Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: jHcvkPc0V9qa03nYTD1xRMvYs6q1BO2QOMocTmaqGuU=
Subject key identifier: 34:AB:14:94:2A:27:F8:7C:B1:78:FF:61:C2:F2:0E:06:99:E7:CB:C4
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 01974C31DE68027F96F738F0EB9117940265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 12CE
Signing time: Sat 07 Jun 2025 21:00:26 +0000
Manifest this update: Sat 07 Jun 2025 21:00:26 +0000
Manifest next update: Sun 08 Jun 2025 21:00:26 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: pvlrEKoI4W8NTH3a/oFGUEnDmqtaSMEcDibbEoVbU5s=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:de:68:02:7f:96:f7:38:f0:eb:91:17:94:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Jun 7 21:00:26 2025 GMT
Not After : Jun 8 21:00:26 2025 GMT
Subject: CN=34ab14942a27f87cb178ff61c2f20e0699e7cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:ea:4d:92:cb:fe:2e:22:ea:c8:8a:85:8c:
39:2f:b6:be:e6:8f:4e:f3:a0:32:af:e6:1c:4f:7e:
d9:ea:7e:b7:e7:7e:51:d7:96:7a:a8:20:ee:c7:1d:
80:d1:26:fb:94:03:ac:dc:05:dd:be:31:4f:7d:70:
08:58:b8:24:d3:8a:f2:b7:d0:4b:80:d8:78:2c:5c:
64:e6:b8:0f:4f:34:b6:47:c5:ea:40:45:2f:59:85:
7e:e8:13:b6:68:89:6e:42:aa:b2:a4:34:7d:2c:f1:
3f:29:cd:dc:71:20:76:eb:81:b3:5c:1d:2b:cf:49:
ed:cb:64:e1:b3:60:c7:f0:13:2e:4b:5a:f0:e4:65:
49:6b:5a:b9:75:c6:4f:c0:bc:50:67:75:87:bb:ed:
30:df:ea:06:66:9e:80:8c:70:22:d2:17:a1:93:f7:
ef:45:9a:9b:2d:12:57:f0:61:0d:52:34:67:c4:41:
b6:9b:f4:ec:49:c8:9a:8e:1c:fb:cb:d1:f1:a7:ec:
0e:d2:88:33:26:f4:cd:ff:11:75:dd:da:71:ab:68:
06:c5:20:75:a0:45:2e:20:85:2a:b9:ac:c8:09:3a:
47:33:1d:ff:d1:0e:27:93:cb:3c:a2:8f:ee:3f:61:
0e:de:01:c7:ae:29:38:ed:c7:0a:23:cd:9f:40:42:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:14:94:2A:27:F8:7C:B1:78:FF:61:C2:F2:0E:06:99:E7:CB:C4
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:ac:04:50:34:26:98:be:4d:db:86:4a:ad:22:ac:f4:ad:
f1:b4:61:be:8a:a5:2f:2a:02:2e:67:02:d0:66:e4:f7:af:c1:
fe:db:19:6d:04:89:4b:d3:c6:e4:0c:e1:e1:f2:37:d9:90:a7:
22:6c:0d:9e:ee:58:54:1d:86:2d:91:00:1b:b5:22:5f:0d:7b:
66:24:31:8b:80:5c:c5:14:04:92:0e:27:4d:57:40:03:bd:fd:
6f:0f:8c:84:f7:24:c8:f2:da:d7:e2:fe:a1:60:41:2d:42:e9:
d2:17:15:bf:a2:31:90:db:fb:f8:a0:8e:78:5c:da:97:32:a1:
bc:88:ca:b9:42:6f:a1:e9:94:ad:55:a2:d8:9d:ac:a4:02:12:
ae:4e:8b:6e:8d:fb:66:b0:a4:c1:00:5b:45:51:64:c2:78:f2:
61:fd:b7:6a:41:75:4d:7a:65:db:d3:ae:6d:8f:e8:8c:ce:4f:
54:0c:aa:12:16:85:a3:66:6d:18:05:7a:32:ad:d6:23:e7:67:
44:41:30:b0:aa:28:34:24:cc:73:e3:40:23:42:d8:64:78:6d:
92:3c:61:79:25:cd:fe:25:71:96:86:d5:af:9c:16:a2:90:67:
c6:de:7b:61:69:bb:9e:ef:29:ca:f3:75:df:70:3f:b4:2c:ee:
77:65:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:12 2025 by rpki-client