Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier: 73zFOlYS08B97xkehR5ta5Yn0i268ciRcpSvSRxlARo=
Subject key identifier: 52:BD:5E:08:FD:AE:68:5F:8E:2C:8A:60:9C:84:DD:A4:B3:F3:46:9C
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial: 019787A2473A291F0B78EF9EBCA55662D862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number: 1302
Signing time: Thu 19 Jun 2025 10:00:48 +0000
Manifest this update: Thu 19 Jun 2025 10:00:48 +0000
Manifest next update: Fri 20 Jun 2025 10:00:48 +0000
Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: E1ON5FrqZ2gggvLEXsFzyXSAMobAtubQ33YqK8BA4lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:47:3a:29:1f:0b:78:ef:9e:bc:a5:56:62:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Validity
Not Before: Jun 19 10:00:48 2025 GMT
Not After : Jun 20 10:00:48 2025 GMT
Subject: CN=52bd5e08fdae685f8e2c8a609c84dda4b3f3469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:79:79:47:33:37:1d:f3:ef:06:1d:13:7e:
bd:7d:2b:bf:f9:33:e2:f6:de:ba:f8:76:61:2b:e6:
28:a8:77:87:8e:71:9a:ef:cb:3c:2a:cd:fc:86:4d:
8d:16:95:ff:39:c0:39:6a:7d:0a:b6:4a:c8:f4:39:
bc:11:d3:5c:3b:8b:11:8f:81:36:f6:0b:37:ab:d1:
ae:22:fa:f4:25:b2:a8:07:19:ee:4a:78:03:e3:ca:
62:2b:6e:2c:33:84:3e:72:b4:9d:5c:40:97:26:1d:
e9:96:91:7c:5a:99:32:19:95:24:37:40:57:bc:ba:
c9:d7:2d:ed:d8:f9:cc:0a:c2:57:f4:cc:4b:d6:49:
1e:88:cf:5d:41:d7:36:d4:e4:ce:1d:66:1b:b5:dc:
6a:fe:64:88:86:cf:d4:d4:d9:9e:99:53:7b:f2:f7:
94:77:0d:05:84:5d:9c:9e:9b:60:6a:47:3e:65:f9:
a5:e4:9c:08:29:41:d3:d9:3c:67:27:26:3b:7c:78:
50:bd:6a:1a:b6:fa:42:ba:03:8f:b1:f1:4e:ae:6c:
22:a8:9e:03:f2:31:ab:08:c3:da:47:69:29:fa:7e:
a8:fe:58:88:10:4c:4f:b5:44:66:e2:10:f1:6c:e1:
54:e9:80:67:fa:ad:f0:54:3a:29:a4:4b:50:bd:7a:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:5E:08:FD:AE:68:5F:8E:2C:8A:60:9C:84:DD:A4:B3:F3:46:9C
X509v3 Authority Key Identifier:
keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:c9:80:c0:a9:83:69:c3:23:7b:b3:c4:03:55:4d:21:cd:
eb:8b:ac:79:c3:58:79:85:f0:8f:96:27:55:97:eb:9e:20:06:
8a:f9:85:7a:c2:9e:cd:22:3b:a4:e4:fc:6c:1c:93:49:d8:e4:
ed:4f:33:90:f8:ca:19:91:67:2b:61:e8:69:58:e4:cb:95:b2:
c9:65:71:4d:4d:9b:e9:c1:78:de:e5:4e:27:a7:ff:a1:97:e4:
13:d6:7c:63:b6:9e:67:d2:5e:f0:8c:81:1e:fc:d0:e5:f6:21:
16:12:c5:28:43:57:55:05:95:0a:43:56:e2:19:6d:45:0b:32:
55:c5:94:71:c4:20:8d:26:15:ba:50:62:26:3f:e0:96:39:df:
6c:39:9e:5e:71:56:90:87:45:95:64:2f:4e:ce:9f:d1:3d:78:
43:f2:9d:99:5a:f0:a7:26:6f:8e:8c:42:09:3d:94:cf:93:1b:
35:ba:a9:45:4c:67:82:f8:1d:06:48:45:f8:56:30:e9:3a:05:
69:90:7a:bc:77:af:f1:2b:2c:e2:17:2d:91:c2:5b:2f:b9:89:
9a:c8:01:ff:45:02:58:02:3d:18:4b:90:85:15:9d:88:2b:d0:
ee:9f:92:be:70:5d:3b:75:59:03:99:86:48:ca:22:6f:12:c6:
f1:66:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:26:09 2025 by rpki-client