Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: yHrMRxrvDuAwLL350o10L7S2winGFRLjZBeT46NDQJs=
Subject key identifier: A2:DD:E1:B6:E6:23:80:1F:31:3B:5D:4F:F0:78:15:D0:C4:86:A8:FA
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 01976BF47A27A06C5C6DC221F8044FE73BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 1033
Signing time: Sat 14 Jun 2025 01:01:13 +0000
Manifest this update: Sat 14 Jun 2025 01:01:13 +0000
Manifest next update: Sun 15 Jun 2025 01:01:13 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: 6bXKsfTPCSclK+1Fi0glI3sFV4PhOMaIUSkpnJq9neY=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7a:27:a0:6c:5c:6d:c2:21:f8:04:4f:e7:3b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jun 14 01:01:13 2025 GMT
Not After : Jun 15 01:01:13 2025 GMT
Subject: CN=a2dde1b6e623801f313b5d4ff07815d0c486a8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:0c:cd:0f:bd:e4:19:50:7e:fc:42:89:60:
9f:df:a7:b6:15:e1:d9:18:6c:d6:70:2e:18:91:28:
1d:52:a4:73:56:ba:f2:d4:1f:a9:43:03:1a:ad:4f:
1d:51:ee:50:14:92:09:67:46:46:9c:0f:92:08:a6:
51:90:61:e0:32:3e:ff:4e:0f:70:01:e5:89:e4:e7:
8b:88:37:60:7a:23:8c:43:7a:64:cd:90:88:c3:ee:
74:b5:78:3e:85:af:b3:14:30:de:95:9b:c5:cb:c4:
f8:d8:1d:fd:4d:59:be:3d:84:60:48:98:5a:b2:b8:
b2:5d:ce:14:e8:17:62:80:3a:c7:e3:4f:4d:68:54:
a4:e6:31:af:cd:5e:6e:d2:25:b3:ac:ad:a9:4d:23:
0b:48:cb:93:a6:aa:ab:8e:e8:a5:a3:59:9c:1d:08:
a5:97:e2:68:ad:92:04:48:4d:2c:cc:5b:7e:a3:e9:
62:52:16:64:9b:c9:76:1f:99:e3:a5:1d:05:37:87:
d1:cd:ad:4f:cc:ae:a9:17:0a:40:7d:2b:72:95:4b:
bf:f0:e1:37:f2:a1:c2:df:50:26:04:52:d8:97:3c:
05:e3:63:2d:0f:d2:5a:fa:51:c4:40:32:46:dc:0f:
b7:66:d0:4d:79:bc:54:37:46:17:87:a4:41:13:ec:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:E1:B6:E6:23:80:1F:31:3B:5D:4F:F0:78:15:D0:C4:86:A8:FA
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:dd:78:f8:8d:21:a5:49:ef:f4:c3:55:7c:d1:a1:31:53:
e3:ec:b9:16:74:28:76:c3:db:bc:8a:11:da:f9:b0:4b:f1:99:
99:ed:65:d5:c6:8e:cf:e4:2a:10:03:85:3b:1b:53:71:21:48:
a3:58:52:89:54:c1:6d:c6:1a:f7:5a:e0:f9:3d:96:c9:af:4d:
a7:63:bd:f9:6e:2c:85:12:95:57:5f:c5:ef:9a:13:19:0e:ce:
03:c4:78:08:8c:08:14:f9:ae:06:64:8a:f7:8d:ad:e7:15:e8:
0f:39:ed:b3:3a:1d:7e:48:be:dc:7b:10:d3:e9:fe:1a:09:c6:
67:f3:5c:ae:09:d9:2b:be:e8:99:4d:20:b1:2f:c4:52:18:7b:
8c:ca:39:b9:57:a0:7e:a1:13:dc:51:a9:45:fd:47:65:a8:ea:
d8:f3:11:13:8b:37:a7:0e:ff:4a:f9:48:c4:e1:03:02:c0:66:
3b:e5:4b:d8:60:66:48:f6:88:42:db:47:62:77:15:23:80:06:
ab:3c:db:a4:59:52:ad:f7:11:5e:fa:f4:74:c3:f2:f8:9a:0a:
46:ad:b8:2b:c0:9f:8a:43:e9:ad:d0:9a:0d:13:f9:eb:84:e0:
80:b4:72:f8:75:f8:11:e4:dd:7c:ea:b1:47:42:d3:1e:07:f8:
41:b3:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:56 2025 by rpki-client