Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: ikpkRGguVNjKozGvF8f3vBHbxX0YaT63JsYGWNABRl4=
Subject key identifier: EA:DB:84:E4:AA:63:37:A6:1B:4B:C1:A1:14:8D:6D:20:77:4B:E7:64
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01974630016C103956E3B318200486800BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 10A2
Signing time: Fri 06 Jun 2025 17:00:40 +0000
Manifest this update: Fri 06 Jun 2025 17:00:40 +0000
Manifest next update: Sat 07 Jun 2025 17:00:40 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: JZDz05gFYIA7okHSDQjp62o3+vPplrwdVX7mYSYPzeM=)
2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:01:6c:10:39:56:e3:b3:18:20:04:86:80:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jun 6 17:00:40 2025 GMT
Not After : Jun 7 17:00:40 2025 GMT
Subject: CN=eadb84e4aa6337a61b4bc1a1148d6d20774be764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:19:be:03:30:43:18:8c:f2:05:48:d7:94:
6f:23:aa:bb:d4:02:57:86:64:eb:3b:f1:7c:4e:48:
58:9b:23:5f:a4:05:6b:7c:8c:f3:93:ee:f8:91:bf:
06:18:c2:c2:d4:c2:42:2f:42:0a:51:a7:f2:f8:7a:
f6:44:5f:ae:40:9e:91:05:88:73:6f:fc:2f:e5:fe:
60:60:0c:3f:21:f7:c5:69:1f:53:e0:44:21:94:e3:
3d:ba:b4:5c:8a:36:a5:b4:ff:5c:cc:03:bf:bd:75:
c9:ae:72:e2:bb:f1:26:89:de:32:c4:9a:18:a5:3e:
4c:52:f8:ed:8e:31:24:a4:6f:a4:9f:8e:e0:fc:e3:
a7:cd:5e:df:a5:92:ed:d2:c3:c9:0a:b9:c4:c8:80:
9a:5a:8e:38:d6:3e:ef:f8:e1:df:ea:aa:d3:ee:35:
dd:1b:27:72:15:dc:8c:99:b2:b8:e7:11:59:97:1b:
dc:65:93:25:62:ac:7a:a7:04:e8:8c:b8:83:5a:54:
9f:b9:60:27:5f:d1:b1:1c:7e:b2:16:3d:d3:3c:35:
b2:33:aa:47:0b:54:71:88:58:b8:53:a4:b4:bb:a6:
0c:2a:5d:fe:a4:c4:36:e6:46:c8:d5:0b:48:8a:f3:
4d:13:1f:03:9d:4e:29:7f:0a:f7:e3:1d:dd:a9:6e:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:84:E4:AA:63:37:A6:1B:4B:C1:A1:14:8D:6D:20:77:4B:E7:64
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ab:8c:8e:67:d2:89:fd:9a:be:47:d3:9b:bf:75:5e:e3:31:
93:be:33:75:f3:58:f8:0c:d0:2c:3c:73:ff:6e:ed:c9:37:d1:
90:a2:62:14:f9:f8:ee:9c:e5:42:d9:bd:fc:7a:8c:22:2b:31:
91:4c:ca:59:36:00:d7:1d:6c:37:94:5d:15:d1:cd:f5:f9:05:
90:28:7a:bb:cf:3e:a2:36:b9:a4:13:b4:85:50:d2:88:7c:7d:
96:84:e2:9f:cd:5d:55:d4:72:5a:bf:6c:ed:8f:de:ea:dd:94:
00:89:27:db:7d:d5:72:43:76:e0:7c:4b:00:72:9e:95:0c:d0:
08:cc:03:68:c8:a3:52:be:22:aa:6e:18:d2:bc:b4:d8:5f:17:
9e:c4:7a:ec:af:77:6d:ce:d0:e7:77:4d:45:7f:a2:f6:bf:7e:
6f:48:2d:42:1c:06:75:f2:98:5c:1c:79:c0:3e:17:0e:9b:42:
59:46:12:ec:68:a9:3e:e7:26:be:95:8f:69:8a:55:20:9e:ee:
b1:c7:46:08:e1:02:fa:7b:a2:3c:b6:ae:62:bd:78:ef:6a:34:
ab:2c:5c:92:02:a1:5e:e3:67:a0:d9:f7:a9:be:1b:35:b0:fe:
31:33:50:0a:9b:ab:b7:ba:9b:f2:0a:5f:c7:2c:d3:c8:b6:ed:
0a:04:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:28 2025 by rpki-client