Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: P60klXmZqSTyBumEQ4AipLQ+tradvUPluSkhjUzTeVU=
Subject key identifier: 67:3C:E4:A8:8F:0A:62:66:1C:D7:D5:B7:2E:91:38:04:25:41:C4:DB
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 019748FA47617FE6F87BBB94C308A8C28CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:51 +0000
Manifest this update: Sat 07 Jun 2025 06:00:51 +0000
Manifest next update: Sun 08 Jun 2025 06:00:51 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: aL/d5a0BgPJUZFHXbsaVv+8ZFIFbzk0XdbYCRCTahjY=)
2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:47:61:7f:e6:f8:7b:bb:94:c3:08:a8:c2:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Jun 7 06:00:51 2025 GMT
Not After : Jun 8 06:00:51 2025 GMT
Subject: CN=673ce4a88f0a62661cd7d5b72e9138042541c4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:f9:59:d4:f9:27:76:bc:9c:89:76:cb:a9:
a0:9e:0d:c4:2c:11:e9:a6:2a:f2:ea:92:eb:9e:64:
ac:0e:c7:db:da:2b:62:c5:3e:8f:8c:fd:73:64:48:
9c:b6:78:8a:7f:1f:4e:a6:b6:01:f5:e1:83:8e:b4:
65:dd:a2:99:5d:7e:35:c4:a5:2f:29:a8:30:47:e6:
d4:03:9d:5c:eb:a5:0a:bf:be:21:12:b8:50:07:99:
91:62:c4:7d:43:b7:8b:ff:87:88:d6:46:95:fb:19:
84:74:31:97:a5:01:ad:a4:8a:f1:f8:9e:19:ae:b1:
89:b3:7a:67:77:12:1c:6d:e7:92:9b:4e:5e:24:7f:
d4:c7:d8:62:66:ab:a6:d0:8b:8c:05:14:01:2f:bc:
c3:69:0e:94:3d:b5:e9:55:c2:5e:78:02:fb:b3:cf:
06:1d:2e:15:bf:1b:f6:d8:8d:c0:52:64:36:17:98:
a7:8e:c5:2c:e1:c5:9d:45:46:65:ea:f0:ae:57:80:
cc:20:f4:7f:c6:4e:b1:9d:4c:3a:b7:31:6f:96:5c:
77:9e:f9:1b:37:d5:a8:37:a8:61:05:48:08:42:56:
24:9a:dd:a4:57:a5:a4:16:62:3c:5f:bb:1b:84:e9:
02:76:41:fd:dd:78:26:8f:10:a5:a6:69:16:67:22:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3C:E4:A8:8F:0A:62:66:1C:D7:D5:B7:2E:91:38:04:25:41:C4:DB
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:07:c8:ec:68:06:fa:ab:9a:65:69:a0:29:0b:bd:7a:60:55:
48:16:38:bd:40:a0:7f:82:6d:3f:f8:b9:c9:0b:9a:2f:30:4e:
dc:60:7a:99:e5:f7:b5:c2:bc:ed:f2:d0:24:5b:71:66:6e:ee:
a3:f7:e0:08:a8:1f:1b:f4:8e:b6:c8:78:ba:f2:53:e3:ee:a1:
ae:d4:f2:71:ce:61:01:bd:c8:45:1f:59:56:52:54:2e:e0:14:
48:a7:03:32:d9:9c:5b:ee:46:16:df:1b:47:4b:fc:43:71:c3:
e8:bb:03:b4:cb:eb:5f:3b:ff:aa:43:40:bd:d3:56:21:61:89:
80:2c:e4:48:4d:55:71:53:c2:e4:16:44:d7:35:a1:d5:50:5b:
d2:96:ef:0f:03:68:72:88:0a:32:2c:69:65:bd:cf:34:5c:98:
af:43:1b:21:6d:8d:3f:9c:a1:32:34:16:5b:94:5f:10:0c:6c:
39:61:11:27:e5:8a:ef:f9:a5:2b:eb:7e:02:90:32:32:84:6b:
ed:d0:2f:75:e6:fb:bd:a4:7a:d5:b0:26:20:07:8c:98:3f:90:
4b:21:55:0c:69:de:73:a2:57:d1:3a:36:7d:ce:3e:7a:bf:f8:
f2:03:28:59:a1:e8:fd:b8:2d:7b:eb:75:82:13:80:27:a7:54:
0c:0c:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:32 2025 by rpki-client