Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: f5tOQaL7EMit+fQTV5deMshQHjiex1CUKvLTWAkfVcs=
Subject key identifier: A6:E1:74:6A:10:2E:13:AA:9C:8C:A6:17:A7:6C:B1:F0:19:D1:0E:54
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0197B7456C93E0CB039DBFB69ACE6F0C0DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 04DE
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: VA3wjJ+Mu1M1oApCdLJGrFuTkexAA2M1ILX6fmWW95Y=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6c:93:e0:cb:03:9d:bf:b6:9a:ce:6f:0c:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=a6e1746a102e13aa9c8ca617a76cb1f019d10e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:32:99:49:19:03:be:63:c2:fd:41:e9:35:
82:84:35:2b:3e:db:16:1e:38:c8:21:15:a6:7f:33:
59:3f:f7:71:a6:05:4a:bd:a6:5d:c6:a8:5f:49:af:
db:a2:c4:9b:80:4f:2b:0a:63:7e:78:db:28:e6:5d:
2e:b9:e0:c8:62:0c:69:50:99:e9:fb:80:2c:1b:1f:
db:c2:20:5f:97:98:37:0e:2f:5f:70:7c:e3:18:51:
5c:05:6c:92:3b:8f:b7:65:d9:29:92:9d:f0:d2:85:
7d:db:d9:d0:70:db:b1:f9:a5:e1:3f:91:0c:3e:3e:
bf:0e:e7:63:30:16:b7:01:e8:7c:14:25:d2:7e:b0:
20:58:af:ea:9d:2e:26:44:8f:98:9e:92:af:55:33:
69:a4:36:0c:5e:1c:f3:8e:fd:ed:23:18:63:98:d1:
c9:93:3a:41:59:f6:b7:51:fc:62:b8:9b:59:db:ed:
9f:9c:67:bc:46:3f:d8:0c:94:4d:40:24:3d:ed:eb:
c7:f9:ec:90:c7:a9:1b:f7:fb:65:0f:cd:e3:eb:e0:
60:c3:52:e8:f7:e6:77:1e:f7:a0:59:27:d5:36:d0:
c5:b9:c0:32:ac:a7:45:b5:76:b8:b2:ca:ab:fd:5c:
98:1f:97:c9:a0:d8:08:bd:6a:cd:79:fa:3b:cc:20:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:74:6A:10:2E:13:AA:9C:8C:A6:17:A7:6C:B1:F0:19:D1:0E:54
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:ad:6e:7b:45:d6:e8:23:e7:7b:ec:f3:d6:68:a9:c5:78:
ba:6c:8f:d9:4c:c0:f5:bb:29:44:c8:ed:22:e0:3f:b6:b2:02:
04:6b:69:2d:3d:48:12:d4:a0:09:7e:7a:81:aa:fc:53:21:b7:
35:94:88:a7:65:bc:56:2e:99:90:da:32:5c:81:e8:fb:f0:ac:
9f:f3:24:61:31:9b:f5:b8:1a:19:e8:95:67:7d:d7:8b:60:e8:
12:18:78:1e:b4:02:58:93:81:d5:ea:01:95:d5:2d:04:b9:d6:
9e:17:81:af:fc:d7:1b:6c:6f:0b:84:82:56:59:bf:20:40:ed:
75:51:2a:e0:b2:b6:07:1b:01:af:14:0e:e4:cd:c0:d4:c0:90:
7e:b3:b8:a0:14:a3:5d:f2:47:e3:32:10:bc:38:ab:b0:43:a6:
e5:23:40:cf:10:27:ce:05:52:6f:2e:8b:de:a6:95:f6:ca:4f:
5a:03:32:f1:71:3d:c0:e5:fa:08:8a:6e:02:46:54:1f:9a:51:
a6:b9:43:14:0e:b6:3a:9e:32:ae:22:36:aa:ed:56:24:69:90:
c6:ad:dd:d1:77:76:81:e8:19:ba:3b:8a:5f:3b:43:5a:7f:40:
e2:66:b4:61:1c:db:f4:cc:e8:1b:d7:e0:bd:a6:7e:e5:da:ba:
bd:dc:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:55 2025 by rpki-client