Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: icy0zv3HSG0qN7LoDA6eWy9vLR4eQMjdWuL3lPtNbKI=
Subject key identifier: 33:DF:59:54:42:68:D0:05:60:CC:F6:6C:B8:B9:D7:ED:6E:AE:76:0A
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019769CF2F12D76EA36DB8713668C84524D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:01:15 +0000
Manifest this update: Fri 13 Jun 2025 15:01:15 +0000
Manifest next update: Sat 14 Jun 2025 15:01:15 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: 3VeWJal0JTW0lF8xaolSsnLdMmitTKO5CIixRTsX8Lk=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:2f:12:d7:6e:a3:6d:b8:71:36:68:c8:45:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jun 13 15:01:15 2025 GMT
Not After : Jun 14 15:01:15 2025 GMT
Subject: CN=33df59544268d00560ccf66cb8b9d7ed6eae760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:46:2d:c4:09:e5:a7:8f:c3:35:9f:03:29:
87:28:d1:44:03:02:14:c1:ad:30:eb:6e:a4:5d:80:
7e:95:41:27:cf:0e:7c:7c:ec:6d:05:d9:8a:0a:ab:
a9:2b:68:76:66:a6:90:42:4c:29:2c:65:16:b6:78:
b1:5b:07:d6:6b:bd:7d:87:1e:d8:d7:c8:d1:6e:48:
83:29:16:86:1c:90:1a:59:1c:ad:43:96:7e:9a:a6:
18:a4:05:48:e6:db:14:29:5d:d3:22:55:c3:2a:52:
72:ae:c5:1e:73:f0:f8:24:4e:ec:bd:6d:03:93:7b:
1f:4b:08:9c:62:3d:60:14:77:03:f3:ea:5d:9c:08:
31:b0:16:67:e3:f5:d0:ae:b0:7d:c9:34:4b:16:d4:
ca:16:95:51:97:78:77:7c:27:64:97:12:1c:56:b9:
4a:ee:4f:0a:43:dc:87:97:a9:0a:10:50:3f:19:d1:
2d:af:3b:d7:19:9b:07:17:53:5f:b3:f3:51:38:db:
40:10:d6:34:09:d2:a0:97:6a:6e:55:57:a3:57:69:
40:c2:05:21:f5:47:fc:8d:f8:7e:09:a8:8d:b5:22:
78:a5:12:75:16:5e:87:3a:6f:28:33:04:8c:93:1d:
f8:50:7a:a0:92:5c:1f:4a:dd:f2:6a:92:02:9d:e9:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:59:54:42:68:D0:05:60:CC:F6:6C:B8:B9:D7:ED:6E:AE:76:0A
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:2e:fb:7d:ce:d3:43:41:5e:0e:94:f9:b0:58:ab:b7:97:
01:2b:82:34:c6:ee:56:20:cd:36:b0:76:67:50:98:b0:41:a1:
12:99:77:47:aa:b9:f3:93:0f:0a:d5:2c:fd:9c:8c:b7:c7:ce:
fa:7f:ec:c4:09:c8:5d:92:c2:57:f5:b2:54:30:e5:dd:30:c9:
71:54:51:1d:5e:f1:79:c1:6e:5c:5b:0f:8f:f0:3a:66:3f:1e:
88:2f:58:42:1b:0f:49:23:50:e2:6f:e4:2b:fd:6b:b4:49:9e:
b0:f3:8f:f7:07:4d:c4:c4:06:3a:fb:4c:52:23:86:f0:bf:9c:
62:3f:c0:c2:56:8c:dd:9b:f3:13:69:87:92:25:6d:17:51:aa:
6f:5a:f7:3b:32:f7:b5:2c:4c:7d:a9:0a:96:6e:73:34:dc:ec:
ef:2e:9b:46:91:ab:81:14:02:62:30:fc:52:40:60:c4:2a:5f:
ab:8d:ec:a3:9b:65:72:d4:1e:22:70:21:08:54:b3:c6:a3:3e:
98:53:6e:70:78:2e:fb:d9:3f:61:b6:e6:e6:27:b8:a3:56:84:
c7:21:b9:26:da:4e:1d:6c:ff:26:fc:b9:83:a7:5f:a7:0a:e4:
08:5a:8d:3c:f4:ee:ad:0e:9a:0d:55:04:b2:95:33:b8:3c:e2:
2f:6a:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:13 2025 by rpki-client