Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: 1JQ5JydwoY+CBe+Eflb4K3jiBlSJe2O/Wi1uCf0Gh54=
Subject key identifier: A7:B9:6D:52:02:40:4E:7C:4D:43:1A:CD:A4:79:E8:04:42:3F:2C:E1
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 0197B58DCA619CC12723307118C2BFEC1654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0AE8
Signing time: Sat 28 Jun 2025 08:00:57 +0000
Manifest this update: Sat 28 Jun 2025 08:00:57 +0000
Manifest next update: Sun 29 Jun 2025 08:00:57 +0000
Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: /YDvoRkuBFzSC6xJxjZ5OWZ2LFHPXplD7XXSWq12idc=)
2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:ca:61:9c:c1:27:23:30:71:18:c2:bf:ec:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Jun 28 08:00:57 2025 GMT
Not After : Jun 29 08:00:57 2025 GMT
Subject: CN=a7b96d5202404e7c4d431acda479e804423f2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:46:4b:4f:7c:10:6f:b4:9e:31:f3:7e:57:
72:e6:cd:12:9d:b6:1d:0d:c7:ca:72:3e:5d:a1:d0:
ba:e5:09:8b:fc:24:0e:57:99:30:86:17:83:ad:91:
d8:78:f0:6e:ee:cd:50:44:a7:d7:ae:5e:e7:c5:6d:
be:1a:0a:00:8d:49:3a:c3:d1:c5:a6:8b:8c:8e:69:
c9:45:c8:45:59:bf:91:ff:7b:29:d0:f1:6a:d5:7d:
e9:24:3f:67:cd:e7:fa:c6:71:3d:70:86:e7:b1:0d:
97:10:2e:2a:25:0c:ca:26:94:e3:63:ee:29:76:f9:
de:d3:8f:5e:d2:e2:a4:b1:19:17:97:71:05:3d:5b:
57:66:6d:5e:9c:c7:06:d8:32:88:0d:52:35:6f:ef:
04:13:1f:a3:49:50:42:e0:ab:dd:ee:b8:e2:e3:51:
5f:7b:bf:e0:49:80:42:c9:e8:2d:65:7a:20:db:3b:
31:d0:4c:b0:60:2b:da:cf:f7:f2:c6:67:fe:3b:bb:
04:57:d7:b9:84:20:c6:42:0e:84:3f:19:c2:6e:2d:
63:e5:00:9a:70:18:a8:af:d6:9b:4f:e6:8e:33:a2:
73:3f:56:a7:23:09:da:57:3d:6c:16:f2:cb:07:94:
e8:c8:2c:04:c0:3f:e4:7e:b0:1b:eb:59:9f:a3:d7:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:6D:52:02:40:4E:7C:4D:43:1A:CD:A4:79:E8:04:42:3F:2C:E1
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:b9:90:bc:c6:d4:5e:87:78:7d:ad:50:ed:45:2d:f2:41:
3c:3f:91:47:a7:b6:b0:67:51:3f:7f:46:0d:28:46:70:83:8e:
8a:92:0f:79:53:56:17:5d:a0:10:34:88:ee:63:9c:7e:e0:75:
92:cb:ee:cd:ad:10:7b:74:5e:0f:b1:b7:cd:72:88:38:06:35:
60:44:bf:0a:46:71:5c:fc:ac:f7:ed:fa:4d:7b:46:83:eb:ff:
8b:d4:0b:58:19:d8:af:c5:33:23:6d:0a:78:3e:16:e0:fc:85:
10:a0:46:22:18:19:35:1f:b1:21:75:b5:17:da:86:60:23:d6:
f0:6a:c5:58:0d:7e:eb:84:c1:42:d1:54:7e:37:0c:1d:eb:fa:
a6:ff:79:60:e4:6f:71:eb:fd:fb:d3:4d:73:b3:8a:11:db:d5:
0b:bb:81:a4:bf:3c:ab:bf:54:ee:71:44:ea:41:46:df:f5:df:
5a:bc:f8:2b:6e:2c:78:12:92:bf:d4:2d:26:0d:9c:67:55:f0:
e3:a6:6a:62:0d:f8:72:eb:18:c6:17:c4:98:cd:8d:3c:51:80:
af:4a:00:a2:fa:13:a5:a1:3c:58:ee:25:9b:60:98:cf:77:b7:
5f:45:36:1a:e4:b8:b4:84:75:03:36:0f:be:5d:fa:12:99:46:
bf:ff:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:46 2025 by rpki-client