Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: /v4ozKL1i2Y7qR5RytavQtz6tTu5kX3VuhXgzeL1arg=
Subject key identifier: D4:31:55:4B:EB:81:93:12:D4:90:CB:4C:B7:DD:33:9D:88:F2:4C:17
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 0198D6603363DA3DE1BC17590B77B7CACA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 12FA
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: AqyMsfpTqbjF8AxQm03HXLp9J3/2zugV0wYRYRt/h/0=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:33:63:da:3d:e1:bc:17:59:0b:77:b7:ca:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=d431554beb819312d490cb4cb7dd339d88f24c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:31:5d:89:bb:bb:8e:f5:6c:b9:a3:8f:c4:
f1:f1:38:ab:0c:3c:6f:dc:ea:a0:e0:86:5e:9b:7c:
29:90:ae:bc:1e:03:eb:37:a9:dd:81:4e:60:dd:81:
22:e8:cf:ff:b9:6c:ff:24:71:aa:32:db:64:66:02:
86:b8:61:e9:fe:b7:ff:95:88:b5:8f:0e:31:a3:cb:
6d:d9:61:64:73:09:39:cb:7c:aa:9c:9e:2c:3c:24:
40:6d:9a:2e:7e:5b:0a:42:20:27:16:5b:8d:ea:63:
03:f5:21:7e:ad:e4:3c:2d:52:d7:5f:e4:dd:57:30:
c5:3a:34:7e:80:01:6e:16:60:54:b9:1c:b6:25:9d:
2b:c6:37:06:5d:39:8f:43:bd:46:0b:b5:31:03:2f:
31:f5:3e:96:d6:63:60:84:c4:c8:5e:79:ff:99:80:
3d:4f:2a:c9:ca:c2:48:91:00:39:f9:f7:64:3e:da:
4f:f5:85:95:d8:79:b6:22:0c:08:6e:9b:43:e8:21:
49:a9:1c:23:3b:65:6f:2b:f4:75:f3:98:5c:7b:fb:
ea:2b:bd:c2:a0:3f:36:5c:3a:09:78:4b:f6:76:69:
67:05:6f:0d:86:e5:78:ca:92:dd:5b:56:95:d1:7f:
67:28:7f:3f:33:82:69:1b:f7:c0:e7:95:f7:d1:54:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:55:4B:EB:81:93:12:D4:90:CB:4C:B7:DD:33:9D:88:F2:4C:17
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bc:61:2e:f7:30:b5:44:c6:fc:3b:11:22:39:9b:e0:3d:fc:
2b:a2:43:00:3a:7b:04:c3:2f:36:2d:d7:89:1e:67:d7:3c:b4:
24:1a:1e:6e:18:ec:6d:85:02:7c:5f:28:f1:03:1b:28:47:27:
08:33:77:0c:1c:9a:9d:2f:0b:27:37:ac:2d:46:c0:c6:4a:a0:
2c:80:41:a6:fe:67:b3:ac:87:c1:ae:27:ea:85:d5:bc:2a:54:
01:13:13:20:24:d3:0b:97:c7:3d:b9:db:5e:2d:c8:aa:88:d0:
f2:83:92:ad:ba:1a:e4:79:c2:1c:2c:d8:be:bb:f1:b4:40:f8:
30:e3:53:b1:ab:60:0b:52:47:42:c4:c3:87:a1:9d:d5:45:ab:
be:a8:ad:f3:df:02:68:88:14:8b:62:42:6e:ad:cb:3e:aa:da:
b7:e3:49:d1:62:f1:20:f1:4a:99:7b:05:4e:57:92:c7:3b:34:
7e:c6:49:0b:d7:12:1c:41:1d:7c:81:71:7a:68:31:f8:7d:f2:
14:df:12:46:b5:63:f3:50:c4:1b:4e:a0:e2:d1:28:7a:7c:e6:
43:3f:ae:6c:80:e1:6e:f9:d8:5e:88:7f:6a:0f:ca:8a:54:29:
3a:20:6e:60:22:8f:06:d8:a0:a4:85:ce:e9:79:50:1d:92:da:
eb:f0:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:09 2025 by rpki-client