Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: wMRme/SVcJcNSvQxmtEHJdn2cH/0cANWKDsYUAN9cjM=
Subject key identifier: 34:07:47:72:BF:C3:68:FC:A8:93:93:3E:CC:5B:A5:8E:E9:E3:27:BF
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 0197B70F1A17868B8E3A8333E324347AE40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: oU2B9V8i4juINxQWplNY5hZ0bHqIKb+CscIU/cJu0ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1a:17:86:8b:8e:3a:83:33:e3:24:34:7a:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=34074772bfc368fca893933ecc5ba58ee9e327bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:55:62:c0:54:09:9f:f1:1c:7a:07:8b:28:
b9:c4:09:86:b7:84:3f:45:71:20:d6:c9:6a:4f:ff:
56:66:5a:dc:05:ad:a3:00:40:36:db:86:ed:12:5f:
5b:a5:48:a1:db:d1:41:6f:44:bc:eb:1b:d3:3f:d7:
29:c7:2f:48:8a:12:f4:40:0c:2b:55:65:6c:90:e9:
43:6e:91:20:cb:0c:18:29:5d:d4:34:a3:44:7d:38:
5d:e8:0d:5d:27:be:1f:c4:d6:9d:f4:37:b7:d4:46:
57:af:8f:98:94:60:4d:fc:6d:14:ef:f6:3b:ef:50:
de:39:22:4f:14:2e:de:37:77:d5:a3:ba:a5:81:49:
b6:fe:38:bf:c6:94:4f:f8:1f:c6:b3:e3:c0:00:c8:
29:e7:1f:e7:12:c0:0d:4c:82:ea:ed:86:56:ed:c4:
80:1c:86:8f:c3:5b:ca:45:25:b9:93:25:3d:61:10:
01:ed:08:db:80:0d:b2:58:55:91:16:bb:99:75:06:
ba:7f:ae:24:a6:b6:b3:e2:4e:cd:c2:81:35:17:5e:
4e:bd:db:cc:96:18:bc:cd:5d:0f:23:d4:41:af:23:
fa:c5:31:83:e4:aa:d4:cd:22:db:bd:d3:c7:07:b1:
2d:7c:d5:2f:60:25:90:5f:a9:20:f9:92:7e:f0:f7:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:47:72:BF:C3:68:FC:A8:93:93:3E:CC:5B:A5:8E:E9:E3:27:BF
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:95:be:41:18:3a:be:2d:34:7f:12:59:7c:0a:85:17:1b:
40:f5:89:24:87:b8:16:d8:6a:3b:6d:3d:71:d1:8f:f5:49:b7:
db:29:3b:da:3d:b1:5e:bd:94:4e:73:a6:ab:e6:0f:3a:d7:f0:
cd:f3:29:0e:41:a6:3f:5b:ef:be:8d:74:84:83:57:53:94:74:
18:b4:e6:3a:86:26:f6:ec:dc:c9:61:3e:fc:1f:21:5b:90:12:
12:ec:39:df:b8:75:92:8d:31:fa:3d:90:a7:a6:bd:a9:ed:49:
e4:f3:1f:68:0c:dd:d8:58:bc:88:0c:70:b9:a1:37:35:b2:51:
35:10:3f:51:29:96:5d:bb:95:7f:d5:67:61:ec:97:30:e9:52:
21:6c:66:75:bf:d4:bb:a6:e6:d9:57:8f:c1:4f:24:e0:ca:47:
3d:6d:c5:74:7f:2b:4c:72:5a:65:d5:53:53:38:f7:ec:d0:6a:
90:6f:7a:a3:6d:b1:90:7d:47:04:f2:ee:15:45:93:0d:a8:8d:
be:59:bc:72:32:26:86:2e:49:13:37:16:5a:b8:a3:8d:b2:40:
6e:50:14:87:13:5a:e3:98:2b:c3:bb:60:3f:dc:be:50:f9:fb:
09:cc:4e:5d:41:a1:a4:70:55:f5:ef:6e:e1:d8:85:04:dd:36:
6c:aa:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:08 2025 by rpki-client