Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: RZnriXy8Q+NQm4qsotq+Y7Xkz//jvIpayu6Ao/h0424=
Subject key identifier: 14:E7:C7:6F:BF:B3:98:F9:47:94:7B:83:6C:5F:AC:F1:87:46:09:49
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 0197B8210B05F8F48F23890D0DA2161ACE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0CEE
Signing time: Sat 28 Jun 2025 20:01:02 +0000
Manifest this update: Sat 28 Jun 2025 20:01:02 +0000
Manifest next update: Sun 29 Jun 2025 20:01:02 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: G9eBvBxDQibB6MIKW3O/dtxEibHo5EDx8IXR3Lft8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0b:05:f8:f4:8f:23:89:0d:0d:a2:16:1a:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Jun 28 20:01:02 2025 GMT
Not After : Jun 29 20:01:02 2025 GMT
Subject: CN=14e7c76fbfb398f947947b836c5facf187460949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:44:66:91:36:3f:fe:ee:48:ca:90:91:7b:
de:14:5a:57:da:d6:a7:a7:ef:62:fd:7d:27:a0:c2:
88:ac:5a:f2:d3:6e:87:a2:d0:9f:41:ad:cf:11:df:
a0:c1:a6:49:09:5b:cf:4e:31:b4:19:b3:79:f7:cd:
dd:e6:7e:00:4a:eb:87:09:53:2b:e3:f5:03:19:1a:
07:3a:2f:ae:42:2b:1c:2c:d1:e0:84:b9:62:de:68:
01:5b:27:2d:1d:7b:01:6b:c1:53:d3:37:7b:0f:54:
ae:fc:0b:e8:fc:38:51:48:1f:fd:d0:a4:c2:5b:3e:
33:39:f2:22:75:91:7f:d0:c2:ff:50:43:35:2a:79:
7f:5e:4d:83:21:78:ff:2d:b7:0d:45:c6:e8:9f:c0:
fb:ce:07:d2:5a:1b:36:a3:84:e1:95:52:2e:c7:3e:
c7:16:e1:22:f5:0c:03:e4:d4:c5:9e:61:0a:c3:e5:
b7:4f:a2:fe:91:ed:09:42:c1:f7:ec:0c:41:3f:62:
d3:a1:41:a1:16:46:71:b1:f9:f1:72:7a:89:de:b6:
cd:61:9f:44:4e:50:cc:fc:be:fd:85:87:00:1c:a4:
6b:3e:77:9b:cd:f1:0f:8b:f0:ea:cf:cd:f5:15:22:
4e:18:d5:ed:de:82:df:f6:d1:b0:f8:62:bd:fb:f0:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:C7:6F:BF:B3:98:F9:47:94:7B:83:6C:5F:AC:F1:87:46:09:49
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:70:46:42:9a:84:06:1b:8d:6e:cf:b4:8b:23:f3:71:df:47:
e8:2c:52:c5:98:4b:e6:ce:f3:fd:24:5f:f1:10:77:8d:70:ca:
5a:b0:fc:5b:8a:2b:d9:fb:71:a2:a3:cd:b8:2d:ce:89:95:f8:
c8:d9:01:ec:31:b4:f7:ea:31:53:d3:34:b7:66:c4:f0:09:5d:
93:9e:a8:a6:3b:cc:de:5e:9a:9a:33:c4:ed:74:d5:d2:74:48:
af:a4:1b:9d:f6:e8:a2:28:1d:07:a2:4b:6f:dc:cd:7f:95:63:
af:0a:04:1f:c0:60:7e:d0:f2:1d:f7:e4:32:dc:d1:4e:f8:51:
02:41:e0:08:91:94:e4:d9:19:8b:cb:de:ec:fe:93:38:2d:f1:
c5:72:f6:d4:4e:33:00:36:26:24:8b:26:df:a1:5c:42:b2:e5:
f0:be:16:a0:ce:b5:a1:df:e0:fc:c7:6c:45:df:5f:18:a5:b9:
e7:0c:c8:48:8a:c6:8a:e1:aa:90:6b:c6:5b:29:7c:7f:1d:92:
3e:10:db:ae:38:eb:55:0a:b9:68:81:63:bd:c3:c7:d5:f8:9c:
8e:a7:75:61:38:74:af:20:8e:87:2a:8f:93:6e:d8:dd:2f:26:
68:70:bb:1a:c6:93:ad:89:16:0a:e2:bc:fb:72:e1:1c:a8:8d:
fc:f7:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:25 2025 by rpki-client