Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: ouCfzNvR50//bqbMuwiyDz1VKIfSTSzPAWg5GtO30R0=
Subject key identifier: 8D:27:93:96:75:44:66:AF:2B:0E:48:CC:BE:BD:EB:B3:55:48:BC:CC
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 0197C9F0622102048F3346454C28291BC18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0DB6
Signing time: Wed 02 Jul 2025 07:01:03 +0000
Manifest this update: Wed 02 Jul 2025 07:01:03 +0000
Manifest next update: Thu 03 Jul 2025 07:01:03 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: N4tEpJ5DktJKQ0DE7Z/1QWXXWIiz7BVi2b3jFBk/3fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:62:21:02:04:8f:33:46:45:4c:28:29:1b:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Jul 2 07:01:03 2025 GMT
Not After : Jul 3 07:01:03 2025 GMT
Subject: CN=8d279396754466af2b0e48ccbebdebb35548bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:06:83:52:6b:e3:d8:71:75:e1:51:09:69:
7c:36:ad:69:42:8a:d2:9f:b2:6d:db:a5:d4:84:f1:
5c:f4:bd:02:5a:3b:50:2b:8f:f1:ef:71:02:be:dc:
60:9e:74:e0:09:f9:e1:f8:cf:c6:91:72:8d:0e:82:
58:a7:05:68:0e:ad:2b:13:64:53:97:22:76:a2:bc:
84:6f:8a:82:50:10:67:b7:e6:3b:06:c2:3c:72:ff:
6c:20:24:20:c6:99:90:87:f4:d1:e4:27:d2:44:96:
91:d6:58:a3:93:b7:e1:eb:7f:e1:7c:e0:25:ab:57:
3d:b7:72:94:b1:dc:75:52:d0:4d:7d:3e:1b:d4:a3:
06:3d:86:08:4b:ef:bb:bf:93:dd:a3:28:b3:6a:3b:
8b:c6:3a:da:dc:3a:fb:7f:3e:5d:1e:c8:88:e0:09:
73:25:f9:72:be:ae:46:da:c9:c3:0e:a8:b4:78:49:
a4:d5:fd:a6:1c:9a:0d:30:8c:d2:09:a3:2f:05:3c:
13:de:6d:a0:a2:53:e2:51:f7:5d:4d:3b:bc:b1:d0:
13:4a:db:bd:4b:01:4c:d6:4c:b6:08:a0:f1:d1:27:
c6:8b:0c:4d:34:f2:61:f6:4e:21:19:6b:5f:bb:84:
25:5c:9f:36:0a:b9:10:2b:a9:02:7a:7b:59:fe:76:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:93:96:75:44:66:AF:2B:0E:48:CC:BE:BD:EB:B3:55:48:BC:CC
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:30:b9:c7:c1:1f:63:b9:e7:33:0c:20:c0:d9:ae:0f:52:
9b:ac:44:a8:19:9f:bf:ef:e2:34:ff:06:9c:c8:25:4d:89:4a:
7b:f4:14:4c:15:d7:da:a7:68:26:45:ea:c4:94:b1:11:7a:25:
9c:9f:85:44:57:75:21:e8:cd:70:81:fc:11:28:3d:c3:e4:52:
94:e7:32:5e:4c:88:29:f8:1a:7c:13:d9:28:6c:42:a0:f3:6a:
43:2d:32:58:f6:2a:56:4f:19:a6:be:4c:bd:40:7a:e3:f4:a9:
22:3a:ca:09:78:02:6e:44:db:42:04:79:06:7b:07:ec:10:2b:
26:a1:d8:5c:95:2a:b4:7f:b9:71:71:bf:9b:f1:dc:52:80:a9:
2f:80:db:f7:ca:d0:c2:87:e3:66:39:00:e2:70:5f:70:71:05:
5a:8a:df:c1:ae:01:ac:d2:ae:22:51:72:46:bd:5a:e1:8e:ad:
f9:cb:03:78:6d:f0:79:b9:de:78:bc:c3:48:34:25:a9:45:54:
a4:d5:eb:43:da:dd:f2:9e:3a:03:96:b3:bf:9f:17:fd:35:f9:
51:0f:6a:00:63:c2:47:18:2e:b9:0e:76:0b:9f:4f:a1:24:c9:
6c:d5:4c:d9:4e:a7:8d:ab:4f:58:02:cb:71:b3:ff:56:ee:94:
9d:c0:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:23 2025 by rpki-client