Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: yn25k5XUaU7Hfh+ARINwojPJ3tZAMsHfbkd3jF/2u/E=
Subject key identifier: CA:37:54:BA:E9:89:4A:FA:06:9B:10:A2:25:05:E4:EB:DF:A1:F6:F8
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019892238FFDCC417A21C7F3B5B64A02B90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 04:01:00 +0000
Manifest this update: Sun 10 Aug 2025 04:01:00 +0000
Manifest next update: Mon 11 Aug 2025 04:01:00 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: zSfzXzTBCacP1FJUxxvAqZv08gOzC655L3g29/ARZbQ=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:8f:fd:cc:41:7a:21:c7:f3:b5:b6:4a:02:b9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Aug 10 04:01:00 2025 GMT
Not After : Aug 11 04:01:00 2025 GMT
Subject: CN=ca3754bae9894afa069b10a22505e4ebdfa1f6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:9c:de:1f:b0:a5:b5:c5:3b:d2:1d:5c:a2:
dd:18:49:cc:e6:82:10:f1:7a:68:10:e9:d6:da:92:
76:61:94:3a:c2:70:de:38:25:4e:8c:e7:4c:9c:32:
d8:ca:47:67:53:75:23:35:a9:5e:0b:63:fa:92:7b:
11:8e:f6:c0:f0:68:8f:36:1d:db:19:13:52:89:13:
81:0c:25:fc:79:b4:b2:a3:b7:bc:ac:5d:b4:fd:68:
94:1e:41:5f:e7:00:33:04:2e:86:1f:99:54:8e:50:
e3:e9:8d:b4:95:a0:c7:ec:db:b6:5b:ad:e6:4d:1e:
c9:c7:22:65:14:c8:d3:31:2d:80:8e:15:d6:c2:6e:
ed:8a:12:4e:13:36:ed:6d:6a:f0:cc:79:69:f5:ea:
ea:b6:e4:ee:d6:b1:f2:cf:ec:38:00:77:1a:0b:bd:
6b:9e:7f:69:14:db:90:7a:f0:6f:2f:0b:5c:ad:13:
f0:c3:7a:26:4b:91:a7:3d:77:0b:38:ff:8a:ab:18:
42:d3:cb:eb:b9:7d:31:5b:84:7d:d0:ce:03:cf:27:
c3:a4:8c:7d:c2:10:2d:a7:25:1c:35:ae:37:9f:ee:
24:c9:54:60:2f:c1:e4:00:c8:0b:9f:f7:2e:08:4b:
e0:38:2e:e6:83:cd:95:53:36:dc:67:3c:da:2d:10:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:54:BA:E9:89:4A:FA:06:9B:10:A2:25:05:E4:EB:DF:A1:F6:F8
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fd:4b:b7:21:6d:31:b5:82:6a:74:0f:8b:8f:c8:b3:da:ae:
56:1f:c6:14:55:69:14:9d:2d:fd:9f:bc:0a:ce:04:a3:ce:a7:
48:45:d0:19:1a:53:3e:fd:a7:b9:64:b3:d3:29:46:89:48:f1:
b7:0c:d5:59:14:ff:e5:07:3d:f3:73:49:f1:78:e7:7d:8f:c5:
9a:a5:e1:92:99:e0:f2:f6:50:b3:c5:6d:ef:dc:ac:70:5f:90:
58:ed:84:ba:a9:79:d4:5c:00:ed:f1:90:80:43:6c:76:67:e4:
b4:99:af:70:19:83:74:1c:32:11:44:98:5b:2f:e5:29:cd:b9:
86:d8:ef:b3:dd:90:d4:c6:b9:fd:de:00:5f:dc:fe:a8:a1:2d:
0c:c7:dc:92:83:91:14:20:6f:8f:f1:8f:6f:c5:7e:40:76:59:
5c:4b:c1:60:e8:9f:76:a4:74:35:55:01:33:23:7b:e0:f6:6f:
6e:51:28:fc:86:cd:53:bb:85:08:ab:5d:d2:dc:ec:59:ed:73:
4e:bf:f4:55:61:cc:e6:4d:86:fe:28:8c:e8:49:00:5e:bc:7a:
8a:02:51:02:e9:f7:d1:1d:43:55:a1:ae:fb:6e:88:6a:2f:9b:
5b:0a:34:96:29:f7:4f:9d:4e:71:47:60:2c:94:4e:33:7f:24:
98:89:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:35:01 2025 by rpki-client