Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier: CxjN76GIcLbrLZG3I2QqlrMwWTpXfdA342nhNOaww6w=
Subject key identifier: 01:C9:13:3B:3D:BF:80:75:42:1A:8F:82:45:50:1B:00:3A:87:E9:4C
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 019753B4E2733549E5B1C45A1A322DD0141D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 08:00:52 +0000
Manifest this update: Mon 09 Jun 2025 08:00:52 +0000
Manifest next update: Tue 10 Jun 2025 08:00:52 +0000
Files and hashes: 1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: gkkN82vS0MRnW5NnOZtZnurNlA5WNCgTL37+nTphd44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:e2:73:35:49:e5:b1:c4:5a:1a:32:2d:d0:14:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Jun 9 08:00:52 2025 GMT
Not After : Jun 10 08:00:52 2025 GMT
Subject: CN=01c9133b3dbf8075421a8f8245501b003a87e94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:e0:e5:d1:99:fe:9d:a5:f8:f3:4d:ed:5d:
eb:61:93:01:2d:64:43:10:9d:0f:20:03:32:8f:ac:
db:77:3c:c2:3e:fa:c6:3f:b0:cd:f4:79:bd:90:f8:
1b:62:5b:05:aa:c4:b3:4a:14:b6:6a:d3:f4:a1:0b:
31:b1:1d:18:2c:d5:41:20:0d:27:0c:62:06:60:b9:
69:c0:8a:53:67:7b:c0:2f:62:79:f6:b9:5c:04:c1:
ec:ca:cb:72:99:90:14:49:f8:da:c6:44:16:f3:26:
a0:53:48:fa:36:df:d1:49:33:9e:a0:2f:03:aa:f8:
f0:d8:de:58:71:4d:32:00:86:ee:d3:91:ff:c2:02:
f9:18:a2:da:52:98:88:1f:3c:2f:c6:ea:05:c4:62:
e7:b1:ca:b5:22:47:a4:97:57:aa:bd:65:da:0c:fb:
ea:37:68:df:1f:1f:80:91:22:08:fc:3b:95:74:59:
49:9a:ef:34:fa:e4:33:7e:54:58:55:a7:7d:2e:4e:
5d:e0:6b:b9:e0:2f:a8:76:d5:69:fb:a3:5b:53:53:
06:47:33:59:fb:f3:2b:7f:0f:20:4f:86:c5:a2:cc:
02:e5:36:d4:4d:d3:5c:97:01:c5:41:bd:9c:1f:54:
f2:51:5d:a8:27:ad:76:f9:94:de:ba:de:41:4a:20:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:13:3B:3D:BF:80:75:42:1A:8F:82:45:50:1B:00:3A:87:E9:4C
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:15:de:47:03:46:0f:ec:e7:f5:e1:4f:e1:4d:2c:c5:45:1a:
c4:ca:53:c5:fe:14:8b:23:54:e9:02:19:1b:63:62:bb:a1:b3:
6f:ce:11:dc:de:59:62:5f:66:e8:5b:e7:a1:5a:3c:10:64:65:
8d:a6:c6:eb:68:cf:5b:f9:a7:aa:03:ae:0f:51:5e:70:e6:39:
63:11:ea:ab:8d:18:52:5e:44:9d:77:19:fe:0e:e2:72:3f:53:
38:ab:ed:5f:92:1f:37:e6:77:5e:cd:00:0b:83:43:ce:60:54:
a4:ae:91:18:2f:00:ed:6a:a3:fa:a2:df:78:c0:fc:2c:de:1f:
b2:c7:7a:cd:ce:94:75:dd:db:cb:a5:69:ee:3b:c8:c0:01:72:
1c:df:f5:d6:7c:ad:a6:76:00:81:20:f7:59:5d:22:99:e3:ab:
f4:98:f4:42:36:76:a1:5b:89:55:ac:53:eb:bd:3a:b1:f7:0f:
6b:1e:47:bc:cd:2d:b9:b3:80:47:4d:31:d9:8a:e7:fd:d5:a9:
23:7c:1b:b8:50:b9:93:36:c1:20:cc:1e:d5:0b:69:98:f0:86:
c6:92:b4:92:ab:6f:a1:29:f5:68:1c:fc:e5:fb:8b:65:25:91:
3f:7c:a5:01:a8:cf:be:e9:1c:91:e3:21:68:55:d0:47:e8:30:
af:a0:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:22 2025 by rpki-client