Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: w/Q6Mmm2pbAsgzzRisKdkfpQi4LFn6L7FvDFN7iViRY=
Subject key identifier: 1A:95:EA:79:57:B6:0B:3E:D7:11:AF:0F:4A:56:E2:F2:89:90:8E:5E
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0197B70F1477D76B6D922D8D29601E3665CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 045C
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: hDGtPR3HHl9LE1Rr7Ae/niAXKs8Gsg7uAC0AA8PDOYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:14:77:d7:6b:6d:92:2d:8d:29:60:1e:36:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=1a95ea7957b60b3ed711af0f4a56e2f289908e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:d6:30:b2:c9:02:38:50:7d:22:2d:f2:b0:
d2:8f:62:f0:95:f5:e2:04:46:90:22:d5:a0:20:3b:
e5:c2:c1:91:e2:48:6a:21:80:87:69:b9:f4:db:71:
2b:6b:6a:c1:f7:86:4c:9a:13:18:80:18:60:ae:88:
cd:b9:e0:49:0a:29:4d:81:ce:f4:18:1f:9b:95:34:
ca:15:8c:f9:d3:a4:62:54:10:80:ed:e8:fa:2e:f9:
ad:4f:21:5a:1f:c8:ce:a2:80:2f:49:12:1c:19:25:
8c:50:0f:4a:2e:21:c2:a9:e3:2a:f5:05:de:1d:15:
33:e0:e2:e1:0a:17:d0:88:de:85:d6:68:4c:62:e5:
ef:b0:7b:32:e9:10:01:f1:73:61:2b:a2:0b:4a:34:
b3:f5:f0:17:f6:f3:5f:aa:af:94:f6:bd:39:35:7a:
92:7e:64:df:e3:df:2d:9d:2e:55:2e:d6:8a:15:fa:
85:1c:b1:e3:f2:6d:23:91:a2:81:e8:25:c2:33:b4:
22:09:82:3d:46:3a:8c:69:cb:a9:67:9b:19:92:6d:
4e:66:66:c9:11:a6:f7:69:cd:0e:de:0d:a1:bc:0a:
26:99:6d:5c:77:01:8c:0e:d5:38:e9:8a:e5:f0:55:
ed:a3:63:3f:fe:d0:91:26:18:1d:60:b8:e2:30:65:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:EA:79:57:B6:0B:3E:D7:11:AF:0F:4A:56:E2:F2:89:90:8E:5E
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:13:0c:d2:6a:bf:db:34:41:24:d9:b3:fd:6b:40:a2:da:
de:3c:a1:f3:1e:57:ae:aa:50:cd:c4:c6:59:98:89:e6:66:db:
dd:45:d8:8c:bf:fe:97:30:c4:76:b1:9d:ec:2d:26:05:85:d2:
82:e3:26:56:9d:de:1d:2f:1e:68:c6:5e:c8:af:a6:af:fe:ac:
a0:cd:bc:3c:99:92:91:30:89:e3:0f:48:29:ef:3e:e3:e1:2c:
4a:7f:14:c7:6d:4d:25:50:0b:89:c1:f2:7f:cf:ea:b6:df:06:
b2:03:5c:4a:7f:6b:d1:00:f5:af:b0:51:af:e3:14:3c:12:7a:
15:cc:dc:4a:5d:f6:b8:32:80:1c:aa:f6:41:1c:54:73:31:5b:
a1:83:61:ed:3c:7c:d0:3f:51:bd:b1:a9:64:f1:4c:6d:77:32:
d9:4e:35:b6:f0:6f:05:51:18:6a:92:2a:1b:19:27:3e:2c:23:
ac:8a:43:05:5a:90:e3:0b:eb:02:15:df:87:0c:00:45:80:f6:
b0:70:5e:ed:8a:3a:70:de:52:3f:3f:91:c6:47:00:96:68:6c:
25:f1:f0:c8:c3:f7:e7:60:8e:f7:94:d4:44:92:fa:c0:b9:5a:
3b:74:1e:4b:d5:48:cc:ee:58:3e:25:77:63:af:bb:fd:92:0b:
12:7f:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:22 2025 by rpki-client