Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File: _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier: SXidSuOEy/vA3BBvXMjEw8gz52YUJYCibot1LHzGxic=
Subject key identifier: 97:CB:28:C1:E4:1C:64:B4:4A:E8:EB:3E:04:1D:37:91:AF:69:62:3D
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 0197B74599A83B83C984BD012EBFAF275E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number: 06EA
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: 4EKUe9SVPTU4mt6FrvFACbYWcbQ.roa (hash: YP9igzME/GGfZDeRMuL+AMEtoo6mjl93HYjdcrLZNQs=)
2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: LbknaLnHRmexjmDWaQ9Z5Utduwz53TKbI+YMtH+9sXk=)
3: ayiC7c9JSDSYAte-6gKWmswRL1g.roa (hash: N4Ywh1vQ8Z6soe1aZWnO6hNzvUy4X9gXJ0IBilSgbak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:99:a8:3b:83:c9:84:bd:01:2e:bf:af:27:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=97cb28c1e41c64b44ae8eb3e041d3791af69623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:fd:bd:cc:c5:14:31:33:04:49:c5:72:1d:
70:1e:ca:93:ed:d9:eb:06:20:08:7d:cf:ff:30:83:
10:72:3a:dc:21:fd:a2:68:2f:59:25:98:a8:ed:39:
8c:58:b3:a6:d1:1e:90:78:59:48:e3:b4:ff:47:8f:
3f:56:81:bb:ac:f6:cf:34:8f:2e:08:ab:59:18:37:
d0:7d:52:48:db:a4:5a:8d:49:34:7b:7a:3d:95:a8:
2c:f9:1c:82:1c:5a:16:ce:0c:51:78:ad:a6:99:e4:
09:e5:36:2f:55:56:eb:eb:d6:4c:73:d1:eb:6d:d8:
20:7e:15:7a:04:3d:a5:b2:6a:c8:1e:92:4b:ad:ee:
c7:a1:af:44:7e:5b:fc:1c:18:c4:15:ec:0b:99:8e:
dd:7d:2c:88:36:80:04:a8:72:24:70:9b:9e:5f:3e:
51:17:f0:d9:f3:ed:ac:de:61:0f:25:38:75:76:f9:
76:aa:42:ac:54:90:1f:e4:b3:0a:3f:6e:a2:3c:b5:
05:89:3c:5b:ff:5e:98:55:0f:a6:3e:00:28:10:c3:
c3:69:84:2f:5a:ef:d1:d2:c0:15:f0:48:55:89:70:
fb:4d:33:b0:3c:08:a7:81:c6:fa:3c:d9:06:51:66:
8d:32:47:31:c1:67:70:20:2d:99:a3:13:b3:bc:93:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:28:C1:E4:1C:64:B4:4A:E8:EB:3E:04:1D:37:91:AF:69:62:3D
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f4:6e:eb:49:5b:ac:85:9c:93:1c:cd:5a:3e:de:0e:11:b9:
e4:62:a3:84:67:38:87:ab:d9:04:ae:92:02:7a:44:06:22:8c:
8b:56:28:0f:03:89:ce:a3:2f:2b:ca:09:45:a8:c1:b3:39:3f:
56:ce:35:f5:f9:57:24:38:1d:c1:34:ee:23:9f:e8:e1:7b:62:
67:a4:6a:e0:9e:93:9c:32:29:51:23:a2:50:f1:25:62:29:df:
a2:3b:78:9c:b8:7b:03:6b:d5:18:59:76:39:46:8d:5f:0c:fe:
49:be:8d:8c:bf:30:78:ff:ff:1a:91:0b:e2:54:0a:90:5f:f7:
47:f3:7e:1a:8c:12:40:f3:79:88:97:3d:82:cd:8d:f9:2d:69:
05:6a:c0:0a:9c:2d:d6:fc:1c:07:5a:2b:a0:b3:2f:8f:ec:ad:
96:6c:17:39:ba:c4:21:2d:c5:73:56:a5:6d:d8:2b:5b:96:59:
6c:f3:c5:f3:16:b7:82:97:f4:ad:0e:76:d2:62:12:22:dc:ba:
4d:bc:a2:dc:49:29:ef:95:ed:b3:a5:8d:7c:94:49:3c:5c:d6:
3c:61:84:c1:b5:b2:41:93:6d:14:cd:bf:a3:38:bb:76:a3:0e:
88:b8:aa:77:d6:b0:a9:b6:35:45:17:ca:14:08:d5:f1:9f:73:
67:3b:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:45 2025 by rpki-client