Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier: CrZiWcYDHPEZ/wgDz4rDIb/n8QVfH8fjyIf6pmv3keI=
Subject key identifier: AC:EB:7D:12:9B:F1:9B:F4:69:B8:EB:4F:C5:CB:A3:73:C4:E6:0A:55
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 0197B745828EC5BA9130426B1EC4589E0C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 1nNXrg9kNJmrbwr01_wdlr4zRG8.roa (hash: jP5XT6aNraFgRF1RUdhNykj84LWIdETmEVMazBCC7NY=)
2: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: PE8cZuP+e34nlsKmkt0G+bl2trUzswwfybrLC+Rtf2o=)
3: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:82:8e:c5:ba:91:30:42:6b:1e:c4:58:9e:0c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=aceb7d129bf19bf469b8eb4fc5cba373c4e60a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:e9:65:b7:df:df:43:31:18:84:e6:5c:80:
87:6c:f8:46:21:fc:c9:8e:b8:78:14:b2:7c:3d:90:
19:3c:ea:d2:e5:c3:ee:6d:62:da:1d:48:04:9f:7b:
7f:40:ce:ce:5c:06:28:0f:3b:54:7a:ca:c2:dc:91:
5f:e5:94:7d:be:2b:41:02:4a:b5:f1:8b:89:84:d4:
07:ce:bd:ca:f0:5a:41:ae:53:5a:d1:26:14:c0:f6:
2a:af:e9:46:53:b9:4a:a0:ca:ad:54:d0:25:59:b5:
79:90:a0:3b:63:2a:75:2e:0f:0f:b9:cd:d3:b8:4c:
00:dc:a4:47:52:ea:92:16:79:a2:2e:c1:8e:24:bb:
8f:52:b6:63:1b:8d:48:7e:1f:d2:d6:d9:a0:3a:c9:
af:1d:29:a4:4d:66:07:b3:79:82:a7:e3:8c:e0:82:
ba:f9:51:8d:12:e3:c6:9c:3e:47:0e:a5:eb:5f:e6:
df:b1:ab:15:61:e2:1b:aa:4d:ce:4a:6c:59:2d:90:
82:e8:5c:bd:93:dd:d1:67:05:e6:d2:c3:5b:64:24:
64:7c:ab:88:55:d4:d6:e3:b3:14:cf:90:ae:3f:82:
f6:e3:34:69:2f:5c:fb:ca:97:d5:be:2f:6c:65:fc:
24:c4:55:1b:57:dd:12:4e:ba:61:b8:d1:a6:d4:45:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:7D:12:9B:F1:9B:F4:69:B8:EB:4F:C5:CB:A3:73:C4:E6:0A:55
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:eb:54:8d:64:1a:b0:8e:4f:8c:0d:71:07:46:2f:d3:91:
4b:4a:ca:09:87:90:c1:11:89:a0:33:23:81:19:d5:81:b8:59:
6d:df:34:d9:77:4f:a8:b5:f2:c2:24:14:66:ce:e2:f0:55:16:
4d:b2:ee:66:a8:f9:e8:73:54:18:06:b3:8e:80:0c:3f:92:68:
dc:85:ff:af:10:50:04:a4:6e:7d:a6:16:5d:da:a2:27:68:09:
89:15:a3:1f:63:78:58:ac:17:60:b0:9a:04:11:cb:79:a5:f4:
78:73:3a:3b:da:b2:91:01:f5:9a:f8:96:98:48:46:77:2b:0a:
3e:a1:ed:57:36:8e:66:d7:7a:ce:47:c9:45:2e:8e:81:e8:5b:
f2:f7:44:b1:ec:86:7e:c8:dd:e0:4e:46:02:09:3f:c2:4d:15:
00:38:aa:88:56:7b:26:8f:17:52:95:e2:8a:7e:6c:8a:cb:6c:
51:f6:a6:9b:a0:68:48:2d:f0:5e:c5:8d:b6:b4:e0:46:01:e5:
65:58:38:12:93:4e:d5:ed:ab:23:3c:df:f7:85:66:3f:7a:4d:
7d:fa:f9:96:dc:ac:a6:89:2c:36:4f:6c:d0:89:b1:79:3d:bc:
a4:1b:25:b5:54:41:14:5c:f2:ce:6a:12:fd:33:4d:e4:82:a3:
48:7e:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:41 2025 by rpki-client