Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: BJfIfnsH+IlLc9Lkfw18YjvPdYfetK9gAJ/1b2+qN+Q=
Subject key identifier: 8D:89:05:9B:A5:B1:71:3B:F1:6D:DC:8B:EA:E9:AE:96:D2:A7:7A:88
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01976C2AEF8E8BA54FC213BE5A55FA3981F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:42 +0000
Manifest this update: Sat 14 Jun 2025 02:00:42 +0000
Manifest next update: Sun 15 Jun 2025 02:00:42 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: m3y9+rfSPMTM81leje6uDrBOZouFHLEDCp4AyllJNEk=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ef:8e:8b:a5:4f:c2:13:be:5a:55:fa:39:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jun 14 02:00:42 2025 GMT
Not After : Jun 15 02:00:42 2025 GMT
Subject: CN=8d89059ba5b1713bf16ddc8beae9ae96d2a77a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:4a:fa:f7:ea:54:b9:41:be:ee:c6:99:a5:
5a:7d:d4:29:69:db:63:5d:eb:96:89:60:63:a3:62:
b5:48:5b:9f:65:d0:86:a3:56:93:a6:c5:08:0a:d0:
8e:0a:7f:22:70:86:86:e7:53:a4:47:82:c7:36:eb:
15:14:a2:29:7b:e8:04:b9:ee:aa:58:30:20:6e:ca:
8c:62:05:cd:df:b9:3e:d8:07:ce:cb:aa:26:ed:ad:
6a:86:d4:bb:f1:af:77:4e:ee:d6:d5:7e:ce:b7:dd:
06:c8:50:86:a2:d8:dd:0e:a4:8f:63:1b:3d:5f:ac:
2a:f0:b7:ce:ae:7e:8c:cd:58:51:b2:d1:64:a1:5e:
24:0d:55:1a:91:49:02:63:2a:70:d7:0a:30:b7:1c:
41:80:3a:de:37:78:cb:47:5d:93:df:2f:21:09:2f:
b6:6b:ef:47:f9:2e:d3:35:d3:0e:f6:f6:bf:0a:b4:
54:a5:51:63:88:cb:ce:b8:0c:91:78:f9:f7:76:db:
36:b4:33:80:85:0f:c9:b8:dc:57:68:cf:1e:05:73:
16:14:f6:13:ee:1f:54:76:b3:7a:ff:8e:0a:33:a1:
c4:cc:d9:f3:9a:0c:00:9e:63:43:95:5d:c3:87:60:
20:cc:67:cf:21:8f:a4:87:2b:52:f1:c0:21:53:61:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:05:9B:A5:B1:71:3B:F1:6D:DC:8B:EA:E9:AE:96:D2:A7:7A:88
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ad:77:71:71:e4:50:81:bb:40:05:ca:83:c4:2f:cb:15:01:
71:9f:14:1c:91:38:7f:ca:8f:53:3d:79:0e:19:6e:90:3e:83:
51:2a:60:48:82:cb:db:5b:ec:99:77:95:f6:0d:98:ec:3e:dc:
47:b3:ee:8d:28:80:d3:f5:19:63:2c:c6:a4:f7:c7:19:d2:f9:
71:f5:7e:88:cc:70:88:a1:00:14:8a:0b:8b:b3:73:7d:5c:70:
54:16:c8:1f:c3:62:e9:8e:53:60:55:bc:68:56:35:06:6a:b0:
4a:51:ef:62:cb:2a:33:35:9c:78:bb:2e:97:76:2d:43:94:a6:
be:f7:84:40:15:9a:f9:07:b9:f3:32:cf:6b:9a:3f:03:1c:40:
4f:b5:19:cc:b2:0a:89:43:b8:94:d8:90:e6:08:5c:95:27:91:
cc:76:97:10:83:d4:28:e6:b5:e5:b7:ab:88:5f:47:16:a3:c3:
7c:aa:86:df:67:c6:65:95:f3:72:2d:f3:9d:88:20:65:4a:09:
ef:0b:ea:1b:d3:67:78:c3:7d:f7:e8:74:bb:5c:59:60:a3:2d:
e9:ab:68:02:10:ab:4f:03:7b:78:fa:1d:97:0e:9a:2c:03:c6:
11:be:5e:28:fb:aa:8c:34:e3:89:b5:8a:1e:95:be:d6:da:9f:
75:37:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:22 2025 by rpki-client