Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: Js2MTcz2fQnxES7LSbbkm+/h7ZPlz2y3LsSEWMVnpAM=
Subject key identifier: 84:EA:14:8D:09:FB:DB:96:A8:CF:97:C5:3E:04:B8:E9:E9:2C:8F:CA
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 0197B88F5E9576BBCD6D315C98C493BEEBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 12C1
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: hsiCEmnlkOJbg5N7doC1ujr48jsYOWrzozxjB3I0Hik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5e:95:76:bb:cd:6d:31:5c:98:c4:93:be:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=84ea148d09fbdb96a8cf97c53e04b8e9e92c8fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:3b:30:1d:fa:84:a1:57:35:a9:e1:76:4b:
90:b5:07:41:b5:58:3b:0c:01:67:2e:e7:54:a5:e7:
b9:a6:39:e3:f5:6a:b2:51:9d:3d:9b:3e:1c:e1:94:
d3:03:74:e0:60:a7:4f:b0:7f:5c:15:72:8f:8e:ce:
be:4d:7a:cd:3c:1f:b3:ba:81:df:e5:41:4c:74:49:
55:4e:01:b1:81:0d:8a:e7:3f:5e:44:d8:4c:57:fd:
cb:51:15:b2:68:8e:66:83:82:fc:31:d8:a2:35:99:
ab:ff:57:e2:89:7f:85:ac:f5:19:48:de:11:f7:45:
d8:a0:b0:b0:d0:82:2c:7a:8b:1f:22:77:8e:3d:d1:
33:8b:45:89:1b:73:fb:82:1f:b1:15:ef:60:67:b3:
59:50:4d:48:9d:3d:fa:41:11:24:4e:c4:c4:c8:18:
ae:f3:8c:ff:8a:0e:7c:42:a1:0d:76:c9:90:8b:6e:
98:a8:00:91:f2:0c:10:1c:9a:8a:70:12:39:5b:65:
e8:9f:fd:c5:0d:dd:fd:39:70:a8:10:36:e1:6f:47:
4c:19:a8:33:b7:6f:6f:43:e9:58:bb:2c:04:77:f7:
a9:e3:fe:59:73:4d:37:69:6d:ba:4f:50:65:ce:98:
fe:cb:b2:72:7e:94:12:52:27:9b:e5:71:17:db:19:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:14:8D:09:FB:DB:96:A8:CF:97:C5:3E:04:B8:E9:E9:2C:8F:CA
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:d2:04:71:d1:b0:16:44:38:42:f1:6c:00:e4:68:28:04:
7d:26:f6:a7:1a:67:19:c3:2e:69:d8:0a:e8:da:45:b4:9b:bb:
68:85:f4:b1:60:91:42:d3:2a:d5:7d:c7:a9:09:ca:80:29:3a:
ad:15:2a:02:82:8d:49:59:c9:64:da:a9:43:71:5a:05:4b:78:
de:ef:f7:3d:d7:83:5a:69:0d:a7:e0:c7:b0:66:71:b0:0f:b3:
09:0c:ca:f8:7c:3c:b8:be:29:4d:38:d7:05:4d:c6:f4:da:09:
39:7a:25:be:13:3f:69:f5:35:37:0b:56:cf:8a:48:d5:8f:a5:
e8:45:26:0c:f8:0b:f1:7b:cd:6c:ae:19:6d:c6:3d:4d:19:a4:
52:79:68:ca:5f:53:ad:6d:0b:39:52:fa:89:3a:62:a7:e1:b2:
e3:03:e5:79:87:2a:f4:c3:8d:44:6b:82:d8:76:d6:5d:71:d7:
7d:af:10:eb:d5:15:7d:dd:b8:a3:41:a3:3b:60:61:8a:78:8b:
45:2d:c4:44:70:b2:8c:c8:28:f8:62:ef:00:06:9a:c1:7c:0a:
03:cc:45:8e:03:c7:52:cc:0c:d7:92:1f:cb:30:1d:9a:f5:eb:
99:3b:80:44:a8:c2:7d:7c:d7:57:8a:be:3e:69:46:c5:96:31:
76:e0:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:07 2025 by rpki-client