Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: Ym15u6ydl0fLNN+taPIfbwfndmf4H+VN4yseyIukJH8=
Subject key identifier: B1:62:16:46:AF:49:03:82:2E:A9:48:11:F3:70:91:3F:38:A0:8C:F4
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 0197B77C405A9348B2866CF87CD7B1B5F5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 068E
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: FTK/Cg0Gm48NrCrtZUv5c9FYO+q1GaUOltiMUqilN7s=)
2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=)
3: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (hash: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:5a:93:48:b2:86:6c:f8:7c:d7:b1:b5:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=b1621646af4903822ea94811f370913f38a08cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:d4:bd:66:2b:98:e2:a5:ac:4b:78:c7:53:
63:09:76:89:8f:25:e9:db:2b:d3:a9:29:85:d9:0e:
9e:c4:b8:3c:c9:9b:e0:63:be:82:7e:72:a1:e9:0a:
c1:4c:35:c5:7d:20:39:33:ad:0d:22:f1:d8:4e:c9:
3e:6a:92:10:7b:3a:2f:ef:a9:16:eb:9b:a0:8a:7e:
cd:23:ea:8f:d0:f2:43:2c:b4:a7:bf:45:a1:9f:ad:
76:25:c0:e4:1f:db:62:4d:fd:66:c9:f3:ef:b5:4e:
f8:63:13:6c:3c:39:50:ec:b0:75:57:05:0c:0d:7b:
08:0b:9d:8d:ec:7b:89:e8:ec:47:e4:17:0a:f1:97:
19:96:23:cc:3b:a5:fe:b2:f7:91:be:55:dd:20:ec:
5e:17:d8:ab:b2:b8:cc:ea:e6:62:f8:af:5c:39:c6:
2f:8c:55:e2:bf:00:0c:80:25:99:aa:a9:f0:1e:01:
9a:e3:95:9e:ce:89:b8:39:51:57:85:6a:cf:a0:d0:
14:27:0f:7e:b3:6b:09:fc:4a:67:14:50:ba:8b:45:
78:67:d3:f1:b6:7f:70:0e:c6:01:98:ff:a1:44:0d:
8f:ef:22:4a:b0:96:1d:9f:9c:bc:6e:10:b9:f6:40:
62:57:96:5f:14:85:3f:c4:43:67:05:ce:06:e6:05:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:16:46:AF:49:03:82:2E:A9:48:11:F3:70:91:3F:38:A0:8C:F4
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:2a:15:c9:29:0a:25:d1:a2:8a:bf:8f:95:04:07:f1:a4:
a8:31:7d:50:4c:b3:d1:56:de:4e:7e:61:76:d7:ae:20:fc:09:
9b:df:96:f6:28:ee:d7:4f:a1:f7:99:dc:a8:5a:82:94:ab:f1:
df:db:3b:87:b2:b6:c5:cc:ff:4a:63:82:14:a0:28:28:69:95:
65:3f:a3:93:7f:0a:cb:bc:0a:c5:24:23:a1:dd:c0:b2:81:be:
b6:90:4a:f8:44:9c:a7:06:cc:50:2e:fa:a2:24:28:28:a3:58:
18:07:85:4e:5e:3d:d9:2b:33:6e:e4:c9:a8:a7:72:68:18:c1:
94:f4:00:c9:d2:e9:70:88:19:d1:c4:a0:f2:49:0a:69:ac:cf:
d0:26:89:06:6a:b5:06:82:55:7c:b3:86:7d:98:53:9a:d2:26:
33:8c:38:2f:39:4b:b6:5b:b4:48:5c:11:10:61:02:11:6f:88:
27:45:c5:30:ca:05:10:ea:9a:d6:87:44:87:5a:09:5f:21:bf:
2f:d3:50:dc:ca:55:b1:b5:22:73:c6:3b:96:75:1b:ff:1f:b6:
b5:69:d2:21:f9:7a:00:be:c1:dd:f7:94:bc:0b:a7:6a:b9:b5:
78:e7:52:3d:41:01:26:f9:bb:0b:f9:b8:fe:e7:7e:92:14:82:
70:5c:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:35 2025 by rpki-client