Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: u68mR9UOSzc+wihBpmPcQSh3tft4dUoK84GR9OmJFGw=
Subject key identifier: 8B:7D:E4:E0:E6:7D:AE:F0:AE:31:96:78:78:1F:EF:98:DC:61:B9:58
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 0197B77C1CCDA991BAE2A23E32518BE2A9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: Pe9sThMip92hGNkVOGfshcjNtY2wafsjrnkYMsPK9Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1c:cd:a9:91:ba:e2:a2:3e:32:51:8b:e2:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=8b7de4e0e67daef0ae319678781fef98dc61b958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:c3:1e:d3:0e:6a:7e:97:35:a2:46:09:14:
50:68:10:a9:25:77:7d:d0:f2:3f:25:0d:7d:d3:1b:
b4:96:f6:6f:38:b5:f9:79:84:d0:6d:62:ce:c8:f5:
58:0f:16:46:f6:5c:53:ac:cd:c0:a8:6b:9f:f5:1a:
b7:0d:0f:8a:c6:b6:4f:de:aa:bd:0e:6d:7c:57:fc:
6b:1b:96:5c:94:07:f3:d2:24:e5:ad:ee:13:fa:26:
33:5b:49:88:13:fc:22:ef:22:ba:b5:9e:bb:53:cd:
41:cc:d1:ab:c4:3e:3a:c3:8d:ee:3a:39:45:9a:12:
48:fa:01:24:2f:4e:b6:9f:43:f1:8f:c5:09:5a:f1:
25:4e:67:5f:ef:e3:14:00:86:95:d5:cd:dc:f9:f3:
18:1a:74:b0:ba:08:ca:b0:2a:3f:be:66:51:71:29:
35:0f:81:9b:b2:ce:67:bb:65:ed:3e:cb:7b:f8:a3:
03:9f:0d:3c:ad:8e:dc:76:4c:5c:d1:e7:56:33:42:
44:18:4f:73:4c:3e:42:37:e0:17:3f:4b:51:f0:b0:
3a:a0:59:ee:d9:ae:bc:d4:0e:aa:95:b6:b3:25:87:
8c:71:74:23:0e:16:9f:9f:de:98:2c:15:fa:af:bc:
b5:55:3c:cd:71:96:e8:e2:9c:a7:de:1e:f5:60:bc:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7D:E4:E0:E6:7D:AE:F0:AE:31:96:78:78:1F:EF:98:DC:61:B9:58
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ee:12:cf:61:a1:85:2a:5d:8b:0a:c8:de:e0:33:c0:4d:43:
45:03:75:31:e5:fb:d5:ab:76:3a:c3:43:e9:12:0a:91:5b:35:
0c:40:40:f4:6f:f5:b4:2e:8c:82:b3:f2:64:88:90:6e:f5:54:
b0:98:9b:fb:ce:3a:54:bd:b1:01:39:41:ea:f2:b9:db:ce:e1:
b6:ba:54:3c:d6:9d:b4:05:a3:8c:88:6e:98:f4:8a:bc:f8:79:
aa:b8:ac:b8:85:b8:8e:31:07:34:eb:93:6f:08:17:e8:a2:95:
e5:28:f3:c2:b3:a3:4a:bd:70:6c:99:70:f7:6a:4d:5e:78:7b:
fc:a1:4a:1d:2f:bc:16:1d:0e:08:7b:8a:82:89:8a:22:2e:90:
60:22:c0:ef:43:db:b7:95:6d:81:2a:e6:71:84:82:1c:24:55:
08:82:72:9a:21:ad:8a:cc:85:85:1d:4a:90:c8:3f:0a:1a:09:
7d:5a:40:8c:ae:a4:a1:01:30:ba:fa:ce:cc:5e:28:84:18:35:
6f:9b:46:65:89:3d:55:6f:f3:e0:c6:93:73:46:da:8f:1a:ad:
c2:25:63:16:43:69:53:41:d5:a3:d1:fb:2c:21:e9:35:bb:df:
a7:4b:38:8a:d6:bd:3c:91:11:d9:e9:42:66:c0:bf:02:e1:8c:
9e:39:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:48:14 2025 by rpki-client