Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: 4/MCleHhURZd8vaFD4CcS1ob3qTRcBbPtKDUGb/QqP8=
Subject key identifier: A9:0E:8A:6C:9B:5F:E3:53:A0:EE:8F:BC:DA:57:7A:83:94:4A:30:BC
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 0197537DDB589227294F4B74077F23C70713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 0F
Signing time: Mon 09 Jun 2025 07:00:46 +0000
Manifest this update: Mon 09 Jun 2025 07:00:46 +0000
Manifest next update: Tue 10 Jun 2025 07:00:46 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: Pgqoy797ggbeCAW98s/Uzhc34qb1ii+XvIKFFBnvz/c=)
2: nHxs1XMfnqzh-Z8aeIMb_NiElkE.roa (hash: 8Qy8fF7R1NwaP6gn0wt2uKO1stfFsvaIv7LK8MDpXo4=)
3: uPdsoPPsIplTvcCyAbcJMwYg9pQ.roa (hash: csIN1YT5O+6UepoAW4L5bp8f0Qp/luUK9hGbpbp+j+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:db:58:92:27:29:4f:4b:74:07:7f:23:c7:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Jun 9 07:00:46 2025 GMT
Not After : Jun 10 07:00:46 2025 GMT
Subject: CN=a90e8a6c9b5fe353a0ee8fbcda577a83944a30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:11:c6:c2:70:21:ca:8c:37:bc:0d:09:55:
01:da:fc:d3:c7:3d:47:06:b6:79:e0:55:9f:b6:ee:
64:31:67:a0:5b:46:d1:44:4f:95:d2:9d:8e:c5:ee:
76:65:a6:7c:4d:de:d0:71:bd:7c:9c:d6:7d:b8:86:
b2:c9:79:d8:34:ce:f5:a2:4b:4f:9b:d5:d3:23:8b:
55:46:de:09:4c:d1:61:ac:f0:90:2b:f8:84:d4:83:
95:2c:fb:39:5a:9b:3a:21:82:1c:ed:90:64:48:1a:
ce:13:45:78:61:20:f2:5e:6b:a4:f9:7b:04:2b:fc:
a6:9e:43:54:76:e4:1e:52:79:d6:5b:76:7f:46:62:
50:ff:59:59:26:55:7d:58:3d:27:6a:37:59:0a:a2:
52:82:44:cc:66:6f:8a:bf:0e:82:17:05:e4:a5:ec:
bf:3b:ac:fb:68:d3:8b:ad:2b:40:b4:f9:aa:3c:bf:
e8:5d:bc:4a:03:df:ae:2f:ba:37:2a:19:a8:29:17:
a4:38:d9:45:9c:be:8a:53:50:d3:86:2e:e7:9c:db:
a8:a7:8d:6c:9e:0e:10:20:4a:18:19:ee:cd:2d:ed:
94:c7:07:32:31:c9:fc:b5:fb:b8:7c:a9:1b:f9:60:
39:10:67:29:31:da:da:ad:41:4f:f8:72:65:f9:b7:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:8A:6C:9B:5F:E3:53:A0:EE:8F:BC:DA:57:7A:83:94:4A:30:BC
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:67:5e:b7:74:be:89:41:c5:0d:27:64:0d:08:ff:b2:0f:
97:01:ce:28:5d:b7:68:cb:89:79:b8:81:25:aa:94:67:a6:0d:
fd:94:3e:a2:22:26:a5:88:3f:f6:ae:60:79:d7:26:6b:c8:1d:
9e:29:10:fa:7a:98:87:dc:3e:37:3f:61:bc:fa:ab:e3:c2:d5:
68:1c:4a:5b:a6:e6:26:ce:16:2a:5f:59:63:ca:2e:71:53:f1:
b1:77:63:4d:31:98:d8:b4:17:9e:b0:f0:7a:b5:8a:3f:2e:f1:
a1:cf:bf:61:22:54:ef:ab:3f:a0:42:c6:66:17:6f:6c:e8:61:
88:8d:b4:0c:c6:d2:70:c4:ff:60:28:63:99:88:29:2e:fa:cc:
76:15:f1:db:d4:05:5a:60:cd:b1:49:d0:60:de:9a:a9:b8:75:
1a:6d:88:d8:2c:65:11:9f:b0:75:a3:9c:b3:29:11:76:09:a7:
92:1c:4e:61:ee:02:b5:1d:f7:68:6a:a0:b9:56:d4:fc:8b:dc:
29:49:75:f0:66:84:c6:4b:37:78:15:e0:6e:ed:40:6b:92:c7:
0e:78:f3:e5:9a:d4:72:05:70:a8:76:09:0f:16:d8:30:da:2e:
7d:c3:fc:41:e9:39:fd:cf:e2:4b:df:7b:d3:7a:da:aa:a7:87:
fd:74:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:54:32 2025 by rpki-client