Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: OjIsFIvM7PFIh8l7riZgROjpyGxQBD+HVtLl5jNnLa8=
Subject key identifier: 5A:40:F4:37:46:A4:16:41:17:BD:9B:0F:7C:4B:E0:A8:43:08:04:18
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 0197B74517D4F0F9A824C064B3F6B26167DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: CHezMqJ0BkWN2ENj/1RliZBAh/sMTifdinD+cQg9L1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:17:d4:f0:f9:a8:24:c0:64:b3:f6:b2:61:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=5a40f43746a4164117bd9b0f7c4be0a843080418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:73:6c:04:ff:55:92:96:05:05:41:df:39:d2:
db:04:95:07:53:08:f7:d3:9f:78:40:34:85:9a:a8:
9a:bb:d0:f4:58:26:3e:25:13:2a:d4:a2:e9:20:2f:
93:97:b2:e7:92:c7:68:db:44:f6:3b:41:24:b8:b6:
f4:47:b0:26:e7:1c:40:3d:34:ab:d7:fd:de:4c:a5:
e5:ef:19:8d:1f:84:08:71:f9:fb:b2:a9:5d:41:27:
a7:90:01:c2:3e:c6:60:01:49:b5:93:d9:91:24:01:
af:38:11:1a:0f:5c:e1:4f:fd:d7:49:41:23:90:f6:
c4:65:51:61:d6:c9:ac:7b:9e:13:14:2b:ba:2b:0c:
fb:33:7b:e8:05:89:1f:91:d9:2f:c6:d4:e1:df:a3:
95:97:27:50:ba:d8:73:1b:85:d2:4b:ce:e3:b8:53:
e3:17:e8:60:32:f2:94:64:00:9e:12:2b:48:28:f4:
fc:34:4d:e5:ca:d7:c5:4c:d8:30:99:af:3f:0a:bb:
45:d9:c1:e5:7e:ec:74:87:63:44:81:bf:00:38:db:
7b:16:15:56:a8:e3:87:25:7b:92:29:e1:0e:38:06:
94:58:83:21:cd:9a:7f:75:4f:b2:a8:9c:81:c6:cd:
f9:c3:99:c3:29:a6:7a:e4:bf:33:02:7a:67:0e:9f:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:F4:37:46:A4:16:41:17:BD:9B:0F:7C:4B:E0:A8:43:08:04:18
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:53:70:83:83:30:98:e6:9f:87:32:93:c7:58:3b:2d:30:84:
db:7c:21:b2:d0:de:48:1e:b4:fe:8d:3e:28:1e:4d:ca:08:fa:
e9:c0:6e:ca:eb:ce:9f:b8:cf:7e:06:a8:a3:5e:2e:db:50:76:
0f:aa:49:f4:83:9a:27:a3:c2:a3:38:4c:ab:65:dc:fc:c1:da:
9d:96:8f:93:40:df:74:7a:b5:71:b2:16:31:0b:39:5c:e6:b8:
2c:20:0c:17:b4:84:b4:4f:52:98:64:3a:fd:c1:67:18:ff:88:
a7:91:61:49:73:7a:0d:4a:b0:3e:3a:c8:c3:b4:66:fc:f4:cd:
19:82:c7:b1:d6:9d:69:c7:3a:45:18:c6:76:0b:8e:9b:fb:a8:
d5:46:13:c7:5e:0b:ff:d4:31:93:61:cd:58:f2:ee:e4:fc:1a:
38:1e:ff:cb:be:3a:68:f7:20:32:98:86:13:69:83:40:16:ed:
e3:5f:b9:91:15:f8:6d:61:1a:1a:61:05:a0:08:ae:5c:b3:6d:
57:81:ff:0f:4b:d9:69:d6:ee:4c:4c:31:68:07:37:ca:af:22:
78:4e:a5:b7:de:5b:dc:12:44:4b:e1:d1:2f:91:38:53:cb:80:
6c:c2:3f:70:29:ac:21:f9:21:b0:c3:3a:ca:1a:3a:03:58:7d:
c3:99:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:53 2025 by rpki-client