Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
File: EDJFGiYZdmtLC2LY8cMCkyblwWc.mft (raw, json)
Hash identifier: BTXYoOCPLo9E++xD3hUBShXEucLnOzScyjTRQ5vE828=
Subject key identifier: AF:D7:D1:3E:C9:B9:52:5E:FE:4D:71:E1:4B:8F:77:FF:A3:7C:E6:6E
Authority key identifier: 10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
Certificate issuer: /CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Certificate serial: 01977677784E478CA3D70D533F9642E6AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
Manifest number: 0108
Signing time: Mon 16 Jun 2025 02:00:30 +0000
Manifest this update: Mon 16 Jun 2025 02:00:30 +0000
Manifest next update: Tue 17 Jun 2025 02:00:30 +0000
Files and hashes: 1: EDJFGiYZdmtLC2LY8cMCkyblwWc.crl (hash: v6OdMlZjCL8wAcWlq0oWOJWPrX70FH9or8mwEpBJlJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:78:4e:47:8c:a3:d7:0d:53:3f:96:42:e6:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Validity
Not Before: Jun 16 02:00:30 2025 GMT
Not After : Jun 17 02:00:30 2025 GMT
Subject: CN=afd7d13ec9b9525efe4d71e14b8f77ffa37ce66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:dd:4f:71:3c:f2:23:c8:c3:28:0d:16:28:
a4:0a:6f:d3:dc:d9:58:bc:10:cd:47:48:5c:25:dc:
14:e2:57:dc:ec:db:92:fc:ac:04:1c:39:43:fa:45:
e9:70:16:59:47:9a:0f:ac:f4:1c:50:aa:e5:0f:cf:
43:ae:e1:5f:61:fb:ce:9b:78:ec:23:77:1c:31:96:
ef:97:1f:48:e6:c8:f5:92:a3:c8:b4:d9:65:3f:25:
83:fe:0c:10:ff:fe:a0:b0:e1:20:9e:26:fd:7c:a5:
1c:58:33:53:21:ad:81:e4:1a:57:81:da:70:fe:92:
d6:97:ff:95:78:6e:31:c0:56:a0:7a:9b:a6:e2:83:
67:ea:17:ce:ac:82:a7:43:60:96:4a:ab:a7:84:f1:
ac:b8:8e:7f:b6:b4:67:81:88:cf:b9:f0:4f:6f:c0:
64:69:16:0b:4c:af:36:70:a0:12:80:7e:f9:c0:96:
41:34:c8:90:a5:97:87:f6:ef:52:e5:4d:bb:3b:6b:
c6:4a:28:38:de:aa:6b:94:22:f6:fb:c6:7f:0c:42:
2f:a2:36:6d:67:e5:4f:3e:e9:92:63:f4:bc:41:e1:
d5:4c:3a:a5:0c:3a:2e:5c:e4:fe:7b:51:92:44:ff:
0d:d2:e2:86:8b:0f:c2:1a:79:1f:95:63:9a:28:6d:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:D1:3E:C9:B9:52:5E:FE:4D:71:E1:4B:8F:77:FF:A3:7C:E6:6E
X509v3 Authority Key Identifier:
keyid:10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ef:2a:6c:c2:ab:89:94:ee:d6:03:42:c8:aa:c4:a8:91:ed:
19:e3:a8:a4:4c:a1:a3:6d:a0:ee:b8:f1:63:56:db:98:de:ad:
04:f3:0d:90:8a:6c:f3:d1:03:03:3b:d6:66:f2:c8:2c:a1:56:
dc:da:3c:a3:d6:7c:1a:fb:5f:b4:1b:f5:21:84:26:d8:c5:1d:
21:15:b0:a5:cd:1e:dc:e7:51:a3:54:c9:02:9a:a8:81:f6:30:
22:6c:92:66:d5:3b:52:d8:50:8a:6c:eb:b4:18:fd:01:4d:df:
e4:bd:3e:75:48:cb:12:75:29:13:44:83:2f:a5:2c:8f:e6:b5:
b0:52:2b:b4:07:de:90:cc:fe:4d:fe:bd:d7:a0:27:f2:de:a3:
70:81:ca:ff:ce:92:13:c9:ff:86:86:83:7b:e1:60:8b:10:3b:
4e:7e:4c:db:de:d2:26:76:65:79:27:1c:90:84:5e:15:4b:14:
90:37:c6:7b:b9:cb:74:e6:93:90:db:ee:77:95:2f:ee:35:f0:
97:e7:5e:dd:de:4e:d8:ec:45:52:14:3d:2f:e0:2c:6a:df:dc:
7f:f4:cf:f1:9c:69:10:ce:fe:b6:eb:93:3e:2e:a9:e5:0f:b6:
75:ac:14:b2:5b:d3:28:93:66:69:a5:21:c9:61:dc:99:60:1f:
71:40:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:55:03 2025 by rpki-client