Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: QIN/yzxgog+XN0iXIWFi9CCyHu0vzsCEQwVNJiDUbrA=
Subject key identifier: B0:6D:5E:A0:73:4B:2F:63:72:C8:4A:09:40:6B:3D:7E:F0:4D:44:8D
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 0197B8900D9797C85F439EE3983E86BE4195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:17 +0000
Manifest this update: Sat 28 Jun 2025 22:02:17 +0000
Manifest next update: Sun 29 Jun 2025 22:02:17 +0000
Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: CbDOFP+LuJazC5NQWjyJ5vAM85DlxVuKHh6UgdRYtas=)
2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0d:97:97:c8:5f:43:9e:e3:98:3e:86:be:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Jun 28 22:02:17 2025 GMT
Not After : Jun 29 22:02:17 2025 GMT
Subject: CN=b06d5ea0734b2f6372c84a09406b3d7ef04d448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:50:4d:2b:82:c7:64:f9:f3:aa:31:6b:8b:
79:04:d0:59:75:ed:18:f3:aa:cc:17:e0:c1:9a:0c:
7d:19:be:df:cc:2c:a3:bc:42:45:2e:de:ad:14:d9:
13:45:15:30:63:c9:35:87:26:65:5d:a0:ea:f0:af:
72:2d:92:30:9f:fe:4e:c8:9f:2b:10:40:3a:8a:ce:
e4:3c:52:07:f2:a5:7f:e2:3f:09:1e:43:a0:3a:10:
e3:6b:65:3a:62:ec:91:a7:0c:63:4b:a0:f6:23:11:
35:72:e9:5b:16:92:d3:f9:4b:92:0b:c6:fe:ff:1d:
55:fc:30:fe:67:47:91:80:6a:00:92:bd:c7:95:cb:
b7:a5:53:84:4d:b5:fd:ca:6c:36:57:7b:ff:9c:81:
f2:4c:10:d5:db:9a:82:f8:b3:24:97:b2:3b:5e:5f:
0c:60:f4:89:21:ed:bc:d9:3f:76:21:ba:c2:b8:65:
8e:f9:bf:b4:64:99:ab:6a:ed:bc:98:ec:1f:ed:1f:
34:65:cd:d5:d3:79:2f:06:5b:13:d4:7e:6d:f0:cd:
b2:c4:f0:2b:b6:f0:de:b8:11:f1:a8:7f:79:7f:fa:
fd:a2:22:39:88:67:43:77:8c:97:01:23:3e:72:0b:
89:e2:42:19:63:36:36:19:76:21:d6:95:58:1d:f1:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:5E:A0:73:4B:2F:63:72:C8:4A:09:40:6B:3D:7E:F0:4D:44:8D
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:46:ca:39:1f:72:16:14:4d:fe:3d:bc:4b:ca:2c:39:10:3e:
0b:8c:d0:6f:d9:63:dd:b7:93:5e:ec:0f:e3:10:92:42:a5:eb:
7c:2e:bb:19:c1:1c:0d:21:fa:c1:2f:b2:fe:ea:fe:38:b7:aa:
9d:d6:08:86:a3:c8:be:ef:38:b2:20:fa:9b:c3:75:af:bb:41:
04:88:99:4e:d1:7e:d0:4e:e6:7c:0e:da:cb:51:8a:70:f7:c1:
0a:da:e2:a0:0b:be:25:46:dd:af:ce:d8:34:69:b5:4d:a7:12:
0b:11:dd:15:a2:f6:2e:2b:5c:53:9f:c8:39:ca:41:c6:03:dd:
a9:26:10:0e:41:92:82:e9:70:1a:61:7f:a1:b8:db:4b:5c:64:
29:19:6f:3c:13:d3:c1:05:f0:e3:5b:ec:58:e4:8c:e4:c0:41:
a0:f3:3a:4d:7a:ec:8f:30:7a:a1:78:f2:93:c7:6b:b2:c4:77:
91:02:32:48:bf:3f:20:c8:3e:31:60:2e:e4:30:08:9c:4a:ba:
7d:d9:9e:3d:53:8d:e7:18:9e:e9:86:03:fc:cd:a8:f7:c6:9c:
f2:2a:10:ee:4c:e0:c3:88:6e:28:72:ec:d8:28:56:35:3a:38:
2c:0a:18:81:4f:07:24:d1:61:d1:98:dd:b2:01:7b:f1:38:d6:
67:6d:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:35 2025 by rpki-client