Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: cTgGTInxx+qUoL6m/D0lEhySOS+7YVJxHPJVLEhXZTs=
Subject key identifier: 47:31:02:42:C0:9F:6E:20:87:66:C2:2B:61:86:CF:A5:96:C8:AF:23
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019785B41F60C37FF9EFE6443647EF2D8F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 01:01:03 +0000
Manifest this update: Thu 19 Jun 2025 01:01:03 +0000
Manifest next update: Fri 20 Jun 2025 01:01:03 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: wkIPg6UN17efvK5jUjIjXvpn2ZAL0Gvpi4MnGYSwnHM=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b4:1f:60:c3:7f:f9:ef:e6:44:36:47:ef:2d:8f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jun 19 01:01:03 2025 GMT
Not After : Jun 20 01:01:03 2025 GMT
Subject: CN=47310242c09f6e208766c22b6186cfa596c8af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:62:00:59:f3:5b:5b:6a:3e:ab:8b:19:ea:
3c:3d:65:64:65:b4:65:08:f1:02:6e:91:38:37:c1:
3a:a3:a7:ee:91:5e:11:7f:2a:b3:c8:0e:79:d7:a6:
72:94:61:04:3b:9b:6a:59:50:20:d2:a0:a4:01:17:
ca:52:cf:d4:57:bc:c2:4f:2f:03:d8:e9:64:5f:f0:
64:ce:36:4f:c0:8a:87:39:11:e8:a2:5c:93:b3:c0:
72:29:d3:08:1c:f9:55:18:1e:4b:5e:f5:33:2d:36:
b8:d7:d4:b8:85:64:2e:7b:94:44:82:e2:e2:d9:c0:
04:13:07:8a:1d:b7:b7:dc:22:fd:5a:b2:44:f2:57:
f9:bb:55:30:ba:09:9c:49:02:10:f3:a6:aa:ce:a0:
b2:11:f8:5c:82:c0:58:26:ef:73:00:d8:c5:96:93:
fe:05:68:df:60:34:c1:05:bb:dc:9c:8a:fe:b7:fb:
92:c6:a5:5e:a6:ec:81:f7:90:ca:47:52:95:7f:9e:
c3:d8:af:0a:93:16:8f:74:f9:6e:ff:34:85:1a:ae:
40:1b:14:ef:f8:cc:af:f2:38:d3:7a:fa:77:15:d8:
4a:3b:ec:d3:c4:4f:85:3d:d1:08:e6:2b:92:50:de:
96:21:7e:d8:89:13:1c:81:32:97:34:84:aa:9b:d6:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:31:02:42:C0:9F:6E:20:87:66:C2:2B:61:86:CF:A5:96:C8:AF:23
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c2:8b:ac:0b:69:9c:89:e0:3d:b6:3b:99:2e:88:01:1f:84:
fa:26:2d:6e:81:9a:2c:78:19:fd:87:aa:a5:53:98:07:e1:58:
ba:ec:51:36:ba:1b:6c:5e:3a:3c:07:a7:cf:f3:d3:04:82:8a:
d2:d6:36:d7:15:09:9e:79:9b:b5:b0:c5:ec:d6:95:83:cd:cb:
1b:39:59:2a:5b:c6:11:0f:49:60:f3:eb:02:68:a1:ef:de:64:
40:10:22:54:e4:c1:40:17:33:65:d5:4b:15:10:9d:4d:4e:76:
92:95:94:ec:6a:a6:de:c7:76:48:1e:35:ab:05:e6:42:50:af:
b9:24:a6:1e:5b:21:64:ad:a4:63:6c:38:a0:c0:1a:1e:c1:99:
a4:54:f5:53:6b:fe:f5:3d:4a:71:b5:bd:d7:94:26:70:70:05:
fb:4b:0e:15:16:d8:06:8e:99:32:38:a5:45:d1:04:58:ec:4f:
a9:83:30:ac:af:4d:15:66:0d:57:53:03:e3:58:4b:65:18:e9:
0c:7d:2b:19:73:9c:6d:4b:42:46:36:8f:92:9b:a0:e5:6f:1c:
08:80:6e:97:0b:f6:ef:35:57:59:70:98:a2:c4:27:a7:3b:3b:
08:cb:33:15:0f:53:5d:99:9f:a4:92:94:7a:b6:a4:0a:d7:bd:
d3:9c:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:16:41 2025 by rpki-client