Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: bOmd/sTWoiz5pwLvjYuo/93OsVMs6zKMQuitHLPO81w=
Subject key identifier: A2:C3:4E:96:4A:52:51:A1:67:14:D0:16:3C:72:43:8F:8E:2C:ED:10
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 0197B7B32E4E3F479A7D252B91BE8CBCFBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 01A0
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: blimUyd28a1/QfEqU/m3gwp6UEcz2IRKGj/UeHhDZjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2e:4e:3f:47:9a:7d:25:2b:91:be:8c:bc:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=a2c34e964a5251a16714d0163c72438f8e2ced10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:50:d7:bb:f8:e7:af:61:f7:35:4f:90:1d:
fb:09:c3:13:d3:df:ec:9c:28:3f:a1:f3:db:a2:74:
77:1b:ca:14:70:41:63:14:b9:d5:7b:11:87:0a:c7:
6b:e6:73:89:94:65:de:87:77:d9:31:c1:7f:e2:a1:
76:37:24:a8:c2:73:53:89:f6:16:f9:ef:84:b9:83:
eb:cc:4b:d5:a3:2d:9d:f9:c8:91:88:88:bb:31:aa:
b7:be:55:79:49:17:de:ea:42:0a:8d:bb:22:b0:40:
02:fd:e2:d6:f1:fc:43:24:99:55:d6:c3:b4:67:cd:
0c:86:c5:05:d3:9c:46:f7:ff:ce:d4:bf:c0:e7:eb:
be:34:5d:ba:0a:b3:62:77:48:e5:8f:70:40:c6:95:
ab:49:c9:9d:2b:de:c4:e1:a9:73:cd:5a:4e:a7:0c:
09:9a:aa:6e:ec:4d:09:9e:59:5d:3a:91:f9:a1:ec:
92:ff:dd:5c:99:c2:fa:a7:4e:f7:4f:9a:2b:50:c5:
d3:02:a6:d8:4e:14:8f:f0:df:89:8f:fc:c5:1a:d8:
ae:53:42:04:d2:58:8f:59:0f:4d:62:ad:60:cc:1f:
08:92:75:6c:09:0d:c9:3b:48:25:e6:09:1a:47:a5:
42:4e:d9:8d:99:9c:65:3c:a3:45:a6:bf:dc:a5:20:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:4E:96:4A:52:51:A1:67:14:D0:16:3C:72:43:8F:8E:2C:ED:10
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4c:4c:94:c8:3b:b1:82:d7:e9:ee:9e:59:22:a8:cf:5b:29:
f5:fc:e2:c8:b9:d1:7a:dc:1c:69:a2:ce:76:75:31:8d:42:11:
78:d1:57:69:e7:f0:e4:96:fb:21:87:b1:80:75:43:01:e8:ba:
33:8e:79:ad:11:81:e4:79:d7:36:60:88:1d:b9:7f:02:74:5b:
95:29:60:34:15:66:92:98:98:e3:7c:23:48:84:ab:2a:ca:d0:
e8:16:f4:92:e6:05:9e:27:06:ce:fd:7f:91:35:d8:48:8a:33:
01:95:c1:bc:93:4e:67:51:f8:0e:ed:38:fe:3a:cb:6d:d0:f8:
56:7d:be:fd:3a:f4:35:de:bf:e0:fa:4c:b8:d5:c8:fc:69:9e:
20:0f:0d:ab:73:97:00:19:eb:f0:7d:cc:d9:20:95:29:f9:e7:
68:c6:df:fd:db:3b:2f:d3:ad:15:ae:4a:fc:97:5e:e5:27:48:
a2:4f:eb:c5:f3:4f:cc:ee:3c:1b:4b:4f:0d:c1:f5:00:fd:98:
12:32:75:a1:a9:7d:82:20:7f:7c:c9:95:d9:4b:11:5e:33:49:
8c:8a:38:c9:23:72:e4:3f:e8:bf:04:50:3a:21:29:d5:f4:96:
5b:87:66:22:b2:a7:8b:8d:62:0b:5b:02:3e:68:60:ce:04:2f:
45:a5:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:20 2025 by rpki-client