Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: lh1QJLMjnID6NKC341iP8++mQaH98wXRQ/frB8csoyE=
Subject key identifier: DF:24:EF:96:4C:6D:52:AB:2E:C8:09:09:7A:2B:47:66:7F:5E:BA:B0
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 0197B632DF86E34D691F219313929D8C050B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:16 +0000
Manifest this update: Sat 28 Jun 2025 11:01:16 +0000
Manifest next update: Sun 29 Jun 2025 11:01:16 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: YzUNYcsZ8d7sjOGhJpQBKG3W042rYmF7B+w7KPlO8KA=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:df:86:e3:4d:69:1f:21:93:13:92:9d:8c:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Jun 28 11:01:16 2025 GMT
Not After : Jun 29 11:01:16 2025 GMT
Subject: CN=df24ef964c6d52ab2ec809097a2b47667f5ebab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:d2:b4:01:94:7b:3e:58:9c:86:75:ca:62:
80:fc:b9:d1:c8:5b:7e:a8:7d:9b:f0:67:78:51:bc:
28:48:35:35:07:5c:04:d5:a0:0f:d0:0c:44:46:a5:
4f:57:66:4b:15:3e:c2:3d:e1:4b:70:44:4e:33:93:
53:80:b3:39:1c:2b:d5:06:ee:c2:00:17:ff:4a:d1:
56:50:1d:9c:26:fa:ab:1d:cc:3f:64:a8:c4:eb:f6:
9f:4b:74:ec:24:8e:3d:30:14:cd:f5:37:1d:24:23:
38:3e:c1:0b:9a:b2:c8:fa:f4:24:41:43:23:5c:4c:
99:f3:d3:a1:c0:f0:da:a5:3c:b2:8a:f4:3b:d3:ab:
33:ca:ec:aa:b6:ee:cd:7e:70:41:35:f2:f2:7f:b1:
b8:7f:23:ba:ae:83:68:6a:44:d6:98:ed:df:64:e6:
88:86:75:fc:7e:83:89:07:f0:48:6a:cc:78:dc:09:
bd:d7:44:49:c7:6d:fa:b3:1d:b1:a2:6d:78:b3:3a:
48:29:68:b6:33:09:fb:47:cd:41:e0:f1:82:fc:0c:
4e:93:36:4e:59:e1:ee:7e:ff:0a:82:ae:30:ae:09:
b4:7c:6d:c5:01:b1:1c:a5:79:87:dd:ec:e9:bf:c1:
b7:6a:78:0c:31:87:c8:41:14:8f:e5:2c:60:a7:ce:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:EF:96:4C:6D:52:AB:2E:C8:09:09:7A:2B:47:66:7F:5E:BA:B0
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:eb:1d:44:c8:52:f9:1b:b4:2e:dc:69:c1:5c:21:f5:73:
83:27:97:f3:19:c0:ba:64:ea:7b:2c:fc:cc:b3:80:ba:5c:1c:
88:cf:19:94:7a:61:2c:bf:44:2b:8f:1f:8a:f4:f2:73:a5:54:
a9:2f:5e:ad:ac:a4:80:d8:24:b4:2c:8b:68:9c:a1:d3:37:f4:
d1:36:74:f8:9c:6a:05:8a:db:a8:bf:cd:af:4d:f5:d9:43:15:
db:00:21:da:c4:fb:b0:b2:a5:a9:57:2f:3c:19:85:02:19:a6:
ec:07:28:02:12:97:70:d2:0c:4c:00:9c:72:6d:d1:1c:9c:6a:
c5:df:0c:0f:7c:55:e9:47:d7:53:bd:18:f2:48:c5:19:fa:48:
bc:f6:c8:be:6c:e1:66:78:99:c8:28:20:a8:79:c0:71:d8:83:
db:f9:d2:fa:9b:31:db:f5:5e:da:bb:e8:d9:df:e4:79:33:34:
b5:df:a9:6b:dd:a3:05:a5:f9:8f:bb:0f:04:f3:d4:90:0d:61:
75:49:81:cc:3b:ba:d9:64:5a:5b:72:8f:74:c8:5a:68:4f:c3:
57:85:be:af:0c:ed:ee:32:4c:5c:a0:50:9e:7b:44:82:a5:7d:
71:56:55:b7:65:72:ea:f3:e5:5e:55:78:b1:f5:76:eb:b7:91:
82:ee:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:44 2025 by rpki-client