Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: FVJj77cRT9tIxxeWQN+08G+8bpNHRp/mTCQjLrR4Umc=
Subject key identifier: 60:E2:0C:88:1D:F0:A3:A0:05:11:11:9E:73:95:38:B7:83:83:CD:97
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 01976DAB94E2DD5F31FE5E03469661C64A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:00:50 +0000
Manifest this update: Sat 14 Jun 2025 09:00:50 +0000
Manifest next update: Sun 15 Jun 2025 09:00:50 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: Onr0fcs51lJFbg7R1qzgRXZNNAPIQQys4gH9N6ePQaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:94:e2:dd:5f:31:fe:5e:03:46:96:61:c6:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jun 14 09:00:50 2025 GMT
Not After : Jun 15 09:00:50 2025 GMT
Subject: CN=60e20c881df0a3a00511119e739538b78383cd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:a0:8e:af:9f:cd:88:17:17:38:a0:bd:e1:
bc:44:2d:c2:79:2a:ad:e4:d7:94:32:9f:7e:e4:e9:
32:22:ca:61:b9:bd:ef:87:d6:f6:82:03:9a:e5:d9:
35:69:84:80:92:c6:02:a2:f5:46:08:61:1d:16:dd:
95:d0:a1:59:7a:de:98:69:99:0b:36:c5:8c:e0:0b:
b2:e9:d0:04:04:eb:00:83:41:7c:a9:14:3d:db:f6:
a8:85:d5:3d:4a:4a:f2:7d:51:c5:f1:65:32:9d:30:
c2:8f:2e:ab:0d:d9:ba:c8:44:e2:f9:dd:4c:73:36:
93:3b:d3:32:e1:9e:6b:41:47:26:ab:ce:5e:95:a7:
ff:0d:d3:df:08:51:c7:78:0b:3b:38:29:79:11:a9:
80:78:0e:3c:c3:96:69:af:50:f7:a8:25:00:bb:3c:
4a:ee:24:6b:6d:42:75:23:88:38:6b:54:4c:f2:29:
dc:ad:ec:db:e2:bc:17:e9:c1:08:81:1c:cb:74:a7:
b8:72:ec:c7:14:43:4c:cf:63:39:b1:51:da:2e:a8:
52:f5:c3:66:b2:25:81:bd:69:8f:08:b0:40:20:95:
51:ef:b5:97:2d:bd:47:84:5b:d8:74:d3:90:e2:dc:
9a:fa:bf:82:ee:b0:c5:85:81:74:bc:fa:85:a5:a6:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:0C:88:1D:F0:A3:A0:05:11:11:9E:73:95:38:B7:83:83:CD:97
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ec:e6:e2:11:75:76:c6:03:86:4c:81:c9:ed:e2:3e:b9:7f:
c6:15:33:39:7b:f7:98:6c:70:f6:2d:08:37:fe:63:0c:f6:c6:
3f:66:6b:68:ef:d5:06:48:cf:e3:37:1a:88:29:2a:0f:24:71:
b5:be:68:46:ad:2b:ac:d9:cf:44:96:11:a0:e6:98:b4:b5:ba:
09:2a:79:9b:6b:a4:d8:b5:56:00:e4:65:bd:56:20:dc:d8:b5:
dd:22:3e:a5:3d:5e:07:bc:27:1b:b2:c8:72:8f:73:58:c9:9b:
c6:dd:4b:6d:62:d4:e3:4b:51:26:90:df:10:6e:b1:91:48:8e:
67:38:ed:51:e9:a6:8c:58:94:da:05:7c:00:ab:22:73:22:3b:
ae:18:1b:fd:79:34:63:30:16:9e:1f:0f:33:53:d4:ad:fc:47:
db:da:f8:9a:f4:b9:e5:37:cf:20:11:f1:81:a5:17:86:46:54:
e5:72:29:3d:b0:b7:e7:04:cd:a8:71:18:8f:af:30:af:b5:c3:
fc:02:c5:cd:0e:f9:9f:f3:a1:11:f1:a5:a6:96:fd:5e:bc:ba:
1d:ba:34:1d:56:0d:dd:5d:cd:55:47:3e:29:59:b3:08:2a:76:
e8:5c:b0:87:b8:9f:ce:04:77:7e:65:16:6f:6b:0c:8f:9c:34:
66:d2:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:18:25 2025 by rpki-client