Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: dO1pDIPzrN0dAxaFTMFVqCmDDhs4AQSRIAhhtsYOscs=
Subject key identifier: D1:6E:A8:AE:55:9C:23:6A:C7:DE:36:F3:7F:EA:FB:8C:03:1D:80:05
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 0197B70E63E70884C86B9DA4A4705A07A4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 013C
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: ye5EI4nyrWd82ao88yPPw+m7q80UtGGmZm6Z9dWpyWA=)
2: W66TeYTw-t7EMoHzkCaUwVfLkDI.roa (hash: Ox2U/eJQb+R2Hy97s4rI93U5aSqmhZSgt5Xa460suhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:63:e7:08:84:c8:6b:9d:a4:a4:70:5a:07:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=d16ea8ae559c236ac7de36f37feafb8c031d8005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:99:4d:e5:ee:aa:5a:06:bd:1e:6e:30:40:
75:c9:3c:21:45:b9:ef:0a:38:ed:08:e1:02:32:76:
af:e3:b5:06:18:44:3c:51:c4:27:2d:f7:5d:be:46:
2c:f6:ce:53:fb:22:36:42:12:65:db:cc:38:97:bf:
08:13:43:04:cf:c3:36:c4:0c:35:28:99:a6:ca:41:
71:1b:59:a0:3c:aa:22:95:05:c4:f4:b1:d5:5d:23:
63:98:53:6b:2d:78:83:81:ff:99:ad:72:fb:71:5a:
ed:2b:bc:7d:c2:d8:04:fc:c0:dc:a8:43:c5:1b:4b:
bc:1c:99:eb:cd:56:97:cc:8c:4b:33:c9:e1:97:73:
8a:ac:6a:14:aa:6e:37:ec:46:15:6d:80:77:65:96:
d4:0f:b3:b1:4a:9a:fe:80:40:cf:3b:fe:dd:b6:07:
0b:10:0d:97:7e:14:15:8e:05:24:36:bf:e7:ff:78:
c9:a7:29:3e:a4:d2:ab:2f:40:8d:f1:20:b0:3d:db:
f9:78:32:4c:aa:4a:35:b1:0c:ec:35:cc:27:a2:8d:
90:c6:a2:b9:ef:18:dd:a0:9d:13:2f:02:52:69:8c:
ab:55:22:28:a2:3f:e0:b1:db:82:21:9c:46:72:f4:
4e:5e:29:e9:0c:69:3a:a3:8f:be:4a:32:20:cf:b0:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:A8:AE:55:9C:23:6A:C7:DE:36:F3:7F:EA:FB:8C:03:1D:80:05
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:d5:d4:79:a3:c8:09:a1:be:05:28:69:5b:61:dd:67:f2:
2d:04:d8:ef:64:dd:53:69:a7:d7:2e:ab:06:c1:f1:cf:5d:12:
ec:93:6b:8e:d7:ad:6e:63:bb:7c:19:5b:a1:e8:79:d8:d4:d2:
74:1b:65:c1:f0:b3:78:78:f0:d3:39:a8:ae:56:6c:6e:52:11:
8d:fd:79:6e:d1:ab:ea:19:dd:4d:3d:05:19:01:e5:0b:e8:19:
93:4a:a6:a9:a1:35:cb:76:48:04:8e:c3:22:14:df:34:46:00:
0a:85:50:e8:c7:1f:a0:f8:4e:2c:b3:61:20:0e:27:80:04:d5:
46:aa:e5:82:b1:12:29:7d:bf:42:97:29:b4:20:1d:06:d8:1b:
12:2c:11:fd:80:94:b7:13:9f:44:c6:24:06:f8:d2:04:35:bb:
b7:14:4e:3e:86:d5:6b:92:5d:1e:b2:77:cf:61:0d:23:65:18:
ac:e4:2d:aa:57:0f:e1:29:06:eb:dc:7a:32:6f:43:22:c2:9d:
1f:ae:34:19:46:a1:99:28:68:75:ba:39:c6:40:88:6a:62:a9:
f2:de:59:4a:1f:d4:63:9c:6f:66:0a:56:8b:07:fa:39:dc:24:
12:86:88:4f:84:9c:cb:25:c3:a3:af:99:b4:87:8c:a4:9f:09:
79:d4:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:44 2025 by rpki-client