Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: 6k7TQQnlaHYYoXz823gHxkVctDFbtc7x7ElNa1dWjqQ=
Subject key identifier: FB:B1:40:EB:B1:F6:DE:E1:C8:8C:75:79:43:70:64:AB:E3:81:8B:C2
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 0197B70F3572F01A268FF2FB44E5D0E49AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: SdfUozuaIKnjE7MXJIhjM0XMxPTSPHRlXm64PQjpPfI=)
2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:35:72:f0:1a:26:8f:f2:fb:44:e5:d0:e4:9a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=fbb140ebb1f6dee1c88c7579437064abe3818bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:b6:b0:88:bb:a9:a6:aa:07:60:08:66:ac:
f1:0b:54:db:83:fa:b0:a7:8b:7b:0a:d5:c6:3f:8d:
91:3a:46:1f:2b:17:b9:bf:fb:8f:e3:35:c9:6c:08:
dc:44:d8:ef:d3:04:c9:ff:61:47:34:88:66:f1:a7:
4b:bd:75:22:b5:9a:44:af:32:88:cc:38:07:e6:6d:
ee:08:e2:77:50:5f:5b:8b:8c:b8:db:79:e1:65:fe:
53:d7:cc:40:a3:02:c6:eb:a4:97:9b:5d:8a:82:be:
e2:54:a3:f1:0b:cd:3b:86:32:d3:25:0f:91:bb:2e:
11:d5:4f:5d:56:25:83:7b:34:79:dd:d4:5a:b5:07:
2b:6e:21:5f:0a:5c:31:37:ec:3a:40:d6:1e:e7:40:
d6:0a:c8:50:d9:4d:12:3b:e0:10:b9:2f:1b:dd:1b:
fa:f6:79:c4:d9:38:79:74:1e:1c:15:59:91:1b:fd:
92:05:13:92:fc:bd:a9:82:b7:16:6f:97:6e:81:b2:
49:8b:07:ce:65:0c:62:8a:5c:42:e1:c2:e9:c3:f9:
fb:60:02:0f:e5:39:ae:19:d4:ee:5b:d7:c9:45:ee:
84:cd:6d:23:93:84:84:d0:5c:95:b5:51:98:bf:76:
17:80:cc:9d:7a:bd:05:17:33:26:ae:e0:4a:97:56:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:40:EB:B1:F6:DE:E1:C8:8C:75:79:43:70:64:AB:E3:81:8B:C2
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:b5:04:ca:4e:78:30:51:16:f1:5c:5f:c0:29:14:50:c1:
43:7f:cd:2e:9e:ac:ce:f4:67:8a:05:41:7d:af:15:af:18:83:
74:d3:0d:f7:92:54:3c:f4:16:33:a3:c7:72:de:1e:ee:0a:8f:
3b:19:f3:c0:f7:38:d8:c5:25:72:3d:ec:6c:41:a6:7b:76:67:
55:fc:32:b3:57:ed:5b:86:d1:ff:b0:78:1c:98:89:b7:09:3d:
d3:d8:b8:13:21:24:c0:b0:5f:e4:c7:aa:c7:d6:56:08:a0:f0:
63:8c:84:02:53:a7:05:5a:07:c4:20:a4:c8:c2:c5:eb:d3:bb:
1f:71:9d:2d:a1:64:6e:f7:24:52:c9:aa:cb:d8:93:49:d4:85:
2b:21:23:82:4e:64:af:cb:27:10:3b:9a:e7:d3:40:4c:e9:d9:
b0:b4:e3:cf:56:05:6a:e5:61:8a:1e:bc:df:25:5c:06:5a:d9:
75:f8:d9:80:36:7d:99:36:83:09:1d:8a:e1:9a:17:d6:8b:57:
a7:83:b2:72:0c:66:c1:25:f2:a9:13:44:31:16:45:9a:13:b8:
f8:19:a6:ed:db:64:ea:d7:91:93:8c:9a:b4:73:f2:f7:c5:e0:
89:94:19:03:12:1a:0d:09:62:32:dc:c1:0d:06:4c:7a:4a:16:
9d:6b:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:36 2025 by rpki-client