Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: omwqNJPc+434Ohl6dH3X61MvUkQfJ0FvbnbAcX9+xkg=
Subject key identifier: 81:07:91:F9:1E:C3:2C:0F:AB:C7:99:1C:92:9E:0A:18:1A:F9:BF:0D
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 0197B8FD4FD44240F93A03B13033851A18CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 00:01:38 +0000
Manifest this update: Sun 29 Jun 2025 00:01:38 +0000
Manifest next update: Mon 30 Jun 2025 00:01:38 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: OLNuhSU8yoq/mD+PCwBESJrqRsquPk7SFvqbGaGUf1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:4f:d4:42:40:f9:3a:03:b1:30:33:85:1a:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jun 29 00:01:38 2025 GMT
Not After : Jun 30 00:01:38 2025 GMT
Subject: CN=810791f91ec32c0fabc7991c929e0a181af9bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:58:36:15:ed:50:0f:c3:83:47:69:b9:55:
e4:9a:b8:4c:0f:27:9c:6e:dc:83:bb:92:e4:31:c2:
d7:ad:f0:a3:36:84:2d:ad:1c:ce:84:66:22:c3:1d:
5e:58:ce:47:a2:9d:e1:27:f1:6d:13:9b:05:80:dd:
ef:af:02:83:59:6b:3b:50:4e:ac:76:6d:b3:d6:90:
f1:a4:14:63:7a:d7:d4:9f:c3:11:61:cd:b4:0b:fd:
2c:c5:de:ad:f1:4d:05:6b:08:3c:5a:01:d7:75:c2:
a9:6d:cf:2b:12:b0:5f:1c:59:42:5c:67:2c:6d:24:
a6:be:08:51:8d:80:17:7f:ba:f5:83:93:e2:b0:10:
09:4e:0a:fa:c6:88:18:cc:f4:c6:f1:96:6f:1a:7a:
d9:51:13:04:2e:b9:b0:b6:58:a4:e5:29:dc:e4:01:
e2:5f:3e:18:37:42:12:c2:95:d9:c4:8a:5c:f1:f9:
b3:a3:a4:92:f9:e8:15:5f:50:c2:c8:eb:18:e7:e0:
44:b1:45:a0:58:a3:d7:4a:b5:67:37:c3:50:ea:bf:
3c:1f:81:1e:03:09:8b:dd:9f:67:5f:9d:8a:22:7c:
92:84:a1:ff:b2:35:dc:f3:07:41:8c:9d:76:09:33:
4b:48:38:42:be:8b:9e:e7:c0:74:71:9d:55:4d:d2:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:91:F9:1E:C3:2C:0F:AB:C7:99:1C:92:9E:0A:18:1A:F9:BF:0D
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:c1:14:04:14:33:6f:64:36:a8:c3:e8:14:82:20:06:1d:
c2:06:79:52:be:b0:81:28:d8:68:88:a4:db:f0:35:ed:bd:d1:
06:f0:6d:94:87:48:c3:78:3a:41:5e:06:fc:a9:6a:58:57:be:
bf:26:95:bf:05:2d:f7:06:f6:bb:04:66:58:c0:f3:02:14:4d:
f4:a0:32:8c:d6:f6:df:a5:72:f7:9e:0f:41:bf:14:43:60:53:
f1:42:c3:d5:e4:75:64:b8:07:b6:f4:64:6b:72:fa:55:af:df:
82:98:7d:97:a3:be:fa:92:7e:53:84:db:58:5b:51:85:e2:f2:
76:4d:b6:d1:2d:31:b0:a3:ed:d4:64:e8:a8:d4:6f:b6:4d:3a:
0e:c0:4d:7f:d7:d4:bc:02:90:b6:77:5e:fd:37:5a:2f:b0:59:
55:03:b4:32:c5:dd:da:fb:a1:c4:1b:9f:28:cb:75:52:e3:62:
ab:10:08:7e:43:d0:de:f6:ae:00:77:01:20:c3:52:9c:09:ab:
f6:29:aa:27:03:ac:80:61:5f:74:c1:d0:77:ad:75:be:62:27:
ae:66:b9:b6:93:eb:0f:45:d0:3d:fd:74:5d:23:e0:e8:e0:1d:
7c:51:66:1c:36:0a:c1:6f:a8:80:5c:79:48:a3:60:25:0e:c2:
54:85:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:31 2025 by rpki-client