Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: Anv9SIJZeQZfZOUJwc2Wi7vXgfpQeEb4Np7+gvd4/uw=
Subject key identifier: 91:98:43:BC:DC:3B:50:5F:7F:A3:0E:CD:F7:E3:96:05:1E:ED:C8:30
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 019771F5E4329B42AF3D12200EAE8DBF72CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:00:29 +0000
Manifest this update: Sun 15 Jun 2025 05:00:29 +0000
Manifest next update: Mon 16 Jun 2025 05:00:29 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: XJ/Sd5eC5/RmBorf0zhXPVQvX7UL2ZZEcEdaCthJYM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:e4:32:9b:42:af:3d:12:20:0e:ae:8d:bf:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jun 15 05:00:29 2025 GMT
Not After : Jun 16 05:00:29 2025 GMT
Subject: CN=919843bcdc3b505f7fa30ecdf7e396051eedc830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:8b:4b:ee:b5:92:59:1e:c5:c6:70:3b:34:
6c:7e:40:25:d5:d9:04:18:75:00:be:02:03:2e:fc:
0b:0d:22:88:8a:09:bb:ab:7f:14:bf:e4:f8:d1:78:
95:c7:5a:6e:12:a7:ed:4f:54:7f:fc:84:cf:db:8b:
7d:2f:b3:cb:cc:97:c6:1d:c8:06:dd:06:9e:4d:73:
cc:9d:25:f4:90:aa:e8:e4:9b:f3:c8:98:f3:a0:b9:
78:d2:9d:e5:43:4e:3e:5c:80:fd:b2:68:41:37:a0:
c5:3f:46:2d:8e:93:6b:2c:22:1e:f7:23:7c:7e:46:
01:00:c4:68:88:c2:5f:66:9b:61:9f:99:9a:b4:fa:
7d:7d:c9:6f:1c:8d:75:0c:8f:e6:0c:57:1e:83:c3:
5d:e3:07:86:90:a2:56:3d:ac:fd:8b:fa:3b:38:de:
2d:e0:a6:06:8b:6b:b6:c8:ac:e8:41:b8:16:55:16:
30:03:e9:5b:2f:da:b6:af:f4:45:8c:47:62:ac:af:
b6:94:eb:6b:e1:c6:93:e7:c5:a2:07:2c:d3:bf:8b:
29:43:21:2b:de:70:68:df:a2:6b:07:d7:45:87:d9:
0e:dd:3d:88:6d:60:38:e7:62:7f:0b:22:45:75:5c:
d7:10:74:a9:40:76:91:f3:f9:2a:71:1b:91:e2:f2:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:43:BC:DC:3B:50:5F:7F:A3:0E:CD:F7:E3:96:05:1E:ED:C8:30
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:88:b3:e1:21:94:eb:3b:73:7d:c2:51:e9:b1:b0:ff:a1:7e:
c1:30:1d:e4:ec:23:b8:82:e7:c2:d4:fe:b3:eb:a7:76:ca:c5:
cd:fa:3c:3a:ee:bf:8d:b5:8a:73:98:42:62:ac:58:00:ff:68:
f9:9b:7c:04:ea:e0:00:7c:41:7d:35:cc:62:8e:ea:25:61:99:
11:37:ba:55:0a:66:a7:69:6a:fb:0d:0a:56:fc:94:39:c0:c8:
dd:6b:88:39:4b:a3:da:8d:a1:d3:06:0a:0b:24:a4:08:80:33:
45:61:68:9e:4c:22:4b:ee:73:47:43:58:ce:94:27:8c:dd:7a:
a8:c1:b6:53:9e:d9:3c:1b:61:50:df:ff:87:d1:df:0b:23:be:
d0:3a:31:8c:a4:54:1f:39:85:b3:0f:73:a6:ee:be:c2:4c:b7:
33:68:67:a9:dc:7f:fc:f4:68:4d:bb:fc:56:22:af:b9:3f:7c:
0c:3b:d0:64:fc:2b:31:4c:eb:23:60:67:13:a2:15:c6:c0:01:
8d:3d:e1:55:47:d7:a7:2b:a6:64:28:fc:d8:b9:8d:00:29:48:
8b:71:05:5a:f2:ce:69:9b:b8:dd:06:5f:9e:d3:5d:50:c2:0d:
e7:21:7a:2f:c8:0a:6c:f4:2f:6e:36:c3:0c:a8:12:a8:39:64:
4f:ff:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:28 2025 by rpki-client