Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: CMFU7Uj9OF42D2OKouKI0OFTRZD/a0Ff7yOkNNDzqAQ=
Subject key identifier: 25:2E:06:EB:0E:F6:2E:D4:49:20:B9:4C:15:DB:8E:0E:C6:B9:B8:B1
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 0197B77C2E77FC0A7A0A283665E57DAD559D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 0DBA
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: nLF0yyLm2kswsoQPSBqO6JiKsYDZ/B8ZA1MbwRMuUls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2e:77:fc:0a:7a:0a:28:36:65:e5:7d:ad:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=252e06eb0ef62ed44920b94c15db8e0ec6b9b8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:3b:46:2d:ea:90:52:18:14:11:be:a9:fa:
01:d8:01:e5:e1:52:0b:6b:cd:26:c5:67:30:fb:da:
8f:dc:be:c0:af:c1:1f:a0:5a:a0:e1:04:75:1b:0a:
6d:68:38:0c:f3:7b:bf:ab:63:78:93:26:40:f2:7b:
7b:e1:ff:33:cf:95:9d:88:21:16:3c:5a:c8:8f:42:
52:f5:8d:ea:d3:f6:ed:42:04:e1:d3:33:aa:a5:4a:
b0:98:5a:64:5e:01:ce:00:e8:2d:b6:31:e5:20:62:
46:91:6b:76:7a:4a:73:a5:c2:ab:61:c9:6d:af:28:
88:31:58:64:54:15:45:fd:4f:10:25:a8:04:2b:de:
9c:05:d9:d8:7a:32:6a:82:c8:a3:f0:f2:31:63:f0:
82:1d:7e:bc:19:c0:82:6a:48:a8:d4:48:42:0f:a3:
c8:53:9d:ee:83:9a:fd:ed:ba:27:ec:44:e7:87:15:
fa:4c:f0:20:e2:49:e1:42:8e:ce:3f:0a:8b:7d:df:
4f:2e:96:64:a2:70:2e:33:a2:03:55:91:97:33:61:
c7:d5:67:42:d9:49:32:28:44:e0:4c:ca:53:d1:d1:
11:ac:74:68:f1:72:4d:43:bb:7d:b4:9d:aa:ab:1a:
70:6c:3e:16:99:9a:2d:46:d6:24:ae:49:b1:43:08:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:06:EB:0E:F6:2E:D4:49:20:B9:4C:15:DB:8E:0E:C6:B9:B8:B1
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:af:12:e9:62:fd:9a:9b:17:9b:d3:40:22:20:f2:1f:ae:
5e:fc:a9:ef:08:d2:ec:ae:a4:a2:72:c1:12:14:f5:6b:07:33:
3e:20:ca:8e:7b:57:ff:cb:a5:07:37:32:15:57:88:c2:59:76:
28:a5:52:3c:d8:8e:d2:cf:33:f1:31:ee:cd:f8:6d:fd:95:f3:
92:7a:87:5d:6a:24:f4:7c:4d:0e:55:a7:90:43:c2:08:f8:bd:
e8:f6:35:45:67:4c:32:cd:f7:85:ad:3a:4d:03:30:3f:a3:b0:
7d:11:80:d6:38:1c:b2:a9:ba:fe:42:57:64:65:5c:50:cb:8f:
f8:0b:74:13:e9:91:48:a0:1e:d8:74:ea:54:b7:e5:73:48:08:
fd:19:6c:8c:fc:f3:f4:f4:2f:82:3b:35:e9:a5:22:01:aa:9d:
6a:b1:03:62:5d:7a:56:ef:06:12:c8:db:90:a9:36:ae:d4:cb:
79:e5:3d:29:99:af:20:23:4a:5d:19:85:7c:cd:2d:e0:52:fd:
74:8b:7b:4f:ca:e3:1e:4e:bc:a5:da:66:01:95:2b:ac:fc:cb:
0f:c0:c6:dd:c1:81:3f:bb:63:d4:75:29:51:80:e8:78:38:cd:
7e:4b:5a:15:4f:7a:c2:65:2e:fa:87:61:d0:fb:09:8a:85:a0:
40:5a:bd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:52 2025 by rpki-client