Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: czwbFbKDgbYBmkJJzUYMAkUQZpD0WiMFS8m20rYQJiI=
Subject key identifier: EA:44:17:D7:14:5B:74:13:41:E7:54:2A:AD:BA:4A:24:E3:30:07:B5
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0197B7EA9845667C90CE59674124F16DCFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0E78
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: AFYykvTNSGwfzWSu0KHX2xjwCyF9syMiZ2CMXPnWPck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:98:45:66:7c:90:ce:59:67:41:24:f1:6d:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=ea4417d7145b741341e7542aadba4a24e33007b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:ef:3d:01:c2:16:28:33:c5:ce:12:f2:9b:
43:aa:9d:0d:68:ea:0d:da:d3:fd:5f:5e:09:19:b4:
e7:ae:e9:05:64:7e:ee:e3:f8:25:b5:6f:0c:28:63:
42:f1:81:27:e1:33:18:4b:7a:98:11:d9:c6:9e:dd:
d7:1b:34:fa:1e:98:3a:54:a8:2f:6d:a4:48:15:94:
c6:a6:d7:d1:48:e0:51:30:44:31:cc:d7:13:08:c1:
9e:b1:3c:dd:43:7e:92:7e:23:c0:ae:5a:6e:d7:6a:
5b:c7:40:ef:10:eb:69:6c:69:57:f4:b6:62:1f:a1:
d3:2b:c8:52:93:f6:e0:0d:77:a6:c7:57:1e:71:74:
12:36:01:90:02:40:1d:4b:76:1b:d8:d5:02:42:3f:
9e:83:53:58:3a:bf:f1:79:2d:f9:4f:4d:c2:c3:b4:
6c:fe:76:87:20:0d:c0:11:c8:c7:29:52:3e:92:c3:
e9:09:cc:21:41:6e:6b:60:7c:f6:c9:4a:8b:df:0a:
df:bb:64:27:80:a3:3f:c4:a9:b5:26:58:78:a4:b8:
7e:76:ce:76:f3:51:17:3a:5d:ef:5c:a3:d3:31:ac:
c8:17:b1:b0:69:48:87:fb:24:5a:f1:58:fc:60:fc:
30:21:f3:36:c1:40:f4:37:83:ce:96:ae:93:88:82:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:17:D7:14:5B:74:13:41:E7:54:2A:AD:BA:4A:24:E3:30:07:B5
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:81:ec:dc:f4:2b:77:0b:e6:bb:b0:eb:83:57:64:51:c7:
3a:e8:92:52:de:1b:35:87:8b:0d:1d:00:0c:c1:50:f2:79:8e:
06:0a:f5:10:29:e5:da:99:37:63:0f:ce:a2:14:0d:8a:d9:3e:
66:2c:8a:36:c3:29:d3:49:ed:e5:d2:8c:90:ff:00:4e:20:d8:
c1:a2:49:a4:c9:24:79:37:a4:b3:63:99:ad:13:04:5a:6b:6f:
fa:63:c5:90:28:43:2e:ec:c5:71:89:9d:43:b2:d5:27:fc:f9:
a6:02:8b:db:4e:0d:1e:57:88:7e:e2:86:3d:85:4e:6f:df:86:
b2:8e:a1:f7:35:57:14:fa:2f:0a:52:08:ca:1f:9a:28:f1:78:
4b:1a:30:c1:2d:ac:12:cc:65:ea:a2:10:00:9a:c9:4f:aa:4b:
ea:b9:1d:71:bb:84:e1:85:d1:3e:99:e5:30:e5:17:44:0e:d5:
b8:d9:4c:2e:ce:d6:8b:67:9f:6d:ae:cd:ef:5f:66:bc:d0:c4:
c4:b5:a4:09:93:6a:e1:e1:5c:81:c2:c2:77:92:58:4c:23:7b:
02:a6:f4:a3:e4:ac:3e:75:80:b4:8c:9a:d9:49:23:75:b2:f8:
45:31:e0:64:ac:cb:d3:82:2c:db:68:a3:20:f2:81:c7:26:ba:
64:0b:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:04 2025 by rpki-client