Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: Db1iFjYV2Ce1Q9Pvw2fhaz+YLTJJECa1K8zSLnY3QDM=
Subject key identifier: 1A:33:95:AB:15:BD:72:7C:8A:71:BB:FA:25:1B:37:11:EC:39:E1:A8
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 0197B70E8115F7DADA7048181129BCE6AAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: hggs3dEKlOAzvmEpn3B5XumyXCI693+rxfRdrPwkn5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:81:15:f7:da:da:70:48:18:11:29:bc:e6:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=1a3395ab15bd727c8a71bbfa251b3711ec39e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:0c:20:95:5c:5a:81:84:1e:06:b7:f1:35:
10:49:df:cd:9c:a4:c7:5d:65:81:c6:4e:f4:3d:3c:
d7:f5:33:33:f4:37:89:f7:de:92:6c:73:43:86:7b:
ad:32:ba:0d:ea:b9:7b:5b:91:65:30:81:a9:06:ef:
e4:35:2d:c7:97:a0:19:30:d6:7f:98:dc:84:fb:93:
a5:63:1a:c4:ed:a2:83:c9:05:de:95:98:71:b0:bd:
92:a0:78:0c:4f:85:82:4b:51:f1:1c:83:64:3e:95:
1f:22:42:37:1d:a0:03:ab:a1:21:85:2f:2a:de:7f:
89:a7:8e:90:28:c5:b6:6b:f2:21:9a:0a:12:1c:2e:
f4:72:54:99:2c:d9:b8:97:31:75:39:d6:85:3b:8b:
e1:38:27:85:b6:66:77:f1:ef:17:35:86:17:25:7b:
83:74:b1:56:ca:79:a5:48:c4:fc:55:57:91:b6:45:
88:28:d3:16:06:44:5d:20:88:90:4c:83:69:0d:2b:
03:eb:ce:02:55:1f:b3:ea:b4:59:ed:b3:3a:3e:78:
c7:1a:4a:3f:ec:a0:ac:f1:fe:0e:fe:1f:d9:19:5c:
43:09:a0:aa:ae:af:4a:20:8b:a2:18:74:3c:af:a0:
ec:92:6d:17:c1:5d:37:c7:10:f5:45:5c:86:31:a9:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:95:AB:15:BD:72:7C:8A:71:BB:FA:25:1B:37:11:EC:39:E1:A8
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4e:8c:2d:9a:28:93:7a:ad:7e:51:85:cd:fe:fb:72:30:e3:
27:b3:53:0c:ca:7d:e0:88:41:64:d4:0d:20:c1:c1:f8:6f:53:
c4:d1:04:c0:2b:28:3c:00:bf:85:75:fe:2f:a0:42:66:4c:47:
7c:77:01:0a:c5:ae:ca:3b:b5:74:36:a1:97:0e:5e:08:c9:22:
5e:bd:37:60:71:a3:08:24:ae:cc:a2:8b:51:ef:8c:f0:ea:3f:
76:ff:f6:93:c9:76:1c:9a:38:c2:93:da:68:98:18:69:75:42:
12:66:45:12:98:b0:2d:a4:ca:00:65:3e:a3:f3:71:2e:2f:12:
23:c0:ac:c0:87:e4:4f:f7:27:73:1a:ba:a5:5d:a1:64:e6:07:
db:c3:da:b9:06:11:43:52:3f:c0:f5:78:e5:06:81:ec:99:6b:
67:05:fd:05:d9:fa:3c:96:d7:f0:b6:96:0c:31:17:bf:2c:a7:
54:e3:e0:4f:5e:62:46:ea:8b:80:f7:28:5b:06:09:c1:2b:74:
e6:fe:12:37:c6:db:f6:7c:bb:d0:6e:2f:11:36:7e:08:c3:ea:
e1:5f:71:a6:e4:8b:db:4b:b7:c8:24:9e:8e:7e:60:59:26:fc:
07:fa:71:9a:72:17:f3:47:36:81:8b:f7:ea:be:9b:16:30:9f:
3a:39:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:11 2025 by rpki-client