Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: G00TKgBAc/6+a1EmU+cj8zPyiFgviDUWXCCVznRBXAM=
Subject key identifier: 43:2A:63:A8:A0:2F:52:19:EE:CB:A4:0E:3E:1E:04:A1:8F:1D:7D:A5
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 0197B7454F564E7F30F1A9FDEA5671E17507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 105A
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: 1nKc7KC1226yDA2XOFUucIAjCLVC9du+jlcxLnEAI0I=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4f:56:4e:7f:30:f1:a9:fd:ea:56:71:e1:75:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=432a63a8a02f5219eecba40e3e1e04a18f1d7da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:32:c4:d6:66:f6:2d:6f:a7:ed:f7:4f:ca:
e0:e0:f0:b8:b5:58:1b:4d:1a:24:66:78:e0:56:19:
be:01:d6:0e:4e:83:5a:72:ff:8d:eb:a0:90:f4:5a:
5c:09:a6:c0:a5:c2:81:bd:22:0c:6a:a8:86:8b:f6:
54:1e:b9:b4:93:de:9e:9a:62:bc:e3:e7:8d:bc:44:
e5:b6:a8:48:bc:db:39:07:c7:45:0b:3b:35:38:32:
64:73:ee:db:45:43:9a:17:f7:52:85:3e:9a:2d:69:
3d:d4:71:67:b4:54:f7:d3:46:c6:30:2f:08:b6:05:
92:89:fb:c6:51:dc:d3:af:86:1e:85:eb:47:6c:88:
88:19:cc:db:e5:1f:e3:52:e9:0a:a8:c9:41:da:1b:
64:cd:84:df:48:d5:70:7b:f3:c5:1f:6c:cd:24:0c:
70:6d:55:20:7e:76:39:ac:4c:0a:50:26:c4:7f:5f:
24:3f:a8:e3:6c:7c:c4:71:e8:88:c6:4f:2a:c8:9f:
23:cc:91:57:cd:17:e7:1c:20:19:ea:11:3f:3f:fe:
e8:9b:c3:24:75:2f:ff:ba:d5:2c:58:c2:ee:cd:1e:
5c:a8:b7:6b:9d:c9:ca:d1:26:67:5c:91:83:88:0c:
c3:51:81:58:fd:90:b3:8a:b8:71:ca:96:d0:4c:05:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:63:A8:A0:2F:52:19:EE:CB:A4:0E:3E:1E:04:A1:8F:1D:7D:A5
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3f:23:ab:d7:42:60:08:36:4c:ed:0f:41:e8:bf:aa:ea:a1:
55:22:00:43:ba:30:b6:7b:b6:78:46:71:9f:82:bd:52:a7:17:
72:83:c1:72:15:3b:2a:f1:5e:23:02:a3:db:f0:64:c5:32:4a:
24:e2:28:a7:94:91:bf:b2:8b:eb:2a:ab:30:46:bd:dd:a5:c9:
aa:9c:ff:53:79:3e:79:99:9b:4e:22:6a:91:ca:c3:90:18:b2:
dc:cf:65:91:f9:8b:44:01:ba:88:e9:3c:60:7f:8c:63:15:5d:
f9:6a:aa:f2:75:07:0c:d1:d2:19:94:4c:fb:ba:d4:07:40:59:
82:3f:ea:c3:ac:ff:d2:9c:88:09:c5:46:e0:71:58:e0:e2:78:
dc:f3:2e:3e:10:f3:81:a8:29:d5:91:64:82:39:20:50:54:88:
a8:f9:ff:6f:35:5a:76:8f:68:e2:56:08:64:f1:fd:70:8f:e7:
8c:36:d2:76:dc:bd:3d:ea:95:c0:75:4e:d9:64:e6:19:5c:37:
a6:1e:b3:ab:34:82:5f:48:f1:80:a5:54:70:39:ee:7b:00:91:
9d:94:64:5e:52:9c:8b:e4:15:9f:56:76:e3:1a:0f:e2:2a:1b:
e3:7b:9d:b1:fb:1b:4e:6f:60:a8:4f:78:16:f9:dd:3d:05:c7:
4b:55:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:47 2025 by rpki-client