Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: vKerEGs+hvNlCX0lpo/ci6vpgtK/ipAXuXMTUmNnTDY=
Subject key identifier: FF:24:EB:9C:25:BB:81:8F:3E:D6:19:79:1A:5D:A8:BC:C4:6A:7E:90
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 01976961A0FA31F3A2D2C39804633B5E917D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 1005
Signing time: Fri 13 Jun 2025 13:01:35 +0000
Manifest this update: Fri 13 Jun 2025 13:01:35 +0000
Manifest next update: Sat 14 Jun 2025 13:01:35 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: d2ChPSuUx+VLvDU0p3meZi/cr6+Qg9s2UusyrzgtD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a0:fa:31:f3:a2:d2:c3:98:04:63:3b:5e:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Jun 13 13:01:35 2025 GMT
Not After : Jun 14 13:01:35 2025 GMT
Subject: CN=ff24eb9c25bb818f3ed619791a5da8bcc46a7e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:5f:d5:f6:a0:69:d7:aa:51:f7:11:0a:c7:
17:0d:9d:d8:61:5b:58:0f:b8:d1:d1:21:d4:47:8e:
57:0f:01:77:05:1f:f5:de:91:68:3e:71:fe:22:90:
b3:c1:51:2d:9e:89:74:29:96:2b:8e:76:e1:04:e7:
80:5c:d5:70:08:0c:4d:6b:4a:45:58:f6:c3:48:77:
c6:02:0a:92:f5:b8:f0:52:b0:ed:3e:fe:55:40:ab:
97:1c:9f:b8:0c:dd:ad:3e:76:1f:14:64:ff:b1:27:
b3:85:90:94:a9:90:33:1f:c5:4b:dd:85:60:c1:98:
d5:41:ae:59:00:13:75:2a:4c:53:e5:90:ec:11:98:
84:3c:0b:a4:8d:0c:68:5b:3d:71:00:8e:d3:18:c1:
70:c9:db:63:ba:ac:b0:ba:74:98:2d:da:0b:9d:00:
0a:c8:a8:a9:18:b8:b7:89:1b:43:6c:19:b4:f6:df:
aa:30:65:b7:de:81:44:18:87:37:2e:f2:b5:9e:36:
27:82:79:bf:d9:28:96:91:ba:29:6d:90:0f:68:ed:
91:4f:df:1c:e0:5f:80:c8:35:35:8c:8c:a4:0b:f6:
4b:a9:fa:b3:34:38:5c:37:d8:1d:1e:de:0e:fe:18:
bf:68:21:b7:8a:cc:3f:1f:bf:cd:95:fc:2a:a0:ee:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:24:EB:9C:25:BB:81:8F:3E:D6:19:79:1A:5D:A8:BC:C4:6A:7E:90
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d5:76:04:3f:63:42:31:d2:14:2a:11:00:b3:88:25:4c:17:
ce:dc:3b:e2:b3:f9:ba:ad:51:6c:d8:7e:1a:02:ec:30:16:b2:
d4:1e:88:9f:97:5a:e1:79:37:62:0d:f9:63:80:1a:14:4d:1a:
7d:da:d7:a1:b9:a8:ee:32:50:71:18:85:fa:ed:c7:b9:b6:2f:
62:16:f4:a0:cc:23:ff:01:38:2a:af:13:44:08:4d:8e:20:9d:
c8:e2:49:30:35:b9:08:ad:61:76:bb:32:04:06:8c:e2:ac:4f:
69:26:1a:a1:ae:e1:bc:a7:65:dc:a5:e2:fd:01:04:ff:ed:4c:
db:e2:0c:d4:f1:91:0d:12:2e:cd:d3:7b:d4:7d:37:84:10:9b:
c7:85:bc:b0:81:b9:4c:45:10:8f:de:cb:b7:fb:bc:f8:e3:c6:
33:dc:7f:22:de:23:c5:bd:72:39:88:b2:7a:22:bc:cf:68:6b:
17:75:ab:3b:39:6b:63:2f:1f:79:3e:bc:aa:ff:ef:f2:50:89:
36:bb:74:8b:91:b5:6b:a8:56:7a:91:c6:f4:5d:45:1d:50:8b:
f6:e7:52:10:dd:8a:9c:06:03:51:e5:c3:a1:c0:c1:77:1f:8d:
c4:95:d6:db:52:2a:7c:81:66:2d:22:cf:d2:64:e7:bf:38:59:
73:28:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:34 2025 by rpki-client