Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: qk0KQ7Te0yWuOb0y2a/jq1wNyI0rkpI7eUyNlBIcwMw=
Subject key identifier: C3:EB:9D:3D:FF:C6:C0:C6:5F:0C:79:A3:4A:2A:2C:CF:ED:E5:95:78
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 01974A7A769F1BDA1839CFB35150C3F05B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 0FF5
Signing time: Sat 07 Jun 2025 13:00:29 +0000
Manifest this update: Sat 07 Jun 2025 13:00:29 +0000
Manifest next update: Sun 08 Jun 2025 13:00:29 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: LxhOCeH48YAS0jYulpXsR5TZfGCU+7EgfleCfO5QYL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:76:9f:1b:da:18:39:cf:b3:51:50:c3:f0:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Jun 7 13:00:29 2025 GMT
Not After : Jun 8 13:00:29 2025 GMT
Subject: CN=c3eb9d3dffc6c0c65f0c79a34a2a2ccfede59578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:2a:7f:ed:32:5c:55:e5:39:c4:29:10:c9:
60:38:82:74:2f:10:19:7e:9c:f2:f9:26:e4:d4:51:
98:cf:7e:24:63:99:f0:48:63:7c:59:bc:79:79:07:
e3:9a:1d:09:0c:b9:13:4f:d6:04:bc:78:f1:e3:00:
e2:ac:b5:28:7c:4b:e2:ec:46:0f:83:f2:a6:79:83:
f6:f8:2e:6d:71:b5:4d:27:b8:0b:90:12:4a:f6:0c:
53:53:4e:ff:4e:91:28:a7:92:ab:51:af:a7:60:22:
d7:74:54:a9:ac:2e:0e:99:cf:d6:b2:da:98:3b:ed:
b5:b9:9b:68:34:6c:7e:de:1e:74:ec:e6:2f:76:24:
aa:d0:67:ab:e5:62:60:bf:14:2a:f3:0a:79:5a:04:
62:a1:de:2e:a9:19:f1:5f:9e:a0:77:84:54:c0:e8:
af:2e:d4:06:90:68:07:92:95:0a:43:9c:da:e0:cf:
d8:22:ec:30:cf:c1:8b:90:08:a9:f2:6d:b7:6b:b0:
78:93:e8:57:76:81:d1:50:60:d2:65:de:b6:2a:02:
94:83:9c:aa:08:5a:b8:39:f6:29:01:4f:ea:ad:8d:
67:d2:6a:b8:04:0c:17:ac:2b:ae:94:e7:68:ad:59:
81:d5:55:92:b6:ca:18:92:a8:df:dc:8e:fe:92:35:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EB:9D:3D:FF:C6:C0:C6:5F:0C:79:A3:4A:2A:2C:CF:ED:E5:95:78
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:90:44:6f:42:61:61:45:27:7a:26:df:17:3c:52:5e:62:
f9:6e:1e:a5:c5:e8:cb:e7:5d:6b:de:e5:68:a8:5d:65:6d:85:
4f:23:bc:8f:8f:e7:32:c6:95:d4:5f:07:b1:10:dc:66:cb:51:
48:da:cb:e5:e9:cc:bd:d9:c4:af:9a:86:5a:7a:b3:6f:95:e2:
fd:a3:91:01:3d:35:dc:61:1c:df:3a:b0:cf:13:58:de:7d:0e:
64:8e:66:8d:72:1e:ef:36:60:bf:bc:92:4b:00:57:df:9c:b7:
33:73:cd:7d:df:8a:64:16:83:dd:41:4e:28:39:7f:ee:89:63:
cd:20:b7:35:c9:a1:d1:30:0f:61:79:90:8c:50:40:28:c0:5d:
db:e6:8e:65:63:4f:20:89:fa:78:3a:72:d8:5c:23:03:09:4a:
e6:5f:fa:8a:60:e0:35:84:6b:9e:b6:af:a1:c2:06:52:fa:e8:
ff:e1:14:b0:c1:b9:f5:8e:f9:6d:c0:5b:f3:87:4c:70:2f:45:
06:2d:5d:37:53:0e:9e:7b:db:98:31:1e:fa:4d:ed:6a:8c:4c:
0b:d9:36:96:a4:74:72:31:46:da:d9:a7:6c:73:c4:99:c1:7b:
b4:dd:d9:66:d5:c3:d5:95:68:5f:62:91:32:b0:73:4a:8f:3a:
4e:97:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:10:08 2025 by rpki-client