Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: HaI3GjkgQ89c+dCB4gYtWOwlt32+tyhbmLpAESahgQo=
Subject key identifier: 6E:40:0F:4C:87:2B:50:9F:7A:53:67:9C:CE:15:49:E9:AA:6E:AC:BC
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 0197B77CA6588EBCD7B802BAC4877437881F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: m/CK40sBjlzV538MJ0p2In7D6dHFDGHQ3SbuHLXPJlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:58:8e:bc:d7:b8:02:ba:c4:87:74:37:88:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=6e400f4c872b509f7a53679cce1549e9aa6eacbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:bd:53:2f:c3:2d:38:c0:b4:20:91:fe:60:
60:34:a7:42:81:3c:9e:13:e1:cd:30:d3:87:99:72:
a1:82:81:d5:be:3a:17:e8:49:cf:95:23:60:85:e1:
db:d3:ba:d9:ce:c3:f5:4e:b2:d6:36:4b:01:2d:2f:
62:50:f5:10:3d:6c:a7:de:96:b5:f6:64:44:81:cf:
66:68:ff:3f:82:4a:f1:75:80:1f:c7:1c:1f:3e:ad:
d9:5a:8f:fa:45:a6:01:0b:57:63:e2:70:c3:71:8f:
28:e3:ea:9e:a0:76:0e:b9:87:93:83:6a:40:d7:c5:
9b:2b:84:d4:96:41:19:22:3a:2c:b9:52:4c:72:0f:
45:5e:e7:56:3a:10:a6:2f:a6:38:b5:a2:c6:5e:d3:
18:ab:37:38:21:80:e4:96:1d:26:6f:a4:06:45:95:
75:1f:bd:58:a1:f0:54:2d:8e:39:ab:f3:38:7f:1f:
63:25:92:6e:c5:2c:4c:1f:80:44:89:fd:a6:41:39:
0f:37:76:fe:41:ee:c9:c3:4c:06:04:6a:d5:ea:09:
e4:e4:37:ed:dd:eb:3f:c4:1d:99:8c:84:e2:7c:4b:
6e:0c:e0:f2:aa:0b:50:fa:25:2b:aa:d2:89:8d:cf:
f3:3f:f7:3f:8f:51:cc:3c:86:b6:f5:63:e4:06:82:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:0F:4C:87:2B:50:9F:7A:53:67:9C:CE:15:49:E9:AA:6E:AC:BC
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:23:0a:64:00:a8:4d:bd:63:4d:de:1d:ca:8d:71:60:d9:
40:95:55:9e:34:85:30:7c:27:5e:17:f0:0c:ac:3b:73:d2:5c:
95:c8:aa:bc:84:c7:d1:55:6f:9a:a5:93:50:55:49:89:85:53:
c5:e8:b9:c7:b3:5b:52:4a:91:fc:cc:c0:86:73:52:19:24:b7:
5a:db:48:d3:23:3f:4f:db:8e:f4:48:31:6b:ac:e6:62:a5:0b:
fd:9c:9e:a5:19:fa:6e:4d:bc:59:b5:a3:b7:5a:c3:fd:d9:48:
7c:5c:3f:9f:e4:7d:db:66:27:f7:15:08:2e:d8:c0:40:12:25:
99:88:8b:94:e5:78:44:8d:72:56:df:2f:6c:c9:af:7e:23:52:
60:e2:38:b7:42:e7:8f:03:c1:13:e7:80:e0:fb:3f:e1:49:58:
05:34:f9:e6:a6:1e:4a:81:f2:da:5b:02:fb:f3:e5:79:b8:29:
0d:de:a2:73:29:dd:a9:33:be:29:b8:93:6d:81:49:fa:9f:98:
ab:8d:48:3f:f3:aa:b6:e8:48:24:b5:ca:2d:95:ab:2b:2d:02:
87:4d:22:2a:65:b6:5a:09:8c:12:0c:c7:94:fc:a5:31:d2:2a:
b4:3b:59:09:4f:94:70:07:2c:ee:73:e9:6c:46:3e:1a:52:1d:
f8:90:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:43 2025 by rpki-client