Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: hOXERQkfLrFH9dwaLRjPQOVVNYRjUa9iGazi7+VXLIo=
Subject key identifier: 29:C1:8B:AF:18:52:F2:89:B7:F6:7F:F5:EB:50:5A:21:A3:7B:BF:C7
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 0197B6A07970589C9767E71B7D7CEA802410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 1133
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: sfX3ZggTmAZj2gGQvc4fs6Cv3WU0buAXhM2R8xEpW5A=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:79:70:58:9c:97:67:e7:1b:7d:7c:ea:80:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=29c18baf1852f289b7f67ff5eb505a21a37bbfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:12:c6:21:74:1a:3e:46:19:fb:ff:e0:fd:
e3:61:2d:98:88:1d:7e:e0:1d:3b:fe:4c:9d:7e:4e:
30:b9:d1:39:3a:0e:8b:ad:80:e6:9a:3e:30:6a:8a:
ee:71:b6:64:ed:bc:b7:71:7d:c1:2c:c6:03:2c:12:
9a:85:dd:19:12:67:dd:7a:45:4d:a0:ce:68:6b:fe:
99:e9:b8:f7:ce:d9:73:ba:61:ab:d6:d0:7e:96:fe:
b0:d3:65:dd:59:2a:6a:8b:89:a4:f3:d5:f2:ab:dc:
8b:52:32:f4:7f:02:e1:bc:33:4d:b1:64:6f:ba:fa:
5a:d6:1d:5d:c2:c3:3e:05:50:b2:bc:df:62:43:25:
f7:3e:69:54:fb:24:56:6a:42:8a:3e:2d:60:04:6b:
4e:2a:c4:c5:e2:0e:ec:14:a8:03:d8:a9:cb:77:23:
ab:87:f9:e1:8c:bd:a4:e2:25:88:73:f7:52:bc:93:
bc:af:75:01:98:6f:be:69:1a:df:97:8d:34:5e:98:
d8:5f:f7:db:19:7d:01:d2:91:1b:72:c0:0e:96:b1:
fc:37:62:ac:a9:05:fc:f5:99:18:0b:40:9b:d4:35:
ec:cb:f6:08:a3:93:c3:75:91:bd:b1:c4:d2:a5:40:
19:07:a5:bc:65:17:ce:e3:2c:7b:13:80:42:a5:d4:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:8B:AF:18:52:F2:89:B7:F6:7F:F5:EB:50:5A:21:A3:7B:BF:C7
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f1:95:68:67:02:6d:0f:41:ef:33:9f:88:48:bc:67:8c:88:
01:c0:8b:f1:f6:0b:de:f9:1d:87:fc:36:c1:09:f1:43:ca:64:
54:59:96:e8:68:12:c7:5f:d0:22:29:a4:61:5a:7b:b9:dc:84:
b5:75:fa:d6:48:08:41:1d:02:f1:bf:6c:ab:b3:63:b0:d1:59:
90:61:46:96:9b:60:16:97:b1:8d:b5:75:1a:c5:48:97:e1:aa:
fa:82:07:5f:7a:ab:c5:87:b3:64:20:44:30:a4:78:06:71:49:
6d:df:31:61:10:74:64:82:6c:94:c8:29:cb:d4:a7:d7:6b:6b:
ba:9c:eb:e4:39:b4:00:17:7e:e6:ab:32:eb:1c:4a:99:66:0c:
29:bb:20:0a:d7:63:d5:a9:d3:1a:ab:c2:6d:cc:cc:4e:da:6c:
76:41:4b:6e:bf:b8:00:4a:1e:a9:a8:05:84:e1:12:fa:5e:d4:
3e:0f:ed:ba:bf:91:78:61:23:36:e1:6e:c1:29:a8:6b:e3:0c:
85:58:ba:a3:02:e7:a9:58:04:cc:dd:59:d3:a4:84:3a:b0:b3:
ad:f6:2f:f9:1a:d9:57:26:14:6d:6f:6c:c9:c7:84:fb:f2:bb:
1d:e1:6b:0e:b0:5e:e8:e7:60:ff:52:fd:fc:9f:c9:d4:c3:76:
4c:04:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:52 2025 by rpki-client