Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier: Q/ED9j/T1lxkzlF+O7xXPm6MBXkIZznbQUdE1TM18iw=
Subject key identifier: 0D:5C:01:20:05:12:0C:6E:47:DC:79:A7:2D:CC:5F:3C:64:66:66:12
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 01974BFB4421796CF70D8CBE9FE63E519867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number: 0572
Signing time: Sat 07 Jun 2025 20:00:47 +0000
Manifest this update: Sat 07 Jun 2025 20:00:47 +0000
Manifest next update: Sun 08 Jun 2025 20:00:47 +0000
Files and hashes: 1: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (hash: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=)
2: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: RJw5p+oklVAc2s35Ck/YN/9FlnVxTW3DMG58+1Kl7TQ=)
3: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (hash: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=)
4: oJELLABa0xvOzeDJ8-0ROcoGDzU.roa (hash: eMpca3L46CdM/yY9Tb5GPWOeeCVHM7SNfiUzaVfbfTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:44:21:79:6c:f7:0d:8c:be:9f:e6:3e:51:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Jun 7 20:00:47 2025 GMT
Not After : Jun 8 20:00:47 2025 GMT
Subject: CN=0d5c012005120c6e47dc79a72dcc5f3c64666612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:4e:06:80:d9:46:27:61:50:03:19:cb:e9:
cc:56:76:6b:7f:6f:09:df:9c:42:e1:9f:87:4c:f2:
00:10:40:13:d1:20:3f:8b:3e:2c:63:11:17:36:88:
a4:ad:ec:71:03:99:83:6d:d1:96:c6:4f:0a:35:b2:
83:ee:22:15:74:3e:6c:16:48:e2:55:64:22:ab:1d:
94:a6:dd:06:23:d8:78:b6:7f:58:ef:14:ec:20:a8:
e6:8a:08:45:ca:cd:39:dd:6a:a3:4a:cf:b0:d8:eb:
8e:32:dc:20:75:3f:b9:f8:7f:ec:26:0d:be:ff:ba:
92:ae:84:4b:22:b4:f9:40:4f:ed:22:ec:4f:d7:72:
cf:85:cf:7d:af:31:8d:58:48:f6:8c:e7:f6:ea:26:
7a:bf:a3:c5:ea:5e:76:7a:07:e0:68:f4:b9:63:15:
21:20:e2:b9:83:18:df:4f:74:95:41:a3:3c:01:99:
1e:52:8d:5a:3b:59:30:26:42:81:fd:5b:72:57:ca:
c6:04:4c:e9:78:0e:fa:5d:b0:1e:fe:40:bf:89:f9:
d7:e9:60:18:ef:9c:d1:b5:3f:6d:41:4d:87:c9:48:
97:0b:85:e2:49:c1:77:a6:df:20:d9:5c:99:71:e2:
2b:4f:53:3f:bf:ab:2c:b6:93:3e:61:89:9b:2c:32:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:01:20:05:12:0C:6E:47:DC:79:A7:2D:CC:5F:3C:64:66:66:12
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:17:88:b9:52:f0:37:6b:f9:df:4b:d0:c9:4a:a7:98:a2:
f4:67:11:f5:8e:c3:fd:1d:11:c9:97:06:3a:ff:ba:df:d8:54:
19:3b:af:5a:dc:29:be:15:cd:7b:18:4e:34:a3:b4:bb:58:47:
ec:7d:34:db:ef:fc:82:f6:0b:3a:2e:2c:e4:c7:cd:6e:98:7e:
22:78:fa:47:d0:ea:b5:31:c4:4e:09:80:bb:1d:33:ab:28:df:
cb:86:c4:8a:cb:24:f1:5b:3e:62:c9:29:32:26:14:75:89:58:
6c:9b:ae:c3:45:c0:65:0c:3b:c3:09:f9:d2:d1:9a:29:6c:e3:
c6:2b:10:7b:f2:7c:c5:5d:da:f6:bc:9e:6f:4d:a8:c0:34:b6:
51:4e:67:65:28:98:12:3a:29:c5:0e:89:94:50:15:07:72:48:
29:c1:ca:d5:01:a4:03:b3:25:c7:7e:6d:63:e6:2e:5a:70:58:
ff:b9:8c:4c:c9:9d:b2:98:91:c9:9a:1a:c9:70:70:56:16:65:
52:6d:08:c2:4c:e6:01:7e:cd:89:e1:9d:93:f6:56:32:07:b7:
13:a2:dc:6e:c8:95:77:f4:31:24:2a:df:4b:d6:fd:c9:88:28:
27:2b:b7:f7:1e:be:3c:4f:1b:3e:39:2c:62:3a:9d:50:0c:49:
b3:1a:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:50:22 2025 by rpki-client