Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: +mW/lBchDXOuXVZLYdtoifm5wd47NxAbMreID9I47uM=
Subject key identifier: E5:C5:AD:DF:81:9F:65:00:54:AF:62:FA:73:CD:6A:DC:A7:F3:7C:DE
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 01977007EE616F257F6D317FD2B957F2259D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:57 +0000
Manifest this update: Sat 14 Jun 2025 20:00:57 +0000
Manifest next update: Sun 15 Jun 2025 20:00:57 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: GDCzW3hT4R8H+Yp2n1wotczI89eIIKECZqu5PSn93vQ=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ee:61:6f:25:7f:6d:31:7f:d2:b9:57:f2:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Jun 14 20:00:57 2025 GMT
Not After : Jun 15 20:00:57 2025 GMT
Subject: CN=e5c5addf819f650054af62fa73cd6adca7f37cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:0a:bd:d6:16:e2:f6:92:0e:e0:3f:00:60:
c8:bf:0a:0a:d3:ca:e8:f9:bb:c6:48:8e:b2:1f:16:
29:82:1f:5a:dc:20:09:a9:e1:ec:1d:3d:38:4b:fd:
32:4b:f3:b4:2c:a2:15:12:a4:8f:e9:67:83:c2:04:
ae:94:91:0f:71:26:e8:c4:c9:64:00:ec:7d:17:2b:
1b:1b:4f:75:2b:72:ce:ec:22:75:b8:5b:b2:6e:ab:
7a:cc:f5:73:89:ea:ac:57:14:22:b1:40:86:a6:f7:
1b:31:05:2b:f1:a1:ec:90:27:1a:1f:ad:c8:67:dd:
e2:6c:9f:5c:d3:98:1b:dc:15:77:20:29:b6:80:b0:
92:7d:33:1f:d9:c3:da:a7:7f:ea:0f:e3:71:1e:ed:
47:cf:f0:92:19:82:7c:b8:8b:e6:61:b7:0f:02:96:
1c:b5:f7:b2:34:c6:7c:0e:49:c2:fa:cb:87:dc:cd:
2e:c9:f6:55:34:03:08:9b:80:62:87:c1:8d:bb:95:
76:e7:3c:e9:90:9c:81:78:b4:d5:d7:28:96:ae:be:
66:a2:0c:cb:13:ee:15:c3:a4:3b:04:14:3a:e2:ac:
74:60:9b:52:c3:26:13:7c:72:db:f6:03:10:d3:9e:
03:24:b4:1a:f1:2a:2b:c2:05:66:7c:d0:56:92:cd:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:AD:DF:81:9F:65:00:54:AF:62:FA:73:CD:6A:DC:A7:F3:7C:DE
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:92:18:f5:50:f1:55:66:ba:39:a4:e2:0f:69:bf:6e:f6:fc:
75:b4:3d:0b:bd:1c:16:d6:8f:3b:14:42:42:6e:b3:94:21:04:
8f:9e:0e:6f:87:84:ab:42:db:8f:53:bf:89:bf:35:cd:b7:ff:
fb:8e:8a:6a:5c:20:5f:ec:1d:49:b0:b4:c7:97:c3:ae:4d:1e:
46:28:3c:66:74:c7:15:be:23:0d:15:d7:16:80:ee:16:93:e0:
f6:3c:41:ee:ff:d9:5d:94:a2:b4:4f:ed:d6:a9:5e:66:b0:74:
cd:48:32:e7:c3:70:9f:67:f8:d7:d2:7c:b8:74:c2:d1:ec:9c:
63:5b:fa:9e:19:7c:d2:4d:ae:60:a9:e8:f6:f7:a3:75:ba:17:
60:2d:11:2d:1f:26:a8:62:05:10:54:aa:af:0d:47:6a:48:d6:
de:13:eb:74:95:f3:b2:aa:be:2f:6f:54:16:37:bd:fe:f6:6a:
1b:c6:f1:9b:77:66:94:ff:af:b6:26:ae:9c:27:8e:7b:9a:c4:
21:3e:bc:21:e3:ff:ba:44:ee:cd:10:e0:53:e2:93:55:4d:42:
2c:23:2a:6b:ab:92:cc:e4:7f:e6:28:98:44:d4:69:46:d2:39:
0a:8c:6e:b3:86:a5:4d:2b:94:90:ad:1b:8d:26:b3:ec:ea:86:
da:37:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:36 2025 by rpki-client