Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier: gkdmbtRfGOWqHGWjp4ZxjS8opJga/kiYOrcsQrPquHc=
Subject key identifier: A3:C2:0A:4A:23:98:DD:B3:60:08:1B:78:9B:60:74:0B:8D:B9:1F:31
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 01977A547CD16AD1B6B4410001A56DD5A0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 20:00:46 +0000
Manifest this update: Mon 16 Jun 2025 20:00:46 +0000
Manifest next update: Tue 17 Jun 2025 20:00:46 +0000
Files and hashes: 1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: OemVL39udbFfEfmR/VbQrd2vSjh1NP78SK6fWHRNNgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:7c:d1:6a:d1:b6:b4:41:00:01:a5:6d:d5:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Jun 16 20:00:46 2025 GMT
Not After : Jun 17 20:00:46 2025 GMT
Subject: CN=a3c20a4a2398ddb360081b789b60740b8db91f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:bc:e0:76:82:08:e3:7d:3d:d0:f8:85:1b:
1c:c2:4d:f1:38:aa:a8:28:18:38:a5:e4:3e:d7:75:
11:2e:51:7c:12:0b:ea:72:af:34:74:0d:5e:17:17:
64:fe:c3:d7:8f:e5:58:03:fc:6a:c4:ed:2e:5b:6e:
59:99:35:2f:2d:ac:4f:b2:5a:6d:b8:54:24:34:77:
e1:ea:d3:96:bb:43:fc:1e:bb:d5:6f:9c:db:5b:19:
a1:77:9c:31:bd:18:59:9e:af:e6:07:45:d8:88:67:
98:c7:98:89:db:22:b2:7f:af:c6:6e:59:0a:59:ff:
68:1e:73:6d:a2:e7:14:2e:dc:90:00:93:e8:f2:ca:
f0:fc:ac:f3:d5:d4:2d:c4:49:73:de:5d:77:d8:36:
dc:c8:12:33:cc:7f:b5:d8:87:ca:33:3d:9c:12:a6:
d6:06:8a:d6:c7:7b:04:21:46:10:8e:72:37:b0:3e:
a1:98:87:af:2b:f8:8d:39:c2:0a:34:f0:9e:f2:49:
2f:6b:0b:be:36:55:4c:16:56:3a:bb:bd:fd:9c:2c:
ee:a2:4e:04:2a:b5:2b:1b:3d:76:3a:b8:bd:11:6b:
91:7c:1c:1e:f1:de:eb:7d:52:0e:b9:5c:ef:e2:a3:
20:e6:26:46:7d:6e:60:2d:94:75:97:87:83:2d:f5:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:0A:4A:23:98:DD:B3:60:08:1B:78:9B:60:74:0B:8D:B9:1F:31
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:42:46:f2:6f:7d:77:e4:38:6a:d8:b8:71:cc:23:ee:e5:
64:de:8c:5c:45:4d:85:8b:58:e6:e6:ea:db:f9:0a:5e:e1:de:
51:6e:d0:5b:bf:d3:7f:f7:5e:f8:4d:f6:51:f2:82:04:e0:a9:
d5:64:a0:89:2e:ca:61:9a:c9:a7:3c:b1:f4:3e:6d:f0:fb:f4:
b3:45:55:c8:3d:b4:cd:68:da:9e:c3:84:ee:7f:28:fd:1e:d2:
3f:25:a9:92:94:b3:ef:50:2c:1b:b1:e7:1a:12:d0:6c:a0:46:
45:7c:07:75:87:20:09:7c:13:3c:1a:9a:15:60:1d:e7:a7:c1:
a3:0f:63:04:51:da:a6:c1:fd:d8:b5:c8:e6:6a:cb:73:a0:e0:
4c:ea:88:cd:6f:35:46:fb:f0:b4:50:be:82:2a:a7:9b:95:c9:
54:46:5c:51:5b:2c:66:73:cd:07:fa:aa:04:a0:fd:ae:4e:de:
39:55:42:60:5f:9e:e1:63:d3:ed:75:c1:fd:c7:39:a7:b3:00:
9e:a6:b4:52:aa:3f:46:d7:e4:a8:40:60:6e:3b:cf:65:ed:fa:
42:98:b2:94:0a:b4:c8:cd:d9:09:6d:06:a5:4d:ca:8c:35:95:
c8:b2:5a:ab:24:f1:f4:8c:71:8c:eb:ac:de:a5:b6:96:68:da:
25:87:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:25 2025 by rpki-client