Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: XEoWHbMW368vutVoPIYhh2las5d+QExcKdKydCIDAag=
Subject key identifier: 65:69:FF:3A:D4:7F:4E:CA:FD:7B:8C:A9:42:8A:80:55:FE:27:39:11
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 01974B1F380B2232742394F7020E3AF1265E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:26 +0000
Manifest this update: Sat 07 Jun 2025 16:00:26 +0000
Manifest next update: Sun 08 Jun 2025 16:00:26 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: if0yKSO5SgQCdg0gPuttrvqmdKafsLzYm2YN62wv0N0=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:38:0b:22:32:74:23:94:f7:02:0e:3a:f1:26:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jun 7 16:00:26 2025 GMT
Not After : Jun 8 16:00:26 2025 GMT
Subject: CN=6569ff3ad47f4ecafd7b8ca9428a8055fe273911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:21:4d:a1:f8:2a:6f:25:b4:6f:7c:de:71:
78:57:9b:e1:a0:ce:ef:d9:8b:de:b4:c0:0e:00:06:
ba:ab:f1:1b:c4:3f:e6:55:71:a2:e5:c1:a9:35:a9:
a4:c4:98:15:26:e7:7c:2a:07:03:2e:ef:de:b8:0c:
32:26:ff:ed:80:08:6f:e9:19:14:94:24:eb:9d:56:
f7:36:cb:91:14:1b:db:da:b4:46:c9:bf:43:eb:b9:
13:ad:2c:37:93:75:5a:1b:0f:41:e3:a1:82:2f:96:
6a:4a:f6:8a:28:b4:39:f2:7c:f4:d3:f5:13:f6:af:
de:1c:0a:3f:ae:77:83:fb:6c:cc:59:a9:43:cd:9c:
08:8f:c1:e3:ea:f5:c5:41:b9:13:57:6f:15:23:94:
68:f5:c9:a8:0d:99:9f:ca:cb:c7:63:7d:22:7a:19:
e1:d3:8c:fd:74:ba:82:ac:7c:1b:61:f9:47:fe:93:
86:83:b3:ab:6b:d4:ef:37:90:dc:cc:83:94:ff:95:
0d:7f:8f:11:86:ba:d3:76:ea:dd:a6:2b:20:7a:f7:
a7:ca:d1:7b:24:1c:f4:82:2e:39:e1:ff:d0:a5:39:
9a:46:3f:96:b9:2c:6f:7f:30:b2:f0:99:d2:df:a6:
1c:4e:b7:dd:37:a0:f8:bc:99:5c:71:50:d8:d4:a3:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:FF:3A:D4:7F:4E:CA:FD:7B:8C:A9:42:8A:80:55:FE:27:39:11
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:68:25:6c:8c:b1:66:75:56:59:0f:4b:c0:64:97:10:64:7a:
87:9d:dc:32:ec:af:4c:e0:2e:8d:4d:39:73:ba:90:51:58:9b:
29:d1:98:72:fa:91:90:ee:bc:31:4c:f3:6d:9e:aa:d3:f0:8b:
36:b7:77:14:98:89:77:0c:3c:81:0c:cb:44:79:09:ec:dd:98:
5e:db:a4:07:60:a5:ee:b0:34:ce:d1:be:6f:53:bf:20:ba:74:
0d:32:52:69:de:65:45:21:2b:16:ab:87:c4:63:34:e7:93:22:
c8:c2:68:5c:b8:e3:2f:7d:b2:55:41:1b:5d:31:a1:28:32:27:
ed:bb:91:9f:a8:17:26:60:dd:4b:ce:f3:19:23:a9:c4:7f:6b:
b0:c1:04:70:d2:75:d8:3c:40:36:a1:2a:0f:bf:96:02:55:2e:
58:45:37:e3:82:34:e3:96:ef:c4:20:36:81:2c:e2:87:65:57:
1d:54:fe:f4:47:38:87:a3:6b:eb:89:99:d7:29:9a:db:82:4a:
83:da:f5:fa:82:35:f2:6f:91:99:b2:5d:bb:c8:f1:02:f8:0c:
69:78:bb:ea:90:f3:ee:2d:1b:fe:3c:d8:ec:da:d9:b1:b6:af:
e0:d1:65:56:e3:0c:c4:bb:6a:d2:c5:6d:1b:72:83:41:03:fb:
a1:1b:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:20 2025 by rpki-client