Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: of/WKnEb51nLlJhxjj1z7kUA4NKqpxnYczcX/SL3JSw=
Subject key identifier: 92:3E:B2:93:2D:24:37:19:0C:5F:5F:64:78:64:09:EF:C1:F5:DB:C1
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 0197B6A080922D78DB437DDF7670CF6F3E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0E88
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: gQGo7G8UOFhCo1ASUJhPK8Vs5/ptYNJ69Jv60vj5/54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:80:92:2d:78:db:43:7d:df:76:70:cf:6f:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=923eb2932d2437190c5f5f64786409efc1f5dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:b6:e5:ce:9c:7f:08:09:a4:d6:d4:82:20:
c6:63:6b:27:ce:43:70:e7:ed:3f:01:5b:ff:67:74:
c4:fb:28:f8:2d:ce:4b:36:ce:b6:09:9a:3a:84:dd:
cf:0d:8a:fb:30:4b:6e:80:d9:2c:15:53:f1:3f:66:
76:c9:f8:18:a2:b2:00:eb:90:f8:e4:e4:36:de:01:
37:ab:b9:ee:3b:ae:7b:04:2c:5f:9c:68:67:09:70:
3c:b0:88:3a:59:14:10:6b:6d:e2:8a:da:b9:4f:83:
22:26:b2:4b:2f:a2:45:9c:0e:f3:b1:bc:02:58:3d:
59:1a:9f:3a:8f:22:42:7d:76:19:9f:a3:bd:19:8a:
7e:d9:31:54:f5:70:31:73:3e:f6:92:42:41:49:6b:
55:b6:5d:70:70:50:cc:42:1e:1f:1e:1b:97:d5:f6:
6f:42:d0:72:a7:55:b5:f2:5e:d9:68:9d:b4:e0:34:
d6:e2:d5:9f:fe:19:b9:ec:41:72:85:9b:dc:ab:eb:
16:69:ae:03:4e:85:b4:ee:c4:b5:a6:da:24:d5:4e:
f5:78:57:73:a6:82:c6:11:da:2e:fa:b5:b7:0f:a4:
c5:3f:a6:2a:14:90:5e:16:40:28:12:66:ae:c0:b6:
6c:4e:53:b3:4c:61:46:80:b2:29:e2:32:3d:d6:76:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:B2:93:2D:24:37:19:0C:5F:5F:64:78:64:09:EF:C1:F5:DB:C1
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:74:b9:ce:3e:38:7c:69:81:fa:00:58:8a:f1:c1:07:dd:
ad:60:bd:34:18:23:25:4a:2a:9a:00:05:41:28:c0:39:d1:dc:
bc:95:ca:7b:db:d1:f2:13:bd:63:fa:02:9c:e8:d9:62:6b:05:
d6:cc:ff:d0:3d:58:c2:3b:ad:04:f0:fa:75:b4:ea:9c:1d:d9:
bf:66:0e:7c:25:2f:d9:62:28:94:05:41:8d:38:a8:9f:34:46:
22:50:77:47:3d:3c:08:d4:05:ac:53:72:94:dd:07:a6:c5:5b:
a7:2b:ce:9d:60:6c:f8:27:43:07:88:be:ef:ce:9e:68:9e:03:
f4:f3:d2:60:5c:62:9e:ee:74:66:cd:d1:0d:36:0f:91:f8:65:
5f:58:51:50:84:f4:ff:8d:b5:19:1c:9c:6d:85:01:8b:34:a4:
3b:28:7a:db:c3:56:9b:09:7d:2b:ee:37:e9:b2:57:59:e1:89:
2f:16:6a:c3:2d:0a:e6:bc:13:9b:63:4e:dd:b6:92:5d:95:d3:
54:9c:ef:5a:a4:dd:58:92:83:65:59:26:55:64:ba:fb:53:15:
6a:67:9d:3b:a8:80:29:67:f5:fd:ba:26:f9:7e:e1:0d:c2:5f:
77:e6:5d:5d:4a:10:29:ae:d1:05:92:87:81:69:66:d2:1b:ac:
78:1c:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:18 2025 by rpki-client