Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: B3D/ljJX1ryLfpXvwuYVU0p6C0o6ePLfOmuDsUfF2fo=
Subject key identifier: 6D:3D:8A:0B:05:4B:F6:BF:A5:9B:0C:D2:04:ED:80:A4:AC:96:20:76
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 01975121570D439C8D2691DF42EF7E99AA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 20:00:28 +0000
Manifest this update: Sun 08 Jun 2025 20:00:28 +0000
Manifest next update: Mon 09 Jun 2025 20:00:28 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: lSlk6abWihBiAY1wVhLC8SR9EH/hZ2kVGpf+UuGxpCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:57:0d:43:9c:8d:26:91:df:42:ef:7e:99:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jun 8 20:00:28 2025 GMT
Not After : Jun 9 20:00:28 2025 GMT
Subject: CN=6d3d8a0b054bf6bfa59b0cd204ed80a4ac962076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:16:d0:05:73:af:fc:b8:f6:db:f5:2a:ca:
5e:c6:b9:1d:bf:27:61:4d:02:2e:a2:e9:32:ce:20:
84:b5:00:75:14:82:28:45:a0:9f:a2:19:db:7d:84:
33:50:f9:77:a8:19:1d:e4:c6:42:0a:69:fc:b8:d9:
99:d8:4c:6a:73:df:d2:5f:f8:04:27:a5:c5:92:72:
5e:4c:8a:2b:e1:a4:8f:75:61:bf:6e:31:b0:66:8b:
06:53:57:7e:3e:5d:fa:1c:72:8f:ca:6f:b7:6b:96:
04:aa:bb:ba:63:97:37:5d:3a:34:86:e8:2a:e2:3a:
b7:81:b7:d9:72:82:d0:12:cf:a2:f7:06:53:a5:d5:
0e:1c:9b:fb:60:57:69:af:e5:f6:6f:90:0f:e8:ae:
c8:ca:4f:b2:76:49:27:80:3f:e7:86:e4:91:d0:c4:
4a:e4:66:95:8e:6b:3e:56:88:3c:39:92:d1:dd:7b:
b2:27:f7:b5:51:6f:90:4c:e1:a9:5e:2d:f1:3d:19:
af:09:bf:0f:43:24:4e:22:09:d5:f1:00:85:51:22:
d2:e1:8d:47:14:c2:33:73:b9:19:9f:c4:2d:1c:70:
ad:25:a8:86:b7:d8:5e:6a:62:cf:08:4e:30:d2:77:
66:0e:80:79:4a:a8:3d:ad:69:a5:30:b2:42:ab:02:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:8A:0B:05:4B:F6:BF:A5:9B:0C:D2:04:ED:80:A4:AC:96:20:76
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9e:06:4a:f2:f3:0f:e9:6b:80:c9:a1:1d:c5:5f:f9:05:f0:
9d:13:00:02:cc:55:22:0b:da:1a:4c:8d:8d:32:47:16:84:65:
54:c4:91:a2:1a:6a:c8:61:b4:82:40:06:68:8f:71:6d:c6:2c:
a4:d8:cd:e9:e7:05:ba:e7:60:04:fa:69:e5:28:5d:a4:57:38:
74:bd:0f:f4:44:95:a4:67:ac:3c:22:46:7d:81:78:d3:22:5c:
7b:36:d0:1a:2a:d0:4d:84:44:e8:30:13:cd:d0:c9:b6:06:02:
ce:a8:44:31:46:65:1c:eb:7f:f8:40:32:ea:bd:13:ee:de:f9:
66:b6:00:aa:44:5a:78:10:0a:bf:64:72:d9:09:7f:56:3d:3c:
1f:58:7e:f8:68:e7:c7:a2:c3:c1:ac:54:0a:93:b7:0a:ac:ec:
00:e7:4f:8a:b5:9e:41:d5:3a:b1:87:c9:a7:9c:b0:28:71:b3:
3b:df:73:06:03:e1:1b:d2:d6:3e:0e:15:15:7c:7c:a1:ee:33:
e4:09:6c:73:d7:48:3c:e1:12:72:14:b0:f9:42:6b:c1:ba:d0:
4f:fc:49:b0:79:1f:b6:c4:5d:4d:23:32:43:3f:fa:af:fb:97:
31:f7:c0:aa:ac:32:de:ef:e1:a6:50:d4:66:14:01:ee:a9:00:
69:8f:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:00:43 2025 by rpki-client