Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: ak51V3R/pfa8EUgJj0NTa8YDxXjE6cehJdJb/tSbK88=
Subject key identifier: B5:2F:7B:A7:BE:5A:69:81:D1:4C:09:89:79:FD:8B:C5:C0:82:22:D5
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 0197B6A16CF1882502CD1B14279407A4F210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 0284
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: wWOn5XxllscUBKHnfaPvM6qLdBC/xvdB1mCBnQCQF3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6c:f1:88:25:02:cd:1b:14:27:94:07:a4:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=b52f7ba7be5a6981d14c098979fd8bc5c08222d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:05:83:32:2b:36:28:30:57:43:13:dc:2e:
e1:70:ce:d0:90:c3:1e:62:dd:79:7e:33:02:95:8a:
20:f4:ac:ce:70:80:59:2c:e6:37:0c:0e:ba:07:c6:
eb:4a:e2:0b:12:b5:a5:11:01:fd:69:7e:c0:70:73:
a0:d8:dc:c4:03:df:1f:8f:a8:4b:1f:79:77:b7:f9:
de:0f:1b:12:4b:d4:48:c9:bc:27:96:a9:1b:ac:0e:
18:1b:f3:3b:a8:1b:ab:2b:68:44:22:4c:0f:27:56:
7e:64:ed:7d:d5:44:70:d4:bf:bb:73:3e:c9:33:54:
4c:ff:ee:f9:8c:37:29:fb:c0:6c:9f:ae:01:cf:95:
88:d3:f9:49:b2:b9:83:6c:38:18:b6:12:54:4f:1e:
52:b8:3e:08:78:05:0e:2f:9d:25:61:e7:79:07:36:
8e:94:f8:8f:19:ce:5e:1a:bc:69:97:b2:4f:cc:13:
3a:de:1b:4e:e0:52:48:bf:51:fc:b2:d9:04:48:e5:
1a:15:87:23:58:3b:45:92:1b:00:e0:45:e2:e5:a0:
d2:2b:1b:93:c6:4a:f7:1e:15:e0:f7:b6:00:39:ec:
48:dd:e5:a5:1a:ae:33:18:69:d4:cd:4b:41:72:96:
84:0f:65:26:c5:f8:23:0c:a5:f5:5a:3f:08:d9:8f:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:7B:A7:BE:5A:69:81:D1:4C:09:89:79:FD:8B:C5:C0:82:22:D5
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b6:16:04:7d:f1:51:bd:e9:41:20:c6:4e:43:3d:12:95:42:
77:c8:cb:0d:a5:f9:18:fa:41:95:0b:35:22:5e:97:04:14:ca:
37:63:a1:0c:1b:0e:5b:c7:f4:38:fc:08:31:1b:5c:88:60:95:
48:76:73:f6:5a:d5:e9:19:28:29:bd:94:42:8b:80:d9:a1:03:
04:27:e3:f2:df:0d:e8:60:c9:41:45:5a:57:59:5c:d8:de:75:
b6:57:43:3a:1d:e9:8e:dd:9e:34:6c:95:1b:b7:7b:a7:d9:4a:
43:28:08:9c:64:bc:94:05:dc:6e:5f:90:f3:40:5d:2c:2f:88:
ee:d1:d8:e8:99:71:85:88:eb:b5:0f:86:44:7b:80:9d:83:10:
c1:b3:01:69:43:72:54:df:dd:47:76:87:52:de:27:bf:f7:bb:
66:8f:46:95:d9:ac:90:0e:60:bf:58:b4:e0:3a:90:47:08:ba:
d3:a9:b3:54:08:d1:d5:45:06:bf:8b:6f:3e:20:e4:2f:de:b9:
12:03:23:eb:ba:79:8d:11:a6:b4:e8:1b:02:d0:81:bf:83:45:
cf:7d:ff:a1:42:f3:64:16:18:cb:02:15:43:df:a7:c0:33:2b:
d6:80:62:79:97:80:e0:04:db:d1:21:08:e0:48:08:e3:34:07:
f6:b5:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:34 2025 by rpki-client