Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: sj1b8CrwaoeGtttVy7OkuOzfjnhZd6YUHbqETdW1AuQ=
Subject key identifier: 45:86:6F:2F:F5:D9:43:FA:40:86:CE:1A:C9:5A:0E:34:20:33:06:2F
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019774C05E7041B49721C8121EBCBE266742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 15A2
Signing time: Sun 15 Jun 2025 18:00:53 +0000
Manifest this update: Sun 15 Jun 2025 18:00:53 +0000
Manifest next update: Mon 16 Jun 2025 18:00:53 +0000
Files and hashes: 1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=)
6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: ZWQtLIPRpSj1goDGQFnDRKY+ojrHLaqxi0E0t4iQ55o=)
7: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
8: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:5e:70:41:b4:97:21:c8:12:1e:bc:be:26:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jun 15 18:00:53 2025 GMT
Not After : Jun 16 18:00:53 2025 GMT
Subject: CN=45866f2ff5d943fa4086ce1ac95a0e342033062f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:3d:8b:0f:a5:e9:b2:da:76:75:c8:de:25:
54:1a:83:b9:76:3a:c6:73:c1:b7:d4:76:f9:9e:ea:
8d:bb:0c:72:79:2f:33:94:5b:d8:82:37:7f:f5:fd:
ff:b4:a6:fb:a4:5d:60:9c:2d:7a:1f:18:fd:2a:ff:
6c:c9:86:e7:ed:bf:07:5f:6c:c9:06:da:13:da:59:
3d:f3:24:62:56:5a:14:6d:e0:ef:a7:ce:c4:29:41:
6d:08:72:b1:2f:fe:43:93:a2:0f:bb:57:41:fe:3d:
5f:6f:5b:61:73:ad:cc:5f:91:75:21:2b:c4:ca:b8:
c3:4f:8f:89:4c:ed:5c:80:50:f4:3c:88:73:72:8c:
e3:61:8e:23:b5:4c:96:ab:9d:07:5b:6a:8f:5a:83:
cc:c7:47:46:43:07:28:dc:94:81:4f:fd:1b:c5:de:
99:5a:fb:89:29:50:19:48:8b:76:e0:89:25:78:10:
56:a2:35:81:42:02:c2:bd:ff:30:9a:55:85:3d:9d:
00:50:7e:b0:44:5b:6f:cb:ba:8d:63:e3:22:8e:17:
b7:f9:6f:89:5c:45:bf:60:c6:4d:c7:77:59:14:b9:
22:43:93:5e:da:03:1d:aa:75:79:78:5d:ae:0f:21:
cc:b6:50:5b:98:a4:83:66:2f:a6:2e:b4:0a:c6:d0:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:6F:2F:F5:D9:43:FA:40:86:CE:1A:C9:5A:0E:34:20:33:06:2F
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2b:df:5f:85:d7:8f:2f:45:3f:42:de:8d:62:ec:88:43:f1:
45:63:1b:83:d0:33:95:f6:f8:24:f6:fc:fb:e7:43:af:4a:d7:
9c:c2:68:5d:01:a3:f8:61:19:df:07:63:64:7b:8a:56:7b:32:
0f:44:fb:77:fc:43:1f:27:b0:65:87:8b:52:4d:82:9f:08:70:
97:90:32:f6:9b:ea:5a:ad:30:ff:c6:d9:41:91:9e:8c:2e:0e:
0e:7b:c7:eb:76:08:0d:82:96:18:b3:75:c5:3a:0b:6e:e9:d6:
fc:10:a9:5b:7e:c6:88:02:ec:38:b8:22:7d:06:cc:dd:a0:2a:
28:9d:df:44:3b:a0:e0:e8:60:02:a7:6a:fa:98:38:c2:bf:fa:
88:b4:c8:77:fd:1b:a6:d0:c8:f0:eb:dd:d4:ed:86:82:df:26:
a4:e8:ab:90:f6:26:8d:7a:b2:7a:d1:bc:2d:1a:95:80:30:7f:
a8:16:b3:3f:8d:67:e2:bb:56:47:e4:dc:08:65:32:89:98:8c:
a7:00:22:a0:f4:79:9b:6b:c9:6a:e6:fd:cc:ef:63:bf:25:3e:
6b:99:eb:01:c5:f8:3c:dc:dc:44:28:46:7d:4a:3f:bb:de:2f:
05:1e:64:be:48:2d:99:34:85:44:5c:0f:f2:e8:47:c5:9f:4f:
c7:40:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:57:00 2025 by rpki-client