Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: /wHUKv0v0mhW4w5Anm7p/RWTfs39vvZg4nkvnS2q2Ng=
Subject key identifier: 83:55:B9:26:5A:E4:79:3A:EA:F6:E2:FC:44:F5:F8:DA:DE:7B:1C:D1
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 01974742B8CD08D3CEFD25AA1A5C800BCC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 1020
Signing time: Fri 06 Jun 2025 22:00:44 +0000
Manifest this update: Fri 06 Jun 2025 22:00:44 +0000
Manifest next update: Sat 07 Jun 2025 22:00:44 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: Hu45QvRFI9h7SPYAlXPba2ivPfljD+wrr+BuZGlq3Ec=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b8:cd:08:d3:ce:fd:25:aa:1a:5c:80:0b:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jun 6 22:00:44 2025 GMT
Not After : Jun 7 22:00:44 2025 GMT
Subject: CN=8355b9265ae4793aeaf6e2fc44f5f8dade7b1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:11:26:bd:40:f0:35:7a:5a:c3:10:e6:6f:
d0:26:a2:50:d6:99:27:a6:35:94:18:f5:52:a2:0a:
e3:af:94:7c:bc:08:bf:7f:15:b5:9b:12:7e:7b:84:
d9:40:35:f8:4d:98:8f:cb:e5:f0:7a:02:a5:46:bd:
90:af:d2:5e:4e:cb:4c:e6:28:d3:94:4c:62:6f:42:
18:f2:1b:ae:90:be:7d:ff:bb:c1:fe:1f:2e:bb:56:
b1:ff:ae:e8:12:ee:86:45:26:db:86:9e:9c:54:ea:
ac:a1:ca:56:13:99:8e:f1:4e:e7:0d:c4:42:aa:cd:
75:f3:3c:b8:0b:2a:7b:54:ea:5b:29:e7:dd:58:c7:
66:65:3f:26:cd:5c:5f:68:ee:8d:6d:1b:82:c7:7c:
f8:66:fc:e8:a1:e3:bc:c2:9b:81:33:62:a2:1b:41:
af:3d:00:45:f0:98:20:1e:ee:ee:85:77:66:62:e6:
8d:fb:b7:b7:83:3d:b0:51:44:c4:e2:3a:f2:65:e1:
67:1f:e9:f2:91:ee:d9:a4:34:a2:04:50:c4:a9:66:
de:1b:c5:90:5a:45:ec:04:c6:09:0a:2b:bd:0d:98:
07:38:48:dd:fa:ce:f5:d8:9a:57:f8:31:df:b6:af:
54:cf:41:9f:9d:3c:5f:6d:c8:85:91:14:b5:b7:5a:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:B9:26:5A:E4:79:3A:EA:F6:E2:FC:44:F5:F8:DA:DE:7B:1C:D1
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:65:79:d5:2b:21:a4:14:89:d3:7e:60:07:fd:78:66:09:
04:72:0a:71:aa:19:dd:b6:44:cc:08:f2:c6:4d:88:50:ad:48:
5d:ca:c6:2e:e5:db:c5:5f:05:ce:c8:eb:50:2d:d7:cd:99:57:
02:15:ca:73:f6:b2:8d:7c:54:34:a1:c2:44:03:81:0b:02:c1:
a9:ad:4e:dd:56:0a:ad:21:71:be:99:3c:d1:6b:fc:50:1b:bf:
fd:9f:1d:d0:f0:22:cf:42:d4:20:86:ef:b8:8b:f8:2f:da:19:
58:28:cb:1f:f5:09:99:20:7e:22:7e:25:33:6f:b1:a5:ff:d4:
80:ed:52:31:5d:2e:41:4d:70:54:02:d8:e5:1c:4f:19:49:97:
dd:22:ea:c1:f5:da:9d:3b:e1:fa:08:db:8f:1e:9f:99:be:b2:
a8:82:0d:2e:fd:9e:86:09:40:3b:88:2c:c1:ad:a2:a7:e8:70:
81:48:99:cf:ad:3a:6e:6d:ee:87:9a:42:22:17:a0:1e:4d:dd:
b3:0d:1c:eb:59:c5:f1:a2:8e:5c:dc:6b:99:70:f0:ff:93:a2:
e6:d9:fd:96:2f:fc:1e:c8:53:21:8e:04:fa:d9:b6:c4:6e:00:
93:8f:67:b9:95:e2:a9:bb:51:17:61:c6:8e:74:4d:13:11:e6:
fe:ae:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:32 2025 by rpki-client