Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: 4WsFdAniq/9NqgO4T4BJArM5/Zcf68ii4Rlf3bEn2kg=
Subject key identifier: 30:9D:79:E1:7D:AC:CC:D6:F1:3D:03:BE:DB:A2:64:07:14:BE:D9:0E
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 0197B6A0459CA30121FCB413B47954FBD380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 12E4
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: /DZbfDrIZUyThoLuyvuEar00fUlXog7E6yQCqfs6Oo0=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:45:9c:a3:01:21:fc:b4:13:b4:79:54:fb:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=309d79e17dacccd6f13d03bedba2640714bed90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:a6:1c:ed:d9:59:dd:b2:f7:77:f4:98:03:
bd:c4:9b:33:0d:e9:e8:b9:1c:ee:65:93:2e:bf:be:
30:cd:66:7e:ea:fc:ad:4f:b7:f7:25:07:40:52:62:
7c:75:38:8a:d8:54:03:5d:51:ed:5e:3f:6c:05:d2:
20:a1:b9:13:7a:2b:36:0e:55:d3:87:e0:48:3e:eb:
21:63:ef:9f:3f:0e:be:3f:c1:d6:21:6e:0b:ae:d1:
15:1d:08:6d:a8:3f:6d:95:05:c2:d5:f1:55:cb:44:
db:49:fd:57:de:b5:cd:2f:f3:af:bd:23:9f:22:57:
5a:33:5f:67:cd:ba:cf:9a:0a:51:7b:7f:3f:74:eb:
db:7e:b7:ac:16:9b:d9:4f:6e:07:e7:32:08:b9:d4:
cf:cc:1d:5f:ff:a7:91:7a:7e:75:5b:c2:ed:16:70:
2c:cf:bd:97:54:a2:9a:ff:7b:99:f5:47:d3:86:23:
8e:15:0f:4b:e2:93:20:46:17:87:e9:ae:84:0c:60:
8d:f5:0a:aa:c7:99:31:14:9b:88:b7:c2:8c:4f:ad:
38:5b:ac:59:eb:5e:48:5c:e9:85:4c:63:9c:3e:d2:
c4:f7:e7:5b:87:36:49:82:dc:d0:94:d3:7a:34:8b:
74:3d:d0:6a:e8:51:22:e0:f5:de:d6:11:35:f6:03:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:79:E1:7D:AC:CC:D6:F1:3D:03:BE:DB:A2:64:07:14:BE:D9:0E
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:01:e1:ea:10:77:d2:d4:98:a1:a6:d6:73:c3:f6:f3:c2:
d7:8c:25:09:87:ce:c0:e9:84:2c:29:22:74:cf:c0:f2:56:cf:
94:29:61:09:4d:46:08:97:26:b5:3f:cd:44:da:4c:30:45:4e:
f1:8f:4d:ad:53:98:1f:61:0d:46:ef:f5:5a:7d:b7:90:09:bc:
bf:ab:2f:8e:fd:5e:3b:3c:09:13:25:a2:2b:a8:8c:89:c9:85:
fb:3e:24:b9:f6:41:1e:ad:7e:f5:66:d0:ac:d1:67:79:82:05:
1c:5e:f3:26:1e:de:22:dd:f5:11:95:c0:44:cf:1b:42:76:ea:
55:c8:cc:0c:fd:70:50:cb:fe:38:a2:2c:06:20:9a:fd:88:e2:
d3:94:8d:6c:f8:71:92:7b:69:70:28:aa:47:4e:1f:2d:d9:91:
66:bc:2e:60:ca:97:fd:68:2b:0f:2e:10:0e:95:00:68:14:0d:
b5:22:ac:c1:17:01:6d:fd:48:14:a4:1a:48:53:17:9c:0b:2e:
2a:e9:38:d6:4c:1a:30:d6:01:27:75:35:89:02:14:65:61:65:
40:10:2c:43:9d:d3:f4:b6:66:12:55:ae:0c:00:10:cb:fe:be:
26:43:bf:4b:dc:50:6f:65:30:10:cd:ea:ee:7d:d5:7d:70:29:
f7:ee:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:47 2025 by rpki-client