Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: joXKSBtV7SkSPcv0Ll9pEi7WAOVhru7dO6lT1bLUGjg=
Subject key identifier: D4:76:8E:01:B3:FD:C7:94:4C:E1:8D:86:20:03:83:D3:A8:DE:67:C0
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0197C380D4BD52DD57E59CF6321A46F24DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0A18
Signing time: Tue 01 Jul 2025 01:01:29 +0000
Manifest this update: Tue 01 Jul 2025 01:01:29 +0000
Manifest next update: Wed 02 Jul 2025 01:01:29 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: NQgxuF7f9M/gT0oiykDsjPV26eFC4D3P4yUv1lKEJPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:d4:bd:52:dd:57:e5:9c:f6:32:1a:46:f2:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Jul 1 01:01:29 2025 GMT
Not After : Jul 2 01:01:29 2025 GMT
Subject: CN=d4768e01b3fdc7944ce18d86200383d3a8de67c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:44:7c:5b:ed:ab:a9:69:5d:52:8f:5e:e1:
30:1b:e8:a7:66:51:4b:ed:a1:e2:cd:e5:c8:2e:ef:
ce:72:a0:41:bf:cc:cf:ed:af:85:97:94:2b:50:10:
e2:be:ac:23:9a:04:be:e7:27:ab:15:f5:fc:7d:b1:
85:1e:ad:dc:e1:4f:cc:dc:3a:81:dc:05:3b:ba:4b:
67:40:b1:51:12:fa:d0:93:9e:03:a3:7d:e4:19:f1:
0d:cf:4a:5f:1c:7b:0f:b2:78:c9:21:36:56:6a:4c:
9f:9b:17:b5:dd:f3:7c:d0:e2:67:e8:35:a7:b6:95:
0c:62:2e:03:79:4b:fc:24:38:f1:7f:a5:4e:74:e4:
24:0a:26:52:e8:d4:b0:a2:db:30:dc:0a:b2:80:d0:
26:29:3c:34:b4:1f:5e:e4:08:32:fe:0f:c4:97:8f:
f7:ae:62:ef:9b:13:c7:31:7c:de:95:1f:ae:fe:c1:
1d:3d:68:55:57:42:82:e2:94:75:c8:8c:92:d1:7d:
ba:18:fb:45:b7:96:de:c1:23:7a:7b:bc:77:13:1b:
3f:94:88:11:fa:96:71:3e:dd:f5:d6:51:09:d2:48:
b1:73:7b:9e:50:60:5d:b8:e4:87:95:e1:78:bb:86:
92:19:aa:dd:4c:36:d0:2f:7f:9e:ca:08:26:8a:6d:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:8E:01:B3:FD:C7:94:4C:E1:8D:86:20:03:83:D3:A8:DE:67:C0
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:db:20:38:20:f4:29:47:44:b8:c3:e6:93:0a:d9:95:af:
1a:42:c1:dd:c5:bd:7a:e4:5a:d3:23:2c:a4:dc:7d:55:f7:5e:
ce:15:f2:2b:9f:cd:d2:61:98:5e:0e:56:c3:9e:4f:03:c8:e2:
5e:30:b4:85:7f:ba:d5:f4:70:4b:0c:88:93:6b:c4:cc:ec:5b:
31:27:25:3c:58:00:c8:3b:09:b6:8f:ac:9a:5f:a7:05:74:da:
6d:32:e6:55:eb:4b:0c:3c:ed:b2:fb:46:cf:1e:32:26:20:b7:
94:29:0d:6e:e6:a9:cf:08:5d:be:83:e5:58:16:c6:48:31:85:
be:54:d9:81:17:fd:eb:20:a4:76:bc:63:9a:44:e1:53:d6:e4:
4f:cb:e4:33:d1:e3:3e:2b:26:35:60:93:72:c5:e8:a8:f7:50:
83:09:eb:cc:f1:3f:55:1d:c3:81:10:24:68:6c:2e:fe:6b:83:
bd:1c:7d:b7:bf:84:0e:1c:25:4a:9c:b5:dc:30:07:df:90:c2:
a8:bc:02:5e:db:df:1e:97:25:cc:c2:ff:8b:dc:b3:00:97:90:
6c:5e:0b:bc:d2:0c:08:f3:4e:6b:4d:46:ea:dc:8b:73:b8:3b:
77:e0:d4:6c:03:16:a6:20:d0:ce:f6:5e:94:82:49:e5:83:ec:
c4:42:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:48:17 2025 by rpki-client