Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: BGITxPcBB72cjkPyh+hg21C8dGAbgkpW/jra5cKoDhQ=
Subject key identifier: 0F:06:B9:6A:16:B9:8E:CD:F1:C1:D7:58:CF:98:89:96:CC:C8:46:0C
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019769CE5E15316495E21293294E932D323B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 070F
Signing time: Fri 13 Jun 2025 15:00:21 +0000
Manifest this update: Fri 13 Jun 2025 15:00:21 +0000
Manifest next update: Sat 14 Jun 2025 15:00:21 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: AhrRIue9b4QzosgLNe5/Gh/IgIwWQdJpJ+dFeWn/uwU=)
2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:5e:15:31:64:95:e2:12:93:29:4e:93:2d:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jun 13 15:00:21 2025 GMT
Not After : Jun 14 15:00:21 2025 GMT
Subject: CN=0f06b96a16b98ecdf1c1d758cf988996ccc8460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:8c:91:65:64:18:af:ef:c5:df:fc:8c:2b:
20:aa:27:d3:36:1d:43:d7:76:83:fe:c2:2d:4e:94:
e2:2a:b1:97:9b:19:92:5b:55:76:8a:ca:b8:ea:3f:
2b:81:0c:22:ad:6a:6b:28:9f:d7:db:ba:6b:d8:9d:
ff:84:bb:1a:f5:88:0d:d4:d5:37:b1:72:34:27:c0:
b5:3b:85:f3:e7:52:3d:59:37:5a:c6:43:c8:e7:d9:
fb:5d:f0:75:57:44:fa:de:62:91:6a:2d:d0:d8:19:
34:70:f6:aa:d7:3b:ae:43:fa:38:65:52:e5:b8:1a:
62:3f:87:11:7f:10:c4:45:81:74:e1:27:13:67:ab:
9c:7f:87:d1:39:f8:5d:78:ca:fd:04:04:78:69:f1:
f8:4f:28:e6:05:1c:18:e6:dd:c7:ea:8d:ca:ca:9f:
8f:d6:ac:d5:96:8d:b1:10:8d:52:c1:bc:d3:9d:a3:
7f:87:38:f6:ec:49:a5:bc:81:b2:af:09:b0:c9:d0:
49:6b:69:45:c5:60:18:5f:8f:c4:e0:14:54:31:dc:
78:ca:1d:e0:96:25:24:ff:36:9b:dc:42:f0:b4:0f:
0e:cc:2b:e5:e3:e0:42:46:bd:d5:24:5d:04:a2:09:
f0:fd:5f:d8:2f:ac:da:0b:de:1d:6c:68:96:d3:39:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:B9:6A:16:B9:8E:CD:F1:C1:D7:58:CF:98:89:96:CC:C8:46:0C
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3d:5b:dd:61:2e:2b:bb:03:f5:f9:19:35:1f:56:38:0a:19:
1e:da:24:d0:de:58:1d:7a:6f:9f:3b:ef:c3:66:1e:e0:dc:a5:
1f:1e:41:9e:4f:b0:62:8f:fa:92:62:a4:6b:6d:59:0e:dd:80:
15:8f:c6:6a:a4:28:f3:2a:4e:f1:c3:7a:56:71:d6:fc:d7:6a:
e1:04:8a:00:bb:e2:52:6a:a4:12:d8:72:1f:e6:e7:48:d6:67:
34:a6:73:ab:3c:d5:f4:98:e4:0f:07:b7:8b:b1:11:d7:51:a7:
64:18:c6:c4:a6:3e:2f:56:2d:ce:dd:e0:76:1e:3d:a4:80:e4:
60:46:f1:6d:cb:9e:98:8f:7f:c1:02:7d:33:84:fe:b9:b6:dd:
f6:31:b5:65:f4:95:2d:e2:a8:dc:df:0f:b4:9c:45:37:66:97:
f6:eb:2b:dc:79:f4:a0:58:35:60:86:c7:25:2e:83:b2:c9:64:
19:d5:d8:3f:15:81:fb:72:de:16:d6:86:f9:cf:3a:6b:29:2a:
39:36:21:70:10:cb:b3:41:9a:36:5a:21:4d:cb:4c:04:45:78:
68:f8:ff:1c:18:8f:69:9c:ce:03:b3:5e:8f:5d:76:0d:62:a7:
bc:66:de:39:da:1b:93:b1:75:52:93:8f:ef:ea:21:33:36:c5:
ae:2d:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:49:28 2025 by rpki-client