Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: QlTx0ZY7bNDqIuJiS9aRXfE/GqVAZwt2YU5gPRHsF/w=
Subject key identifier: 60:38:EC:10:CC:5C:1E:9B:BF:7F:6C:FF:C7:27:C9:F7:9C:9B:CF:E2
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 01989780E64B2329A55D88FDBC986A9D7645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 05:01:03 +0000
Manifest this update: Mon 11 Aug 2025 05:01:03 +0000
Manifest next update: Tue 12 Aug 2025 05:01:03 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: /j9SG9sjjCkwDUpme6Y4TlQ4FMAF8TO8zzLi1qLDodE=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:e6:4b:23:29:a5:5d:88:fd:bc:98:6a:9d:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Aug 11 05:01:03 2025 GMT
Not After : Aug 12 05:01:03 2025 GMT
Subject: CN=6038ec10cc5c1e9bbf7f6cffc727c9f79c9bcfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:e2:8f:6e:39:64:3c:7c:6c:41:a2:4f:e1:
a9:f7:73:53:15:fc:39:51:32:a2:19:76:6f:e6:06:
ca:47:57:2a:7c:d0:5d:7e:2f:32:93:c8:99:fb:43:
5b:06:72:ab:39:76:4f:9b:54:4b:b7:2e:ca:71:2f:
2b:15:62:51:19:9d:b1:d6:0e:24:18:c0:f7:74:ca:
b7:42:94:17:fa:a5:fd:95:af:f2:75:9f:f3:07:54:
71:a2:02:99:4b:eb:0f:48:23:f9:80:b2:c9:f0:ef:
94:3d:51:4f:60:1a:28:dd:d3:88:5c:fc:72:02:78:
23:f5:7f:61:f8:9e:b3:86:8f:6b:d7:96:4b:3d:92:
63:58:75:5a:f2:77:4d:71:63:68:d3:98:d0:4d:7d:
5c:d9:2e:ad:53:83:f8:1c:39:b1:25:df:62:eb:0f:
65:f2:0b:b9:d2:75:e1:db:a0:ed:67:bc:81:61:7e:
80:11:55:b4:90:ab:fd:cb:7c:dc:2f:ab:84:15:a0:
a6:bd:02:ee:09:c8:52:df:16:33:55:c7:a4:2f:69:
49:ae:41:13:2c:ed:fd:07:71:99:51:68:3d:88:68:
a9:f9:b0:fd:23:b8:a8:c8:02:72:be:49:99:76:3f:
9d:be:07:93:7c:70:2a:69:d6:5d:7c:d7:f4:8a:a5:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:EC:10:CC:5C:1E:9B:BF:7F:6C:FF:C7:27:C9:F7:9C:9B:CF:E2
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2a:78:d9:da:9e:2d:5f:25:cc:ea:65:db:f9:c7:84:f4:fb:
6f:25:77:97:2f:d6:30:d2:a2:31:c3:5f:27:84:a6:bb:05:d5:
b2:03:96:78:40:35:d2:c9:17:af:07:1e:44:38:2b:f7:cd:2a:
4e:55:04:75:da:80:da:6c:5e:0b:c6:b5:67:c3:4e:30:bd:9d:
23:9a:ed:e0:b3:ee:53:40:56:63:26:2f:ee:a2:b5:b5:6c:5b:
2c:16:c7:fd:34:5e:7c:ae:cc:53:0c:c4:27:67:6d:9b:2e:cb:
bd:6f:df:57:3c:ee:4f:6b:d9:24:d4:b4:49:28:a8:a4:86:67:
9e:ae:36:aa:83:fa:6d:be:70:89:12:70:81:42:50:15:cc:bb:
b4:a4:5d:71:b9:83:8e:18:9b:a3:30:05:66:a2:0a:3f:63:56:
c7:0d:6d:e0:16:48:66:bf:79:81:35:6f:dd:63:00:be:9c:3d:
be:80:00:74:74:85:03:cb:d0:df:5d:b9:d8:b5:e5:84:c5:a0:
39:6d:f2:0e:be:cf:1d:9b:6d:62:c1:d5:8a:b0:88:c1:86:90:
4b:30:5b:32:d2:fe:f8:5a:77:7a:03:cc:8f:6f:2f:9d:88:7d:
c5:9a:73:49:bb:5d:d9:ea:0d:6a:e8:28:7e:11:99:6e:d4:43:
72:af:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:36 2025 by rpki-client