Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: EbfK1huJhAOK5wlU5K6Gd6OvIInJZOJgwRwGko48A4U=
Subject key identifier: F0:90:0E:E9:04:EA:58:29:0F:51:15:76:06:6A:0C:7A:13:9B:A3:4E
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 0197B6D7B36D8F83B0D0839E016C862711BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: 0OY1x0alsipTi1ipdPDE/73jpdm2S9LngznnQdRWGn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b3:6d:8f:83:b0:d0:83:9e:01:6c:86:27:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=f0900ee904ea58290f511576066a0c7a139ba34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:f5:55:d6:e9:be:64:2a:aa:d4:07:0d:f1:
88:f7:ec:2e:55:28:a6:ca:f7:ea:c6:f9:a2:c5:03:
50:47:d6:70:22:b5:f5:3e:d4:b1:0b:68:63:cb:23:
a6:dc:67:ed:92:df:c1:c4:66:d4:5e:4d:36:ab:58:
df:ec:58:72:f3:29:3e:86:85:39:65:d5:28:e9:03:
00:43:37:13:57:65:bb:5e:ea:aa:08:73:e9:25:82:
27:31:76:74:5d:5b:8d:a0:2c:66:a8:1b:af:f8:89:
65:e6:4d:ec:22:ad:d4:e6:59:7a:27:41:e4:e5:f6:
a7:14:42:37:75:d3:c2:b1:29:5e:98:e3:88:d3:73:
d0:18:12:48:e7:59:3c:67:60:b2:90:02:cf:34:ff:
eb:a7:e2:b8:d0:cd:be:3d:0b:03:6b:ac:29:f3:5f:
e8:b9:c0:b7:13:37:ec:70:b7:84:83:26:b6:0c:68:
91:93:ea:00:ed:d8:fd:c3:c8:a3:87:ac:41:60:d9:
36:1e:ba:dc:94:ba:09:7a:37:b1:c0:ea:75:70:50:
53:61:7c:c9:7d:47:c7:27:68:b3:ae:fc:9c:5e:71:
d5:3c:46:7d:8e:75:fb:aa:e0:ed:38:67:35:dc:1d:
74:c1:6a:c5:a7:30:f2:d8:4f:4b:47:4f:1d:f4:11:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:0E:E9:04:EA:58:29:0F:51:15:76:06:6A:0C:7A:13:9B:A3:4E
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0e:4d:cc:85:54:9c:71:34:df:75:ac:98:e0:27:bb:22:d5:
62:61:28:9d:9c:7d:95:f5:82:64:0a:d3:de:ae:9d:82:46:ad:
a9:8b:82:0b:6e:d2:23:c2:81:fc:64:9c:6e:6d:25:1b:3b:6f:
b5:e7:fa:f3:f7:ec:38:0b:da:8a:97:26:3e:ac:7b:42:26:ff:
55:e1:52:27:e8:1f:17:d3:6b:64:80:b6:eb:6a:a4:53:42:d1:
41:1c:48:fc:e0:32:78:c0:ad:34:85:02:58:98:34:f0:70:f3:
e6:6d:a0:ad:77:8f:41:b1:41:64:8d:d4:3c:e2:47:c5:e5:31:
54:6d:27:4a:50:17:f8:3a:a0:52:c1:a4:87:00:85:33:ef:2b:
e4:5c:44:d7:b8:e7:86:21:ba:c8:99:8a:00:5e:d9:44:77:d3:
50:f5:40:eb:d9:fa:c1:77:4c:bb:98:ab:aa:bd:53:0e:df:bb:
72:f1:a3:6b:a8:e3:7e:86:c6:f1:45:59:1f:b9:39:a0:bd:1a:
5b:01:6d:d4:f9:4c:42:70:24:f3:40:cb:da:86:ae:7b:64:b6:
33:54:9c:19:29:02:f9:de:c1:75:89:4f:f8:83:b7:39:a4:c7:
4f:88:6c:c6:e0:17:52:ce:5e:22:13:6c:c7:b1:70:38:5a:1a:
07:01:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:28 2025 by rpki-client