Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: eNpI+mJoMSKL7hx9IdJ/qzwhM4AoVJZTt23rqq1dzZQ=
Subject key identifier: 28:0E:02:2D:BE:4C:0A:4D:2A:AD:4A:76:4A:BE:6A:29:8A:AB:01:57
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0197488C122B8B3677270731ADE62D1D22EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0C95
Signing time: Sat 07 Jun 2025 04:00:28 +0000
Manifest this update: Sat 07 Jun 2025 04:00:28 +0000
Manifest next update: Sun 08 Jun 2025 04:00:28 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: nSCW6EAUMeIafIEHT+258OqP+LIQFzTHIgm1daTEpOk=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:12:2b:8b:36:77:27:07:31:ad:e6:2d:1d:22:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jun 7 04:00:28 2025 GMT
Not After : Jun 8 04:00:28 2025 GMT
Subject: CN=280e022dbe4c0a4d2aad4a764abe6a298aab0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:09:a2:56:3e:1e:d0:15:ac:11:11:52:d3:
c2:cc:c3:30:c5:50:60:76:2a:ec:68:1e:95:97:51:
37:68:84:04:f1:1c:b6:16:27:ea:ec:92:90:c2:b1:
15:1d:92:3f:63:1c:78:9f:e5:de:27:62:15:0c:41:
c9:3e:31:5a:d2:59:7d:ad:2b:c9:71:41:83:9d:e3:
47:0b:6c:04:be:e2:be:4d:50:3b:c8:27:2b:98:12:
55:a3:0e:f2:0e:e2:00:be:bd:06:96:e3:09:54:9b:
ca:34:df:df:be:f9:70:11:68:2a:b0:1b:80:91:fe:
7d:21:9b:ee:4f:ef:a1:72:c9:7d:ae:0b:bd:50:27:
3f:b1:ee:b9:5d:a7:16:f2:34:bf:03:80:e9:b7:5c:
e7:6e:df:3b:69:38:dd:6f:c0:30:40:f1:79:61:00:
f6:25:9f:b4:47:df:b1:87:8b:00:eb:e1:28:e2:2f:
79:c5:6b:91:aa:ef:2f:93:ae:fe:f1:0d:58:dd:f2:
be:0c:d8:78:9a:ac:d9:1a:f9:c2:69:ea:f5:ed:04:
38:a2:75:1a:8b:58:38:83:e8:a6:d0:1f:b9:eb:3f:
fa:cb:1b:17:e0:d6:c0:70:8a:64:e5:5e:18:4d:eb:
65:49:1a:e1:75:fc:db:a8:30:6c:ec:59:6f:8b:f7:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:02:2D:BE:4C:0A:4D:2A:AD:4A:76:4A:BE:6A:29:8A:AB:01:57
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:13:17:30:c4:7d:ea:bd:0b:2e:be:cb:a6:c7:9c:7f:26:
a2:d7:2a:e6:a1:91:fc:26:e2:d0:f1:ce:e6:62:09:f2:ab:aa:
cf:8c:5f:28:b8:d8:c0:70:0d:00:a4:60:ba:ee:6b:ab:de:1e:
20:32:3b:52:11:85:4d:90:62:15:d7:27:bb:93:e1:58:40:17:
3b:92:a2:c9:21:7e:9c:b4:b9:18:a4:84:12:6d:be:15:54:2a:
87:dd:37:0a:ba:7b:c7:b7:4a:0b:fd:b3:2e:f6:8e:24:6b:92:
0d:05:a9:52:84:6b:67:31:78:2d:a1:d5:51:00:e0:fd:bf:c6:
b8:5e:db:1a:37:ce:a9:83:da:54:e5:ec:26:b4:a4:96:50:37:
af:2c:5f:e8:b9:15:46:2a:f2:af:99:25:db:66:e5:ea:d9:f1:
a5:94:03:38:03:42:b3:7f:d1:80:da:d1:d2:7c:46:66:fc:f0:
5c:20:ed:c9:db:02:58:e3:4a:ba:95:04:bc:37:e9:87:44:b6:
43:60:c2:99:1a:9c:1d:d4:52:ec:bd:47:43:25:b2:ad:65:c5:
7c:4b:73:1d:46:7c:dc:c8:ca:7b:a1:cb:46:73:6f:17:f6:59:
50:76:5f:14:e2:ef:60:d7:49:85:97:28:f5:32:e7:ab:d8:81:
64:64:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:53 2025 by rpki-client