Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: wOkAJPaFiuJoZZM2Sb9i8v0pLGOhWdhABhbqiL7jEIs=
Subject key identifier: 46:8A:FF:DD:C7:60:E2:51:59:75:C4:53:E7:43:88:D0:15:67:7B:63
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 01987DC122E2E69D58AF7DAA07278B5F63F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1573
Signing time: Wed 06 Aug 2025 05:01:06 +0000
Manifest this update: Wed 06 Aug 2025 05:01:06 +0000
Manifest next update: Thu 07 Aug 2025 05:01:06 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: agxkoiBaQM1vdYNx0RidlYpCHz0KVAOaWuBu0XE2JBk=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:22:e2:e6:9d:58:af:7d:aa:07:27:8b:5f:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Aug 6 05:01:06 2025 GMT
Not After : Aug 7 05:01:06 2025 GMT
Subject: CN=468affddc760e2515975c453e74388d015677b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:b0:46:d5:42:fb:92:a1:bc:fd:7d:5d:4d:
cf:71:83:18:68:fa:b3:f8:c8:d8:bc:79:6a:68:29:
8f:06:bc:4b:80:5a:42:f3:52:cd:38:2a:34:23:a1:
18:9d:b6:27:70:bc:4f:3a:67:39:75:43:45:46:ba:
5f:d8:1a:fd:4c:4e:90:f1:fe:f6:69:42:c6:31:36:
03:47:fd:9a:f5:8d:a2:8b:d3:3a:d6:b5:60:5b:7d:
17:65:29:f9:b2:12:4a:fd:77:98:61:87:0d:be:87:
42:2b:a7:c8:b7:da:48:a9:a3:cf:b5:59:e3:43:05:
af:95:e0:d4:62:48:bc:d0:10:fa:2a:9f:df:d5:cd:
ae:65:c2:0a:3c:4b:9a:44:f2:d4:12:20:40:94:b2:
f6:39:1e:08:60:b0:c5:ac:dc:07:71:cb:8b:c9:04:
25:6e:61:76:e5:24:82:a4:1e:38:5d:dc:ce:98:6c:
0e:01:e4:bc:c7:d6:14:9c:28:d3:50:24:fd:a6:ae:
96:57:fb:8b:0b:30:bb:40:0a:32:ef:65:fb:5e:ce:
bb:1e:a9:40:97:df:7c:9a:88:9e:c6:4c:bc:95:06:
d0:e7:4d:40:8d:de:46:69:ed:5d:be:48:1b:54:e2:
78:3f:6f:d4:05:1c:85:44:13:cf:5a:dd:a1:34:50:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:FF:DD:C7:60:E2:51:59:75:C4:53:E7:43:88:D0:15:67:7B:63
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:06:7a:54:71:65:3d:ed:59:25:2f:08:37:d5:3c:26:c1:
36:76:1a:f9:fc:66:3c:98:e5:38:71:23:63:83:19:ce:61:f5:
f2:1e:08:9b:62:ab:57:af:93:02:6f:a8:f8:a7:b9:4b:8d:a3:
e0:87:8e:55:69:4d:a5:c0:24:f7:8b:fd:e7:04:e3:a6:86:20:
8f:f1:cb:29:ff:1c:84:16:b4:1e:d0:a5:5a:bb:81:3e:03:a7:
d4:a7:83:99:3e:3a:0d:1b:5a:b1:2e:66:d7:ec:42:85:b4:48:
bf:34:16:06:2c:10:41:a8:98:ef:6b:33:23:6d:f1:ff:c8:81:
0c:62:35:08:1e:ac:54:2c:ab:65:1e:ff:43:92:8a:60:92:e2:
a5:6f:48:38:95:b6:7b:90:48:6f:29:17:d3:3c:d0:2c:df:78:
1e:f8:93:7c:03:49:a6:58:48:97:68:95:eb:fe:0b:25:02:90:
63:7d:b1:72:e3:d7:62:99:91:84:c1:97:be:b0:80:f1:78:95:
e3:e4:60:8b:59:3b:8f:eb:8a:e4:dc:e0:7a:73:0f:75:4f:0a:
96:fd:5a:06:ee:c0:35:d9:27:aa:0a:c2:16:b9:7e:ed:6c:d1:
73:82:1e:dd:15:e1:8b:d1:bc:15:e0:56:9a:30:34:74:65:1d:
2e:db:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:35 2025 by rpki-client