Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json)
Hash identifier: 0DKpoocT4gznCgMmBahoJ19D0XxFzSUMKSHNMfqcGPY=
Subject key identifier: 22:1D:40:C7:70:05:7F:FC:B9:33:D9:34:9E:BE:64:8F:EB:73:B9:6F
Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Certificate serial: 019873E26F60C258539F1ADFE6CFC74C796D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
Manifest number: CB
Signing time: Mon 04 Aug 2025 07:01:16 +0000
Manifest this update: Mon 04 Aug 2025 07:01:16 +0000
Manifest next update: Tue 05 Aug 2025 07:01:16 +0000
Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: U18tjF7/BP35KN8GzRT51jAtSadtawnq6qkqtNcfPhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6f:60:c2:58:53:9f:1a:df:e6:cf:c7:4c:79:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Validity
Not Before: Aug 4 07:01:16 2025 GMT
Not After : Aug 5 07:01:16 2025 GMT
Subject: CN=221d40c770057ffcb933d9349ebe648feb73b96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:0d:fd:9c:12:9a:a7:4d:89:81:cb:d8:41:
51:d0:56:42:5c:0e:7d:81:42:44:f3:28:32:4c:fb:
4b:51:e5:f6:80:8e:df:d5:32:5e:34:8d:ab:dc:96:
5e:b9:48:d8:63:5e:33:e8:90:64:d2:49:88:88:2f:
3c:a5:9f:52:18:61:b5:96:26:a1:48:62:f3:35:5a:
1c:9c:6d:3c:d2:f7:0b:6d:62:ad:67:58:22:f5:2b:
6e:fe:0d:83:ae:dd:a8:c3:cb:1a:b3:9f:9c:66:87:
de:b3:c6:7a:9e:22:c3:10:0d:02:22:1e:f7:2f:3e:
ed:b4:c2:8b:0c:4b:5c:ca:51:43:30:f2:78:72:0d:
47:74:87:be:6c:7b:a8:27:b5:44:14:e1:3c:4e:37:
89:02:e3:23:c6:a3:b7:b6:75:41:81:b3:71:0e:c3:
8f:e3:c6:9b:78:4b:70:17:76:43:1b:73:3d:eb:f5:
63:1d:38:20:0d:a1:63:2e:c1:51:bd:15:a7:db:4a:
58:d8:05:4a:62:e7:ef:7d:e5:5c:04:20:43:6d:cc:
e1:30:d9:76:5c:b3:0d:7f:98:71:9b:e3:4c:ac:16:
1f:82:cd:a7:65:81:64:45:8c:03:97:a4:06:c9:d3:
38:8c:f0:02:11:0e:aa:73:52:6f:7a:af:30:3e:64:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:40:C7:70:05:7F:FC:B9:33:D9:34:9E:BE:64:8F:EB:73:B9:6F
X509v3 Authority Key Identifier:
keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:53:b7:27:2b:fb:5e:4e:f8:c7:a6:cc:c8:7f:85:ae:10:
1f:42:f7:98:30:82:db:71:19:de:4f:9e:ad:d0:5e:90:eb:38:
7b:3e:f3:e8:16:95:12:4a:bd:d7:94:2a:d6:55:f5:ee:d4:bc:
9c:11:d5:00:60:6d:36:65:c3:41:28:53:cc:96:9d:05:0c:99:
2f:41:71:b5:f1:af:01:34:0f:a4:22:81:42:03:a7:65:e0:59:
5b:4e:b0:60:4c:0d:da:f9:e3:ba:e9:a3:d5:8b:da:da:53:88:
0b:84:c9:5f:5a:60:2e:43:0b:5e:4d:a7:ab:d8:0e:c2:43:9f:
2e:b7:37:cb:dc:d2:e5:6f:e3:da:cd:4e:15:f3:0e:ae:fe:33:
98:1d:3a:2f:ec:b4:96:d9:89:a3:90:c7:63:af:71:57:49:94:
4d:c6:f8:aa:bd:59:4c:f8:b8:35:65:04:0e:ba:f7:11:12:9a:
1c:30:0d:af:09:4b:b8:09:b2:e1:1f:28:f4:41:a1:f5:61:d9:
05:ad:22:4d:c5:c5:93:a5:06:cd:1b:9e:ef:cb:65:92:f7:91:
49:e6:4f:32:11:fc:76:7b:e8:1f:5f:79:3a:fb:29:7b:33:53:
15:07:42:a8:35:26:c7:a3:62:ed:1a:6a:79:fc:87:55:0d:2b:
9c:a8:6e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4m9gwlhTnxrf5s/HTHltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzhkYWNlOTcwODVjYjBiNzdkMDM5YmQwZGZmZTU2YzI2
OGEyNWMwHhcNMjUwODA0MDcwMTE2WhcNMjUwODA1MDcwMTE2WjAzMTEwLwYDVQQD
EygyMjFkNDBjNzcwMDU3ZmZjYjkzM2Q5MzQ5ZWJlNjQ4ZmViNzNiOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlcN/ZwSmqdNiYHL2EFR0FZCXA59
gUJE8ygyTPtLUeX2gI7f1TJeNI2r3JZeuUjYY14z6JBk0kmIiC88pZ9SGGG1liah
SGLzNVocnG080vcLbWKtZ1gi9Stu/g2Drt2ow8sas5+cZofes8Z6niLDEA0CIh73
Lz7ttMKLDEtcylFDMPJ4cg1HdIe+bHuoJ7VEFOE8TjeJAuMjxqO3tnVBgbNxDsOP
48abeEtwF3ZDG3M96/VjHTggDaFjLsFRvRWn20pY2AVKYufvfeVcBCBDbczhMNl2
XLMNf5hxm+NMrBYfgs2nZYFkRYwDl6QGydM4jPACEQ6qc1Jveq8wPmT8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIdQMdwBX/8uTPZNJ6+ZI/rc7lvMB8GA1UdIwQY
MBaAFBA42s6XCFywt30Dm9Df/lbCaKJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMt
OWE5YmMxZWE2ZTNmLzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMtOWE5YmMxZWE2ZTNm
LzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6hTtycr
+15O+MemzMh/ha4QH0L3mDCC23EZ3k+erdBekOs4ez7z6BaVEkq915Qq1lX17tS8
nBHVAGBtNmXDQShTzJadBQyZL0FxtfGvATQPpCKBQgOnZeBZW06wYEwN2vnjuumj
1Yva2lOIC4TJX1pgLkMLXk2nq9gOwkOfLrc3y9zS5W/j2s1OFfMOrv4zmB06L+y0
ltmJo5DHY69xV0mUTcb4qr1ZTPi4NWUEDrr3ERKaHDANrwlLuAmy4R8o9EGh9WHZ
Ba0iTcXFk6UGzRue78tlkveRSeZPMhH8dnvoH195OvspezNTFQdCqDUmx6Ni7Rpq
efyHVQ0rnKhuZg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:24 2025 by rpki-client