Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: 95yrH63qiEP8z1Bv/0EJ2EpkfnyTqgCrCHKKxhj1ZSk=
Subject key identifier: 56:9B:FE:3A:E2:1F:6F:AB:87:41:5F:C9:03:15:E7:D0:04:84:C2:FF
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 01974967F57369BA35A2271DAE0E16D29B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 0655
Signing time: Sat 07 Jun 2025 08:00:39 +0000
Manifest this update: Sat 07 Jun 2025 08:00:39 +0000
Manifest next update: Sun 08 Jun 2025 08:00:39 +0000
Files and hashes: 1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: wNYOYBffytY714blDwr97WEsBni4HDvfLKacb/GPRq8=)
2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=)
3: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (hash: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f5:73:69:ba:35:a2:27:1d:ae:0e:16:d2:9b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Jun 7 08:00:39 2025 GMT
Not After : Jun 8 08:00:39 2025 GMT
Subject: CN=569bfe3ae21f6fab87415fc90315e7d00484c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:df:89:f1:cc:fd:1e:80:17:34:cc:ff:af:
91:12:cf:83:cf:98:a7:63:35:1f:62:01:03:2e:97:
55:c3:1e:b1:50:2e:92:16:16:ee:75:8b:d2:22:dc:
31:de:62:01:85:78:41:76:34:45:e3:e8:3d:0c:10:
0a:da:b7:91:cd:37:b0:dc:fd:cd:8c:d7:31:fd:04:
c4:ff:9c:9f:e9:f5:b4:b6:83:70:51:18:5e:e7:3c:
a9:77:09:04:b9:9e:ec:9d:61:8d:c4:03:cf:9c:bb:
b1:6f:7a:8a:15:2a:0c:6c:bc:c2:3b:42:71:64:06:
a7:7d:55:da:ee:63:7f:70:2d:20:8c:70:24:19:00:
97:6d:17:2a:54:a1:b1:3a:fe:5e:51:64:ca:15:08:
37:28:e3:d7:c9:10:61:37:a8:df:c0:79:9e:58:7c:
2e:01:3f:b3:2d:a8:12:f4:e7:2c:96:70:e7:71:2b:
a6:46:4a:f5:f7:0b:9d:16:41:86:ae:ad:b9:58:c8:
cb:5c:30:bb:85:02:f8:1a:7e:9d:27:14:79:16:33:
91:00:a7:4d:8b:a1:0b:41:90:16:e1:56:da:ce:4b:
1d:ef:e7:e6:0e:da:e5:fd:87:34:ca:15:e8:4e:33:
70:55:b5:ea:d7:00:76:96:b0:3f:86:dd:2e:85:11:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:FE:3A:E2:1F:6F:AB:87:41:5F:C9:03:15:E7:D0:04:84:C2:FF
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:c8:c6:9d:8f:07:ed:94:ee:56:ba:7c:31:61:38:8e:c4:
ea:52:ea:81:39:3c:75:b1:e2:0c:2b:1b:55:9f:03:57:01:8a:
76:23:34:39:67:26:49:72:5d:fe:4e:b5:15:af:4d:70:b8:c5:
ce:37:2e:8c:83:1f:f4:4c:c4:7a:90:33:1f:10:93:41:ac:e4:
47:67:ee:2c:22:73:91:e5:1c:f9:69:a3:7d:e6:1f:2e:57:eb:
96:8c:b1:86:d1:0e:48:c5:f4:02:b2:9b:64:71:55:bc:76:be:
c0:02:e6:93:80:93:f4:92:3d:2d:f1:62:51:5e:6d:89:1c:5c:
47:0c:fd:7f:08:62:f3:99:5e:49:26:4a:80:f9:ba:10:68:b8:
f0:03:b6:c1:00:dd:72:06:0d:a3:6b:cd:98:6e:82:c9:01:a4:
f3:75:58:52:92:5a:b2:8b:7b:16:80:98:5b:71:9a:30:f4:a2:
a7:4b:7c:ea:0a:1d:78:c4:70:05:df:af:de:5e:ba:b6:c3:60:
89:aa:78:4f:1a:9a:a8:80:5a:4b:28:37:a0:d6:a5:e5:fd:bc:
63:8e:e6:92:3d:87:b1:5a:dc:4a:4f:1c:ee:7a:07:bd:31:ce:
2b:ec:e6:61:d7:7a:88:29:49:2d:09:c5:a5:f0:aa:54:8f:b1:
9e:11:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:03:27 2025 by rpki-client