
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier: ireV/K7Lnw6t82FkW+RtnUHZZ4mrglSUCeRpkDU0p34=
Subject key identifier: B3:25:1A:0C:D6:51:91:BE:75:CB:A0:C0:F5:05:E9:2E:30:70:30:5C
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 0197B6D7A4451A125CB0E2D8F8A0922292A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: upKMRnAdC2BSmds/EvWvRE52lEFPaQmCc2T9skfBAB4=)
2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a4:45:1a:12:5c:b0:e2:d8:f8:a0:92:22:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=b3251a0cd65191be75cba0c0f505e92e3070305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:8d:6b:bd:9c:99:59:f6:2d:75:d2:c7:31:
db:d2:67:3e:8b:c5:63:7a:4b:c3:af:26:2a:33:97:
a7:ec:9d:12:16:a2:a4:95:62:60:e1:1e:cd:4e:fe:
0c:8c:98:85:54:63:42:79:8a:00:40:95:8b:a9:24:
ad:87:1a:87:89:fd:6e:8b:67:f5:ab:e3:b8:53:16:
10:b2:3b:d0:61:72:5e:f3:78:20:9c:c0:e9:ed:31:
5d:5b:4b:a3:fa:1e:1c:99:7e:67:dd:51:e4:a6:0f:
14:9b:ce:2b:99:7b:a8:ba:e7:6a:31:9c:5e:9f:3d:
7d:fa:f2:81:01:66:c4:bf:c3:09:1c:8e:ac:ce:d9:
b9:a1:3b:26:70:df:16:30:ac:b8:44:fd:b9:ed:92:
2e:56:ab:42:30:b8:49:f7:f0:28:97:10:4b:f0:76:
7d:7f:08:b8:f2:2e:0a:2f:7c:40:e1:25:66:61:48:
6d:8c:37:a2:8e:23:0d:e2:a7:37:ee:1e:fa:f4:0c:
65:79:86:69:49:f9:0b:d5:b2:56:e4:14:d2:1d:67:
48:36:b6:4e:06:ae:72:22:d4:5a:b9:c5:9e:e5:3b:
ef:e3:2a:e7:df:79:df:09:a5:a9:5e:41:f2:b4:4b:
f4:33:bb:f6:50:6d:ed:bb:09:6f:14:6d:5b:6b:ad:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:1A:0C:D6:51:91:BE:75:CB:A0:C0:F5:05:E9:2E:30:70:30:5C
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:ef:8e:19:46:20:d6:b1:69:88:38:fa:d5:f4:17:5b:c8:aa:
a7:fa:ac:3d:4a:cb:2d:17:e7:2c:3b:ae:68:b8:7b:89:d0:10:
08:c1:14:d4:d6:71:cb:b5:04:05:be:65:88:4f:42:1d:f9:94:
6f:e1:48:27:27:73:28:b4:16:60:4e:d1:93:1a:db:9e:3c:87:
93:6d:bd:8f:0a:24:ff:d1:99:20:cb:0f:68:87:2e:bf:0b:07:
19:6c:53:46:de:6e:15:f9:a1:30:27:35:92:f6:b9:90:a5:e3:
0b:3f:be:10:a5:af:17:74:2f:38:54:c9:d0:f4:34:1f:32:02:
ab:6b:a7:ab:d5:cc:3f:bb:e4:54:d6:bc:52:ea:51:42:1f:83:
91:be:59:ba:a5:ae:e8:3b:a8:75:3f:57:1d:41:46:df:b6:45:
0c:0b:55:6e:c7:07:75:aa:4a:72:cb:97:84:1c:98:64:e5:c3:
a3:8c:19:ec:a5:c1:9c:57:af:7a:4b:5d:86:f5:dc:76:8b:b9:
f5:e8:b0:fc:b0:0b:71:b7:88:f5:2c:07:26:8e:2b:67:50:58:
f7:95:2f:8c:91:42:5e:e5:3f:05:58:d4:cc:71:b1:41:2c:4a:
38:5c:61:db:94:af:9d:c8:b4:fb:32:14:1d:65:bc:01:0d:2e:
e4:30:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:33 2025 by rpki-client