Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: 371yjpW5ErvKsTX97sQ2EYtElq9T5xxPA3gUyPC2oIA=
Subject key identifier: 4B:7D:CD:99:60:77:51:B2:69:7D:ED:88:F4:57:1C:6B:50:3C:ED:D0
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 0197B632E22B9869BFCA9ECCC65110B03115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 0E28
Signing time: Sat 28 Jun 2025 11:01:17 +0000
Manifest this update: Sat 28 Jun 2025 11:01:17 +0000
Manifest next update: Sun 29 Jun 2025 11:01:17 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: FC2II+1NZpVBCI9tOlGjHb9/K++Gw5H/Bfy/cTOEgLs=)
2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e2:2b:98:69:bf:ca:9e:cc:c6:51:10:b0:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Jun 28 11:01:17 2025 GMT
Not After : Jun 29 11:01:17 2025 GMT
Subject: CN=4b7dcd99607751b2697ded88f4571c6b503cedd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:18:13:52:34:5f:07:d9:03:98:1d:37:79:
5f:88:98:74:df:80:2f:3f:58:e2:68:be:52:07:48:
90:40:ed:af:37:4d:11:96:dc:4b:60:2d:e6:b0:ee:
c6:90:42:fb:76:b6:f4:cc:2e:ab:d1:65:21:8d:5f:
89:12:c7:e3:ce:c4:02:b1:78:97:fe:79:ea:47:fc:
63:19:6e:65:f1:c2:cc:b0:ca:29:75:a1:f2:33:05:
d4:c2:5f:c9:48:ae:d4:68:fc:a8:b2:b1:aa:82:1e:
5f:b3:02:6d:3a:0f:37:8a:e3:ca:b9:37:2b:76:dc:
38:bd:af:7c:d6:21:ca:07:c4:63:96:98:ba:95:63:
4d:f9:71:1a:9b:d0:d3:b2:f6:39:e0:f7:fb:ac:9b:
f6:38:bd:c2:92:58:2d:73:0b:f1:a8:80:0a:98:3c:
ce:81:8b:d5:5c:dd:02:9c:61:8f:fa:87:6c:ca:7f:
d7:57:ea:c1:82:56:a7:5b:b8:e7:be:f3:09:91:b8:
68:5a:ef:28:38:a5:81:33:a3:0a:68:20:05:ed:07:
de:c1:0a:56:36:09:e6:55:54:1e:6e:55:0a:ce:4f:
b9:9d:88:7c:49:5b:54:42:f1:c1:09:e2:57:49:bd:
c7:2a:e3:96:4d:9f:41:3a:13:5a:f3:c7:62:c8:4a:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:CD:99:60:77:51:B2:69:7D:ED:88:F4:57:1C:6B:50:3C:ED:D0
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:16:7a:9f:d2:7d:8f:03:af:27:d7:cb:92:08:15:cf:ac:
19:a1:fa:75:76:b6:b8:fd:16:f6:62:d4:6e:e5:a4:b5:35:9c:
52:57:27:f3:f8:fa:c7:61:01:34:76:cd:3e:96:20:45:58:58:
04:99:67:61:55:07:5b:39:0a:81:6a:88:ff:1d:95:29:9b:38:
0b:2a:57:76:90:0d:a1:da:b2:59:8b:df:e9:43:37:78:93:31:
09:eb:e0:20:93:86:66:26:e2:0f:f3:53:84:e7:ed:5e:0c:69:
82:f6:f2:e4:5e:dc:6d:fe:1f:39:bf:ca:d8:67:f5:f0:03:30:
b5:b8:73:74:de:3b:57:11:c0:cd:39:98:4b:5f:d7:ae:cb:6b:
e8:59:a3:0a:c3:70:2a:f2:fc:5f:90:a7:54:e6:80:94:bf:3d:
bb:98:8a:72:b5:90:f5:81:00:f9:16:c7:e1:92:2f:77:db:77:
31:bb:d1:ac:9f:24:a1:71:56:e9:6b:02:de:5e:27:0c:2c:66:
7f:b9:95:8f:4f:37:29:a1:a9:62:19:39:85:6f:68:71:83:ed:
a9:e0:7b:d5:ef:54:aa:99:9a:bf:11:d0:2f:ec:ef:0d:21:18:
80:e1:40:44:df:7d:65:aa:ad:7f:4b:05:43:ed:49:d7:17:04:
bd:f9:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:55 2025 by rpki-client