Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: M3kPewwguO8tlIQ32mVPM9r4tCS+qTHTeAjSgboUAYs=
Subject key identifier: 39:E7:0A:56:8D:E6:64:57:15:83:15:4D:FB:60:ED:93:40:34:2D:28
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 0197696195A1D97D2999C88216093612FA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 15AE
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (hash: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=)
2: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: 4btStK/gyK722CEJkBSPMNrokI2iZAp7FZauXxzgB3w=)
3: iCZ5LkRRabrQM8eb0h1397FNbPc.roa (hash: /PXtPb3g/8dNDvzzTJMTXsHm+K21xBEsZZ9tlSPaX0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:95:a1:d9:7d:29:99:c8:82:16:09:36:12:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=39e70a568de664571583154dfb60ed9340342d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:05:67:57:d1:f6:7f:e5:52:7e:2e:55:49:
ea:2d:79:91:82:08:81:a0:e8:e0:26:6a:a2:3d:21:
df:61:30:de:1f:3e:4d:00:2f:c7:e5:27:97:33:ca:
0e:02:f6:87:68:e0:b1:46:e0:c0:83:e2:e4:81:10:
c8:74:1f:99:33:79:42:5d:5c:33:5f:82:3b:e5:6e:
74:32:5f:1a:55:f9:0c:60:34:1a:3c:73:6f:61:7c:
d8:d3:15:5d:ab:20:41:9a:58:ae:65:48:bc:e4:c1:
b6:8f:50:dd:5a:f2:a7:97:13:14:9a:89:5a:c1:28:
6a:16:64:53:d0:be:4f:3a:e7:4b:f8:b9:ee:af:af:
fd:2f:1d:28:55:c1:47:82:67:e6:59:b0:58:79:bb:
82:92:7c:0a:1d:ed:94:2c:b7:5b:32:9d:65:57:f6:
a8:41:6f:78:89:55:06:06:2c:65:56:18:de:a4:c5:
76:d1:75:4e:4f:b2:77:17:16:96:b3:1b:49:a4:2a:
b4:a1:0e:5e:4d:75:a3:a0:e1:2d:85:8f:d0:57:bf:
eb:5a:68:30:fa:f0:5d:5c:9f:a1:f9:3a:3e:62:50:
14:d4:4c:f4:49:2f:6d:ac:6a:e5:8d:90:15:4b:cf:
78:35:43:0e:0b:64:5a:28:63:52:e0:d3:fb:5e:1d:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E7:0A:56:8D:E6:64:57:15:83:15:4D:FB:60:ED:93:40:34:2D:28
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:92:1a:43:63:55:fc:15:9c:5d:eb:21:c8:8f:1f:a5:c0:95:
56:9a:c1:4c:f7:8f:52:b1:e6:6c:f9:63:2a:07:e7:74:3f:13:
a8:97:62:40:0a:47:0d:ec:65:b7:8b:d5:b0:75:a9:13:d6:6b:
56:04:67:a8:2f:ae:aa:8c:bf:6e:36:e8:8a:a1:ba:61:a7:f1:
0d:42:6a:07:a8:95:7b:46:8e:50:bd:d4:7d:00:8a:a3:61:14:
60:46:37:ff:94:82:4a:08:aa:d3:4b:4c:50:1d:d4:53:9c:ca:
cb:01:b5:84:65:bc:2b:d0:4a:fa:b0:d7:04:35:97:ae:86:e3:
5f:08:2d:98:ae:75:7c:e4:78:ad:aa:0e:b8:8f:b5:82:3c:b6:
53:f8:78:10:8e:7b:9d:e1:83:dd:62:65:6f:30:8b:db:d6:7a:
e7:b6:4d:93:6b:d8:de:af:8a:d3:28:42:c1:48:58:2b:f9:fb:
eb:3f:bc:f5:b1:21:d6:96:cf:30:6e:3e:fc:27:ba:00:d5:bc:
24:2a:2b:57:78:62:1e:6c:7f:df:45:77:bc:93:33:ea:c8:d8:
bc:f5:57:20:06:cc:82:07:f5:85:64:8d:fc:19:8b:5e:c4:26:
9c:cc:10:80:1c:08:b4:2f:54:ad:45:a9:38:cc:7c:58:a6:08:
2a:7c:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:05:03 2025 by rpki-client