Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: 3JE/ds+WK4fx27YhxDEVo7Us9L8QNoNAjAzx+kAjmOI=
Subject key identifier: D8:D1:C9:2C:5D:C4:15:00:F0:FF:52:D8:0B:E7:A3:95:72:D9:BC:2B
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019776AEBAFD0D2F7EE08108D3CBE9CFE216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 02A1
Signing time: Mon 16 Jun 2025 03:00:51 +0000
Manifest this update: Mon 16 Jun 2025 03:00:51 +0000
Manifest next update: Tue 17 Jun 2025 03:00:51 +0000
Files and hashes: 1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: jj+Vz/dMwhwpTepwyo/fIaIMd+rNIdiZ5/PwLe0X3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:ba:fd:0d:2f:7e:e0:81:08:d3:cb:e9:cf:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Jun 16 03:00:51 2025 GMT
Not After : Jun 17 03:00:51 2025 GMT
Subject: CN=d8d1c92c5dc41500f0ff52d80be7a39572d9bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:c5:a0:20:68:ba:9d:ae:cd:0e:a3:ed:63:
4a:aa:93:b7:cd:8e:77:d4:48:cb:8e:14:d3:9d:31:
20:85:2a:69:3f:de:eb:2b:2a:da:34:61:71:f2:c4:
00:1a:5c:a3:ea:21:f7:1c:c3:57:6b:18:f0:44:2d:
71:1b:7c:a6:57:19:03:7d:58:86:e9:3e:3b:e7:9e:
3d:b0:68:75:c2:29:58:4d:9b:be:31:e8:d6:28:1c:
39:c4:e9:ac:49:52:b6:51:fb:d2:83:00:a7:13:61:
a5:7f:ff:b4:08:90:8d:42:07:9f:f1:8c:e4:b5:fc:
2a:36:57:9a:52:43:85:2a:d6:66:24:46:41:3d:34:
f6:2f:51:29:7a:50:41:7e:3a:83:44:20:3e:53:80:
7d:db:32:f4:c7:43:4a:1a:12:fa:39:03:5b:36:e6:
ea:5a:5e:d8:53:68:41:96:70:a4:b7:aa:8b:05:86:
e3:ac:8d:eb:6e:a9:37:e7:dd:0a:c7:5c:6c:4a:d8:
13:6d:17:49:a2:81:5c:3c:c1:53:11:66:07:8a:36:
8b:61:d0:be:1e:73:eb:73:29:5f:87:ef:30:f4:58:
f3:10:38:dc:52:f2:b1:c8:58:31:38:25:8d:91:ca:
ec:13:b2:31:c8:ee:94:d8:aa:e6:d9:fa:0b:64:d6:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:C9:2C:5D:C4:15:00:F0:FF:52:D8:0B:E7:A3:95:72:D9:BC:2B
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:45:28:e0:0a:03:d3:23:b7:ed:a1:c4:f4:bd:a4:80:ee:
4c:b0:2b:5c:8c:33:21:83:8f:7d:b3:76:29:32:7b:86:d7:2f:
29:6a:4a:e4:6e:a4:d8:c0:87:dc:c9:6d:76:aa:c2:05:21:17:
57:04:e7:44:f3:b1:61:50:74:97:01:49:47:08:f5:c6:ec:71:
e2:5c:ed:20:25:c7:17:3f:13:a0:fe:39:f9:5b:5b:a5:4e:33:
f7:cc:60:6f:e5:e6:9c:7d:6e:48:8c:fc:38:31:67:bc:7b:30:
6c:fc:86:20:ad:c6:28:3a:11:03:33:76:94:b7:1f:66:19:ea:
9a:8b:ee:67:54:03:7e:0e:95:fc:d0:93:55:48:f7:3b:a0:86:
06:74:f3:2e:2b:6b:9b:9f:fb:5d:87:46:6d:e7:2d:57:67:8e:
04:45:15:84:d9:eb:ee:e1:d3:ac:15:31:99:43:20:5a:f6:8e:
fb:ab:07:6a:fd:3f:6b:04:29:e8:8d:7e:dc:52:db:1a:94:d4:
dd:e4:5d:ff:b0:07:c6:a5:f7:a7:6a:ea:2d:21:77:32:18:77:
37:e8:84:c3:b9:b2:da:e0:91:cc:1a:af:f5:83:84:13:e1:7d:
b5:df:ea:76:7f:3b:e9:79:a6:38:5e:09:c5:75:b1:43:03:ce:
f7:c0:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:22 2025 by rpki-client