Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: nWaGg1dLwgq0Scbty9pC6tXmcTMc/69b3AL0ltjy/yM=
Subject key identifier: 26:8F:2F:01:DF:26:BA:2D:35:B1:1F:ED:A5:F2:01:05:CC:AE:5E:4B
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01978A6C0E61F9740FB064CE1DBF4F8D6BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 23:00:26 +0000
Manifest this update: Thu 19 Jun 2025 23:00:26 +0000
Manifest next update: Fri 20 Jun 2025 23:00:26 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: vZ5ICmHInFtLtAAWWvnN/9tphjD7o+LElO4UG9k4Dcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:6c:0e:61:f9:74:0f:b0:64:ce:1d:bf:4f:8d:6b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Jun 19 23:00:26 2025 GMT
Not After : Jun 20 23:00:26 2025 GMT
Subject: CN=268f2f01df26ba2d35b11feda5f20105ccae5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:72:7c:57:4d:86:66:78:0a:2d:fa:96:dd:
dc:92:54:13:2a:0f:1e:62:51:46:35:a0:0d:8f:8e:
1a:bc:04:97:04:68:98:4c:5c:96:b3:c9:19:ec:06:
06:b3:2f:2a:f5:0f:91:35:62:6f:32:f1:7b:fa:06:
ba:fd:f2:c2:db:fd:4b:6d:ee:43:52:4d:ab:23:35:
a1:fb:d1:3a:6c:44:61:18:12:93:2b:60:f2:fd:d9:
ac:cd:a1:b3:54:ca:26:fb:35:c7:fd:a8:55:9d:50:
77:e7:29:21:03:ba:9a:b9:6d:73:80:c2:63:b4:b8:
8c:ce:8b:94:c4:68:d3:cf:e8:07:8d:2e:6a:93:28:
f4:ff:35:72:de:21:7e:4e:f1:c3:7f:1c:b7:b8:01:
e5:a1:70:87:5e:ec:f8:ae:fa:16:e3:9a:1e:99:5b:
0b:9f:85:6d:cd:f0:f2:06:74:f7:13:93:9c:ae:0e:
1f:85:28:51:11:ca:e1:91:a6:ba:c0:93:a7:0a:6a:
0c:bc:5c:f3:93:89:2b:d0:b9:43:1c:40:2e:21:12:
d4:d1:2a:31:11:ab:2b:a9:00:53:ff:99:1f:73:24:
02:4e:ad:5a:68:27:65:47:e2:d3:3d:fc:1e:59:36:
88:d5:9b:b6:2e:8d:9d:ab:27:d2:8e:ec:54:e8:97:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:2F:01:DF:26:BA:2D:35:B1:1F:ED:A5:F2:01:05:CC:AE:5E:4B
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:fa:98:b9:c7:2b:81:0e:fe:fe:20:93:59:9f:77:87:de:
80:4d:69:5b:0a:c3:20:11:db:77:9c:ad:d1:09:ef:43:d7:63:
8a:d7:60:53:6e:8c:f5:9d:2d:2e:c8:09:b8:ce:da:50:b5:de:
03:8a:d4:eb:92:8a:3e:eb:7d:5f:1c:d1:23:99:c6:04:6d:27:
e8:1a:f3:50:fb:6a:e1:60:4d:1b:10:a3:4c:3a:84:02:3b:c1:
5e:f8:5b:bf:1e:65:34:f0:c9:e1:ad:e4:c3:f0:93:b8:95:20:
98:4a:99:57:d9:fb:94:58:e6:25:33:7d:79:b1:04:51:e7:65:
41:c8:8a:08:e4:88:93:e6:51:a8:cf:6d:db:d8:80:9b:1a:e2:
01:1d:13:b1:04:30:5e:89:8e:2b:ab:39:ff:4c:fd:6e:50:5e:
d8:65:3b:4a:57:7a:19:48:92:aa:a8:2c:a5:7a:b5:ff:a7:41:
70:fe:9e:9b:50:06:4b:7f:95:c9:a9:c0:5e:50:3c:13:91:30:
8a:bb:93:0f:90:e9:55:83:29:98:c2:32:f7:df:75:2f:c3:71:
5b:5d:07:59:24:10:a2:12:5f:6a:68:39:a4:21:46:a3:f3:af:
88:78:0f:1e:91:c1:c7:45:c1:d2:dc:63:e8:71:f7:55:47:02:
9e:4f:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:25:43 2025 by rpki-client