Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: MGaB31CiWSgUYKWAJc06x/aEEK2OoFZlOeQODkep1R0=
Subject key identifier: 4B:17:20:B4:3F:77:79:6A:03:9D:B7:AD:D9:58:F1:59:D1:9D:98:BE
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 0197B88EB24DAC33181BD0E761E28281EF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:00:48 +0000
Manifest this update: Sat 28 Jun 2025 22:00:48 +0000
Manifest next update: Sun 29 Jun 2025 22:00:48 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: ebzmShS3q08Iwo1OqU/SI0q3IQjEGI/zFoLcO9rGHwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b2:4d:ac:33:18:1b:d0:e7:61:e2:82:81:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Jun 28 22:00:48 2025 GMT
Not After : Jun 29 22:00:48 2025 GMT
Subject: CN=4b1720b43f77796a039db7add958f159d19d98be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:d0:8d:ba:32:09:c2:53:a2:9b:d7:74:62:
71:11:a4:d1:61:7a:29:a6:76:f8:70:5d:7d:35:b4:
dd:de:69:54:7b:34:d6:54:50:92:63:1e:97:52:55:
58:95:fa:13:40:5f:3e:17:36:a6:ce:bc:7f:45:97:
60:2e:c3:f3:ec:25:8c:61:e3:73:96:83:74:8c:d7:
a9:ad:89:01:08:73:b8:52:db:f9:22:18:e8:61:16:
c3:c6:dd:dc:52:18:8f:72:de:50:3e:af:42:95:7d:
e4:47:e3:7d:21:64:87:2b:02:31:00:d7:f4:ad:25:
52:29:57:d0:66:ec:50:23:3a:df:52:09:a0:bc:ac:
ec:dd:85:dc:dc:e8:94:e1:50:1d:d0:92:75:09:4a:
81:a7:7e:05:e4:06:6c:ac:b7:6c:2b:86:32:4b:8e:
7d:a2:2c:e6:3a:48:3a:fc:2f:21:6d:8d:b0:d5:ce:
06:8f:c1:8d:7c:27:04:10:15:d9:4a:04:57:63:6e:
79:70:aa:77:0f:87:ca:bc:3d:8b:99:a6:58:dd:47:
fb:2d:b8:df:48:7d:02:04:8d:f0:75:ba:9a:f3:04:
32:d4:cb:62:32:47:29:f9:4f:d5:1a:ca:52:b0:7b:
0d:9f:d2:c2:cb:a5:45:88:a4:1c:39:5b:24:18:f1:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:20:B4:3F:77:79:6A:03:9D:B7:AD:D9:58:F1:59:D1:9D:98:BE
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:fa:c2:a2:0d:6c:3a:0e:f7:82:78:80:6b:17:19:66:62:
a4:ce:d0:2c:c2:c4:bc:06:51:cb:a2:70:49:27:92:ab:bf:ea:
e5:87:63:40:72:9f:74:59:b1:17:48:02:e9:88:d7:2e:68:d7:
98:e9:f3:ab:b4:7e:7b:cf:40:c2:5f:26:16:0c:a7:35:c3:d4:
90:5b:a7:92:86:4d:00:ae:3a:d5:1a:93:26:24:b6:11:29:c9:
c3:5e:bc:0d:00:20:16:65:bd:65:24:39:b7:d0:db:62:5b:3a:
d2:e5:2d:e0:8c:ae:ad:ad:3f:ee:29:12:04:9e:99:0f:dd:fe:
36:3a:04:e8:af:77:5c:fb:a1:1a:00:46:5c:e9:f1:ab:72:fd:
1e:6e:92:c9:a1:f8:69:ac:73:54:7c:51:ce:a8:b0:52:6b:28:
b9:e9:a6:83:55:80:d3:b8:f5:76:0b:e6:32:60:9f:99:df:9c:
26:de:20:74:43:7c:3f:5c:45:59:5e:d1:5d:64:4a:88:90:d7:
47:9e:aa:74:13:64:8d:57:15:72:8f:89:26:a5:78:42:2d:58:
2a:7f:34:33:53:f3:d5:46:51:3e:a8:57:01:49:6f:5d:88:42:
35:b7:6c:12:ba:70:f8:92:a4:1b:9c:7a:b8:b5:13:08:63:fd:
b1:98:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:26:42 2025 by rpki-client