Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: pErBWWrRubIHaDPSNgCc2cVI4pNcZCNbUz4ZYv3H+S4=
Subject key identifier: 3D:2D:C0:B9:C9:93:27:A7:A9:9E:AB:88:E5:49:EC:89:4D:CC:71:4D
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0197B7EA9B083464048F01C0D742E9D9ACD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 048D
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=)
2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: ywbjZyXMrx2ZgFWZEYnXbFpXndkDHSdMctvJCK5ict4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9b:08:34:64:04:8f:01:c0:d7:42:e9:d9:ac:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=3d2dc0b9c99327a7a99eab88e549ec894dcc714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:1d:ae:53:62:93:18:96:63:6a:28:d6:80:
7d:5c:54:35:11:2a:20:e3:a5:06:83:ad:c1:52:1e:
4f:94:5d:13:a7:5c:81:ea:f4:dd:bf:54:ab:ff:b2:
ec:08:d4:cf:a2:3e:0f:0b:95:54:78:00:62:1e:60:
d2:e2:8c:9f:f5:06:fc:d1:15:88:6b:c0:0a:42:6e:
b6:21:00:8b:ae:d0:e8:ab:50:ce:f7:01:17:d9:ca:
b8:5a:b4:0f:f1:4c:14:e7:1a:50:0a:96:9a:dc:00:
9e:6d:04:c1:e9:84:f7:28:0d:fc:02:2d:51:8f:1d:
82:58:db:10:f2:56:7a:52:4c:a9:1b:9a:0d:2c:8c:
3c:e7:c1:24:8e:73:34:bd:98:05:ba:fd:c1:64:e9:
c7:23:49:27:fd:2a:0b:9d:0d:d6:b6:d2:53:94:0e:
f9:09:bd:cf:16:8b:a7:d2:c6:d4:2b:e0:92:1a:e3:
f3:24:01:1c:93:4f:e8:77:78:d1:44:d5:e7:1d:97:
83:ff:77:0a:f0:11:94:c8:7e:b8:85:b4:28:b2:2e:
df:33:f8:5a:9b:43:89:7f:7d:e0:40:ed:52:5b:1f:
0b:5e:8c:51:07:60:73:7d:b0:81:e4:7c:90:6d:fb:
20:44:4d:0b:83:84:93:14:7d:48:58:08:3e:81:08:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:C0:B9:C9:93:27:A7:A9:9E:AB:88:E5:49:EC:89:4D:CC:71:4D
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:70:f0:84:5f:0c:ca:c9:54:c2:07:51:be:3b:88:8b:b2:
39:1d:39:07:28:01:d5:20:66:0b:27:53:49:21:ca:f7:b8:59:
7c:41:52:69:a2:de:e4:6e:45:8a:4a:52:79:a6:0c:4e:88:63:
6d:e6:e2:ee:2a:32:ef:d5:08:ac:26:94:76:dd:f7:cf:45:03:
89:10:80:80:b6:11:db:75:64:6f:0d:c5:b9:c6:63:e8:fb:0e:
89:ff:d9:5b:a6:b4:01:6f:84:7d:aa:b1:b6:b1:21:10:05:b4:
ad:aa:0e:1d:5a:fb:0f:66:5d:14:63:af:42:89:bb:16:c9:c6:
b5:aa:02:54:19:e7:0d:e7:9a:a7:bd:8b:5c:2b:9b:9f:f2:50:
98:8a:1b:dc:65:56:36:62:e2:07:15:fb:92:14:b8:2f:7d:2a:
6c:2b:64:00:6e:8e:b4:ba:12:40:1a:99:13:9d:83:28:82:50:
65:ee:e6:c8:b4:02:61:aa:58:d0:60:23:3d:e2:ab:0f:09:54:
66:4c:b7:62:37:1b:0c:00:24:b9:3e:10:07:37:f9:88:3b:c5:
f5:eb:fc:2b:f0:91:a4:b0:55:a7:19:f7:d2:85:af:64:60:b7:
f0:90:87:98:17:30:23:41:d3:11:e4:7c:e4:56:69:8e:f4:de:
cc:dc:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:56:15 2025 by rpki-client