef:19:
c9:7f:d4:57:1f:2d:bc:de:0b:4b:b4:cc:bb:aa:6d:
86:03:87:95:29:0e:53:07:11:f1:fe:73:ca:e5:8a:
fa:15:92:c8:dd:43:03:56:a5:a8:cd:4f:d0:ab:3c:
3d:af:78:d2:d4:30:7f:d3:f0:40:cc:83:b8:7a:f7:
e3:1f:66:70:92:47:48:0f:1d:e5:3c:02:dd:76:c7:
bc:9a:ab:14:a6:c1:0f:50:1d:df:a9:66:f8:95:0c:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:B8:B6:67:BB:00:65:BF:68:1A:93:42:4A:54:A3:75:AA:2D:8D
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c8:92:c5:dc:68:4e:38:e7:8b:d1:69:e4:01:67:83:b1:7c:
84:12:65:92:0c:5e:7e:9a:76:ff:50:9f:89:3b:c7:16:41:54:
a4:ce:ba:60:dc:4c:89:59:26:75:bc:b5:90:5f:5c:4e:79:cd:
f3:86:aa:60:64:c0:69:2f:63:2a:4a:1c:66:60:81:3f:eb:33:
a4:70:d4:f6:8d:b9:9b:3d:22:b3:e0:4c:6d:e2:70:cf:db:12:
0e:ea:f3:3c:13:88:0a:81:c3:69:20:6b:6b:aa:93:73:79:69:
90:8c:d6:9a:b6:92:9c:7d:58:2a:fb:f1:be:1a:86:ec:f4:3d:
20:28:45:9a:d9:86:16:ab:38:d5:2f:5c:65:3a:d9:e8:91:5d:
f4:c4:be:fb:5e:92:07:02:4a:c7:db:7b:61:b3:83:96:d7:52:
dc:89:7f:b8:ff:58:ee:02:57:00:ce:83:20:63:f0:38:a4:32:
58:15:10:e8:df:39:6d:cc:61:02:34:25:31:38:34:f7:db:a9:
82:9c:4b:3a:35:f9:72:49:11:f9:aa:5f:7e:95:49:b1:0b:a1:
5a:a7:2d:10:f2:d8:e4:8c:d4:35:b5:98:7a:53:d3:43:5b:d0:
d7:92:7c:8d:44:aa:da:0b:32:d9:84:f3:22:52:b2:ad:39:43:
01:e7:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:29 2025 by rpki-client