Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: gI8WvpvQwiVx1/EWKhe8geD9HEoaxUVVYJvM7JoymWY=
Subject key identifier: 42:B9:43:A6:06:25:A3:6B:6A:6A:08:DA:9E:D7:7E:50:86:05:7A:35
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 0197B88FFFBE3C0E7E21664432A7CE6687E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 07C4
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: ukIyEd7Ws3ZgtDAHt82je508VUaWLEyw94npzuFxr54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ff:be:3c:0e:7e:21:66:44:32:a7:ce:66:87:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=42b943a60625a36b6a6a08da9ed77e5086057a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:05:0c:3d:9d:7b:1f:80:65:98:ca:f6:0d:
b1:1d:f1:c1:98:cb:27:e5:4f:47:31:46:23:a2:91:
04:89:76:49:71:28:73:dd:53:f5:2f:ad:9a:e5:67:
d3:cd:63:f1:e6:6e:76:61:54:46:d7:bb:fe:85:af:
a3:8a:aa:82:95:97:c6:58:60:0d:b4:65:19:b9:f6:
8e:40:ef:17:e6:c1:2b:c9:9a:2c:88:ad:8d:fa:06:
46:c8:8a:2f:f1:08:ae:f2:f2:7e:87:9a:52:66:7c:
97:31:84:1d:b9:70:2b:cb:60:a4:e1:46:5e:b9:37:
d8:f2:56:7c:8a:01:7e:90:4e:cb:8d:09:a9:97:cf:
c9:73:6b:c2:e6:b7:34:65:13:30:e0:e7:26:cd:01:
44:06:c8:6d:fb:25:71:70:fa:32:63:b8:7c:f0:8d:
05:8f:99:db:f7:3a:64:df:1e:19:f3:a4:f2:d8:7d:
d3:45:9f:d5:6a:ee:78:db:38:34:e7:b8:03:c2:a1:
5a:54:98:58:a9:6c:77:33:a8:14:7b:e2:a6:a6:12:
e3:ac:4e:a9:72:bc:18:54:2f:df:89:29:99:f3:bb:
ae:29:0d:c0:5a:1f:5d:f7:96:73:d3:27:97:12:3d:
29:18:f4:1b:45:56:aa:a6:ef:e1:e4:15:59:e1:f9:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:43:A6:06:25:A3:6B:6A:6A:08:DA:9E:D7:7E:50:86:05:7A:35
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4d:47:21:d9:fa:4f:ae:87:1f:99:b8:21:49:bc:4b:d4:26:
79:bb:90:b3:ba:a3:7d:8f:ba:17:c5:3f:9d:19:f7:89:fb:de:
ee:8b:ef:b4:d4:51:db:87:f0:11:0e:b5:f6:a1:59:fb:dd:78:
ec:9e:71:89:63:1d:c5:47:54:ae:a2:5b:09:de:cf:03:31:11:
6d:96:da:4b:6b:84:3e:e1:fb:5a:ea:ab:ec:85:58:70:bc:6d:
ee:56:2b:02:ce:2c:2e:c6:24:09:f5:87:76:7c:d9:67:b9:d6:
8c:4f:cd:08:2a:59:1d:41:94:a1:97:71:db:af:ba:7b:e9:06:
8f:64:9b:81:0f:c7:07:d3:8d:c5:9e:74:92:90:da:db:58:3b:
d5:04:3b:2b:b4:bf:3d:39:be:bf:b3:d1:5b:d7:82:95:3e:09:
c0:03:b2:fd:4a:5b:00:97:7c:67:93:f3:52:cb:93:ed:19:bf:
f1:0f:a2:9d:5e:c7:16:b1:5e:c3:23:ef:8e:bd:0b:fa:c5:3a:
20:09:74:81:ef:c9:e7:ff:60:82:76:b3:75:a2:f5:a0:29:2d:
a5:c8:50:27:c4:32:37:d4:c6:90:d9:8c:d3:05:07:cb:ba:d4:
82:47:ff:b7:56:5d:40:9d:7a:da:cc:dc:b7:08:25:3a:6f:6c:
77:70:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:06 2025 by rpki-client