Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: dDp8UxEZkvLTgt00YQ2TZ2jHXaFYKcycDcamhm/xY2k=
Subject key identifier: CA:87:37:2B:D4:67:29:81:54:64:72:7C:A5:78:FD:E9:0A:CD:9D:6D
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 01975948A3EA26560B52C337EB7C367F3EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 15A1
Signing time: Tue 10 Jun 2025 10:00:22 +0000
Manifest this update: Tue 10 Jun 2025 10:00:22 +0000
Manifest next update: Wed 11 Jun 2025 10:00:22 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: y/NDndzSPC6PCkGlXJ7l8aSFtDiqb9XcOSbjtdLAEw0=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:a3:ea:26:56:0b:52:c3:37:eb:7c:36:7f:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jun 10 10:00:22 2025 GMT
Not After : Jun 11 10:00:22 2025 GMT
Subject: CN=ca87372bd46729815464727ca578fde90acd9d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:83:11:1c:79:30:8f:da:9c:5d:b9:81:29:
e2:51:36:64:18:b6:94:4c:f1:d4:ba:9a:ad:1a:58:
97:65:48:57:61:19:2a:b9:5c:81:e8:e5:43:26:23:
62:47:92:ce:26:ea:57:e8:c6:73:23:6a:cf:35:28:
76:87:10:bb:5c:ef:2c:20:5a:59:f4:db:ad:56:cc:
a9:9f:ea:1f:12:8c:4d:da:47:3e:d7:ce:86:e2:0b:
5b:55:87:65:0e:0f:6d:d9:72:24:f8:15:b8:6b:ff:
2c:29:b0:85:89:e6:ed:17:41:4a:33:cc:a7:a9:70:
be:29:32:df:31:9e:98:e6:cd:f0:1b:25:1f:c3:66:
4a:a5:d1:11:c4:9a:98:81:c6:8b:2d:60:8a:c2:4f:
8c:50:a1:af:c3:9b:cd:6e:64:f8:f2:de:85:59:16:
2f:c7:86:b0:61:b1:b5:e8:a1:90:a5:51:d5:a1:50:
ed:99:41:7f:b1:d2:8d:d3:b9:74:a8:6e:4a:cb:5f:
78:fc:ed:de:f7:2c:10:87:ea:94:f1:e1:cb:7d:e3:
69:16:69:d6:1f:c7:16:12:26:43:08:b3:04:47:1a:
6f:9e:96:28:1c:de:ae:f2:9b:67:ef:13:d6:c1:fc:
17:07:00:41:03:f5:2f:ce:b7:73:4d:c4:28:b6:2d:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:37:2B:D4:67:29:81:54:64:72:7C:A5:78:FD:E9:0A:CD:9D:6D
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e1:ab:9b:48:a2:5b:e2:b9:fa:d6:a0:f8:6b:36:29:4a:c8:
a1:91:85:d0:38:e0:39:cf:d9:f7:3a:31:1d:71:bb:7f:f4:62:
b6:9b:1b:ab:cd:36:6a:18:c7:de:36:c1:2d:6e:f4:55:6d:8c:
17:d3:42:f5:af:09:0d:5e:dd:77:9a:04:2a:ac:fb:23:d5:ae:
ac:af:6a:d0:09:75:fb:01:ed:3c:e2:f6:e1:8c:42:f6:1e:be:
20:ac:40:f4:a3:7a:d0:d3:3b:80:22:40:37:29:23:c2:65:7d:
5c:f6:de:97:fb:68:67:95:2b:6c:e6:5e:8c:a5:42:eb:3d:c0:
77:e4:36:9b:93:74:c2:29:f4:4b:a4:80:94:3c:78:82:27:24:
47:3f:02:52:c8:71:ed:ac:d5:a3:0e:81:b2:27:15:28:7c:3d:
96:f0:72:0a:14:a0:ca:ee:0e:bc:b7:a1:56:d0:3b:23:60:ca:
db:b8:b0:3a:5c:29:97:b8:1b:6a:c5:f3:af:3a:3a:6c:e7:1f:
95:c7:de:be:64:77:38:bb:b5:c0:15:49:f3:e2:44:16:50:80:
29:6a:34:44:d7:17:7c:e3:66:1b:97:04:32:fb:5d:53:b8:7c:
7b:bc:57:e8:c2:ed:87:8c:50:92:ee:0c:73:17:c8:1a:17:e5:
48:0c:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:24:45 2025 by rpki-client