Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json)
Hash identifier: sUZVElQ/hOJXerBtUtKRD0T6DukYSCQMm37dB0RDRsk=
Subject key identifier: 87:04:CB:89:2A:63:56:E3:59:C9:02:42:25:42:F0:03:E8:E7:9A:5B
Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Certificate serial: 0197B6A1343970D730796DF17984602D4FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: 5cDixibpLVRHZO2Dxv0qqQgQWwXe4jVH1Cp5ibGvAdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:34:39:70:d7:30:79:6d:f1:79:84:60:2d:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=8704cb892a6356e359c902422542f003e8e79a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:9c:a7:b3:13:7e:6b:61:66:e3:35:bc:ac:
e9:e4:18:6b:52:c6:f5:7d:d4:35:79:f7:7d:78:1f:
28:78:74:72:bc:5d:e0:00:c2:74:cd:38:5d:94:4e:
71:eb:68:72:86:e4:80:f5:ae:a3:f7:86:82:dc:3e:
e2:db:42:59:e5:92:08:10:f4:7e:db:47:1c:e7:95:
6c:40:c2:6c:d5:6e:19:4d:98:5f:e2:5c:91:19:af:
57:9a:95:e1:c4:32:fb:a4:fd:99:33:0e:c6:9a:cd:
6f:47:90:8a:02:27:31:ce:a9:09:2b:14:47:55:f8:
51:00:0a:0a:16:85:5b:e0:81:d1:bb:09:45:b0:a5:
7a:96:28:25:4a:cf:50:c1:4e:a3:c2:53:ec:9c:ed:
1d:5e:fb:eb:a3:3c:b5:88:84:a4:9f:2b:6d:99:95:
75:f1:76:49:06:c5:34:42:c8:dc:37:de:16:12:6d:
c6:41:d9:bc:11:cb:d5:f1:8a:e4:a7:fc:4b:19:25:
22:11:20:62:47:f3:35:42:69:9a:3e:9f:e6:3b:09:
cf:87:a9:9f:52:3c:15:23:e2:a8:0d:b3:a0:32:f2:
bc:9c:ab:d2:6a:eb:af:a8:8f:86:a9:20:c7:bd:0c:
52:63:80:3a:5e:71:24:82:9c:48:57:91:07:fa:b1:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:CB:89:2A:63:56:E3:59:C9:02:42:25:42:F0:03:E8:E7:9A:5B
X509v3 Authority Key Identifier:
keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:04:06:d2:ee:38:4f:16:3c:6d:ea:e3:4a:b6:f6:01:3e:
54:ea:23:96:a7:af:14:00:a9:88:ce:98:da:cd:55:34:e5:b4:
c5:c3:f6:aa:c8:dc:e7:a0:5e:ef:64:51:c0:de:5f:20:6c:37:
a8:68:8d:a5:0b:ff:c0:fb:e6:22:9b:d3:94:51:c5:c5:b6:4a:
23:05:b5:55:e7:d2:32:04:54:10:25:47:ce:5d:d5:be:95:64:
98:5b:6f:59:7e:5b:77:e9:7d:ef:7d:2e:61:24:ad:b7:f2:c2:
81:87:d8:eb:29:13:5f:5e:d9:a8:3a:ce:4f:29:69:e0:ff:ee:
4e:d7:74:0f:ac:fa:5b:26:d4:d3:ae:1e:56:1e:0a:d8:d1:2e:
8c:22:e8:df:73:f4:35:b0:62:f5:00:24:ed:42:70:1b:26:3a:
d8:2e:76:87:44:76:a2:5c:b1:ac:14:f2:b5:c1:85:d0:71:46:
d3:e0:b6:bc:26:aa:fb:c4:c3:41:96:36:d7:08:0d:3d:da:f2:
d6:e8:42:8e:b3:6d:c9:38:28:31:13:73:07:85:e2:72:81:44:
a7:8e:5b:2c:24:d9:86:b4:e1:0b:28:e3:72:2e:ed:95:a0:6f:
86:16:e5:e8:0f:e7:60:58:dc:05:ef:a8:65:60:58:f2:a8:ac:
bf:a8:b9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTQ5cNcweW3xeYRgLU/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzhkYWNlOTcwODVjYjBiNzdkMDM5YmQwZGZmZTU2YzI2
OGEyNWMwHhcNMjUwNjI4MTMwMTQ3WhcNMjUwNjI5MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg4NzA0Y2I4OTJhNjM1NmUzNTljOTAyNDIyNTQyZjAwM2U4ZTc5YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sqcp7MTfmthZuM1vKzp5BhrUsb1
fdQ1efd9eB8oeHRyvF3gAMJ0zThdlE5x62hyhuSA9a6j94aC3D7i20JZ5ZIIEPR+
20cc55VsQMJs1W4ZTZhf4lyRGa9XmpXhxDL7pP2ZMw7Gms1vR5CKAicxzqkJKxRH
VfhRAAoKFoVb4IHRuwlFsKV6liglSs9QwU6jwlPsnO0dXvvrozy1iISknyttmZV1
8XZJBsU0QsjcN94WEm3GQdm8EcvV8Yrkp/xLGSUiESBiR/M1QmmaPp/mOwnPh6mf
UjwVI+KoDbOgMvK8nKvSauuvqI+GqSDHvQxSY4A6XnEkgpxIV5EH+rE10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcEy4kqY1bjWckCQiVC8APo55pbMB8GA1UdIwQY
MBaAFBA42s6XCFywt30Dm9Df/lbCaKJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMt
OWE5YmMxZWE2ZTNmLzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMtOWE5YmMxZWE2ZTNm
LzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtY4EBtLu
OE8WPG3q40q29gE+VOojlqevFACpiM6Y2s1VNOW0xcP2qsjc56Be72RRwN5fIGw3
qGiNpQv/wPvmIpvTlFHFxbZKIwW1VefSMgRUECVHzl3VvpVkmFtvWX5bd+l9730u
YSStt/LCgYfY6ykTX17ZqDrOTylp4P/uTtd0D6z6WybU064eVh4K2NEujCLo33P0
NbBi9QAk7UJwGyY62C52h0R2olyxrBTytcGF0HFG0+C2vCaq+8TDQZY21wgNPdry
1uhCjrNtyTgoMRNzB4XicoFEp45bLCTZhrThCyjjci7tlaBvhhbl6A/nYFjcBe+o
ZWBY8qisv6i5aQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:17 2025 by rpki-client