Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: YzT/3C8EnCELrWLoZCnjuaUi/lQe301Sz/uDZHwE8g8=
Subject key identifier: 59:AA:DF:3C:10:E0:48:DB:1A:86:09:53:D6:95:54:F7:3A:E2:EE:1C
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 019896DC5A1240EBF11835FEA3D9D91EB76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 02:01:19 +0000
Manifest this update: Mon 11 Aug 2025 02:01:19 +0000
Manifest next update: Tue 12 Aug 2025 02:01:19 +0000
Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: DSJZ3inCPjPX+Kovoxac96/0pjFmsmBgFJtuWIyCFTQ=)
2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:5a:12:40:eb:f1:18:35:fe:a3:d9:d9:1e:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Aug 11 02:01:19 2025 GMT
Not After : Aug 12 02:01:19 2025 GMT
Subject: CN=59aadf3c10e048db1a860953d69554f73ae2ee1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:5f:81:ea:80:94:0e:ac:c2:dd:0f:ac:37:
5a:ca:f7:15:3e:95:57:12:b6:40:5c:a7:d5:db:78:
42:14:ec:3b:0f:1a:3a:9e:21:c4:19:20:75:4b:d0:
01:82:fa:99:ee:45:8c:81:27:c7:c5:be:65:28:04:
5d:a6:f9:06:8d:53:bc:7a:82:56:6f:ac:f5:7d:26:
1a:6e:df:ff:b6:9a:7d:7f:08:26:08:1c:b1:f3:fe:
23:a2:ed:b3:dd:1c:f3:d5:ec:0c:b8:f0:01:3d:72:
ec:fc:a3:cb:71:c8:65:ee:07:ef:69:b0:da:fe:fd:
91:d8:14:50:82:c3:2e:c4:d5:f7:97:2e:8e:39:1f:
78:e7:29:f8:b9:b7:a1:76:c0:35:fe:21:07:cd:21:
b1:88:93:f6:1b:5e:ab:75:d9:9e:e6:1b:0f:f5:68:
c3:5d:a9:96:65:83:3d:4c:e4:b4:3c:0a:3e:f9:9a:
60:bd:dc:c2:ce:01:f5:b6:c0:d2:c1:5a:23:3d:83:
c0:6c:e5:71:c0:a0:7a:ec:25:57:38:2d:22:2c:bc:
33:7d:f1:f4:d3:c8:02:31:1f:47:99:36:a9:63:19:
ed:25:59:1f:9f:bc:6d:ca:34:46:9a:d4:d7:e2:f6:
e7:25:e5:9e:26:08:0c:be:6e:72:a9:5d:96:ab:f6:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:DF:3C:10:E0:48:DB:1A:86:09:53:D6:95:54:F7:3A:E2:EE:1C
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7b:23:c2:40:77:25:0a:8e:97:d8:f5:14:48:bc:7f:87:61:
be:77:ff:1f:52:68:93:bd:e8:a4:5d:c4:6e:3d:ac:e1:f2:2b:
91:35:8e:ba:69:44:64:bc:93:7a:39:76:62:d7:7b:cd:98:bd:
94:07:39:12:a9:a0:06:f8:ed:7f:5b:f4:11:3e:5e:71:c9:61:
8c:38:52:23:c9:df:14:00:43:30:20:9e:52:38:31:80:bb:60:
49:61:36:02:14:54:c9:b1:a9:38:90:f0:a5:ed:48:9a:e2:90:
33:c5:f3:de:c9:97:71:f8:5e:51:ff:62:c3:04:53:56:2f:55:
fa:bb:ab:7e:a5:2c:0f:cb:b1:a3:21:be:49:a7:53:27:cc:34:
24:1a:40:8c:4e:19:48:a8:8e:2b:27:12:55:df:27:ac:9a:72:
d2:59:33:a5:0b:08:e5:f9:2e:1e:f3:3d:6f:e8:d3:f9:2c:17:
49:1c:b7:9b:ea:15:74:21:6d:06:3c:cf:69:d3:6f:a1:c4:79:
d7:d2:ca:41:fa:1f:55:ca:fe:7b:cb:17:dd:41:61:53:a9:0f:
96:b2:01:ff:f2:8d:b0:10:56:d1:0a:85:6b:4e:bf:95:3f:8d:
69:cb:a5:d4:8a:9a:95:36:e4:49:af:9f:0e:be:97:79:7a:86:
0b:0e:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:02 2025 by rpki-client