Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: ogxfwzDXBIff5pqgbor6QIhDZLnOMgJm1r3AvT+ybrs=
Subject key identifier: 56:0F:2F:A8:88:F5:2C:61:67:D3:72:69:15:BB:09:D0:6F:65:A2:BE
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 0197B70F0A135C276A2BDACEBB93D2CB404A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0ADC
Signing time: Sat 28 Jun 2025 15:01:45 +0000
Manifest this update: Sat 28 Jun 2025 15:01:45 +0000
Manifest next update: Sun 29 Jun 2025 15:01:45 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: 5pHohA+J+gFZ5lrxG6XJ85xp8BeJbdW39Ng/95eCjrA=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0a:13:5c:27:6a:2b:da:ce:bb:93:d2:cb:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Jun 28 15:01:45 2025 GMT
Not After : Jun 29 15:01:45 2025 GMT
Subject: CN=560f2fa888f52c6167d3726915bb09d06f65a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:d3:0f:5b:cb:e5:b8:6c:46:11:59:2f:6b:
1e:17:c0:7c:1e:fc:63:e1:5d:bb:74:4e:ec:a5:c1:
86:5a:17:56:c2:35:7e:05:f0:5e:c8:1f:0b:86:41:
c7:f0:2a:b9:53:c0:c2:69:a8:ca:29:ec:44:ec:a0:
4b:ab:6a:73:2f:5f:24:9c:c7:ba:e4:00:35:7c:e9:
20:94:a2:6f:f3:25:da:17:17:6d:6d:00:d9:eb:12:
72:75:b8:f6:16:a7:1a:57:fa:04:f5:7a:f8:97:04:
68:9f:82:39:88:37:ba:a3:ee:d2:c7:4c:d9:33:90:
25:36:43:77:5e:88:21:62:9c:87:82:97:79:6d:df:
63:10:90:cb:6c:e9:81:e3:9c:51:26:2e:01:e6:f2:
a0:ea:62:9f:a8:35:89:62:e4:4e:c8:76:0d:df:13:
d0:82:4c:55:93:8e:7d:54:68:d0:94:8e:0d:d8:8c:
c0:82:f1:38:82:02:9d:95:83:53:c3:73:05:44:66:
52:f9:6a:f5:7a:25:0f:d3:ca:57:2d:54:b3:09:d3:
01:8d:55:11:e9:7e:47:c0:9b:3b:89:c5:49:6d:4e:
f9:91:38:15:01:ec:1d:c1:a5:77:0f:b3:1b:55:37:
78:c2:69:8a:d4:72:ac:17:8e:da:43:0e:e5:2c:81:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:2F:A8:88:F5:2C:61:67:D3:72:69:15:BB:09:D0:6F:65:A2:BE
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:0d:1c:5f:76:9a:92:1d:12:dc:3b:56:b0:a3:d3:61:c1:
eb:2f:c5:7e:ad:47:de:f2:3e:f7:3c:88:76:0c:02:d5:ae:de:
21:75:0c:5a:c6:98:c3:80:7c:79:38:ea:eb:8b:39:1e:4b:3b:
9d:19:48:1a:71:2c:37:9d:fb:21:a4:6e:93:cc:a9:7c:e5:64:
a5:b8:c1:40:49:26:02:c5:25:81:a4:10:f3:62:ca:bf:a0:bc:
16:69:91:da:81:0d:d3:42:ea:fe:dc:45:dc:87:41:8d:9a:c2:
75:d0:47:09:70:32:71:df:a5:f6:25:37:85:f1:14:57:c9:5b:
25:5f:40:4c:8d:63:3e:c3:77:4f:35:06:0d:a0:70:39:b2:34:
9e:c4:78:cb:ee:13:df:17:a8:7a:c1:8c:26:05:08:4d:51:39:
eb:3a:a3:31:d8:87:16:2e:3c:bf:5c:88:10:d6:8b:24:30:0b:
2c:4b:5b:2c:3c:b0:43:2a:25:69:cd:4c:18:e8:67:e2:4f:9a:
6c:24:c4:f7:30:ad:88:16:47:df:6f:62:70:73:05:b2:8f:bc:
52:86:6a:fb:27:a6:06:dd:c3:05:f1:3f:94:86:26:bb:ac:c2:
16:d6:b5:3f:93:55:3c:4d:b5:36:7f:80:00:5a:c2:bd:1a:bd:
58:9d:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:41 2025 by rpki-client