Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: xu08YnmW3Cx1PDDd39fuppP9DUqm3eW+ACFKWrwIVc0=
Subject key identifier: E6:B3:93:99:23:89:B8:71:7C:04:EC:61:06:8A:6F:5E:C6:05:B2:83
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0197B8210D2B1BBB4298B3282D255137C541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1390
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: RX0JgqAtwG7LH8AmCkoTpxQd1aQ1ghcaCJPZojaeibQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0d:2b:1b:bb:42:98:b3:28:2d:25:51:37:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=e6b393992389b8717c04ec61068a6f5ec605b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:ec:e8:e7:89:70:2e:69:06:6c:54:76:4d:
94:9a:81:3e:89:d0:7f:6f:cf:2c:a2:1d:9e:70:c7:
dd:80:df:c8:b3:03:1e:51:32:34:24:f3:0f:94:97:
61:87:05:85:ca:69:70:7d:a7:f9:a6:58:34:a9:4e:
e1:0d:21:f7:f2:ab:13:8b:7e:57:2e:49:63:03:e1:
66:15:0d:3c:b1:b4:9b:06:77:9a:3d:e6:26:d7:35:
d8:d5:50:71:12:b4:5e:aa:25:b9:5f:4e:b3:01:4e:
3a:63:65:f6:55:dc:df:48:4d:a1:38:cd:b7:d9:61:
00:38:f2:0f:69:9f:08:92:6c:e3:df:4e:22:51:56:
c3:b5:9e:a3:ad:d9:42:8e:fa:e5:d2:82:56:e6:01:
89:a2:06:07:71:7b:71:46:3d:65:4c:63:22:85:03:
ca:30:82:11:87:4f:61:c6:af:79:71:a3:6b:d0:ff:
c3:12:17:a5:1c:06:5e:1b:ff:56:1f:48:d8:35:a5:
ef:65:cd:80:c7:65:19:8f:a8:6e:10:3e:f0:17:fb:
d9:89:4a:7c:32:b1:c0:89:ff:a5:e3:73:f3:8c:60:
6f:ef:09:48:94:ae:ec:d8:81:97:08:10:9f:3a:06:
2a:54:f4:70:ad:d7:7a:02:d3:84:6c:53:b1:92:f7:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:93:99:23:89:B8:71:7C:04:EC:61:06:8A:6F:5E:C6:05:B2:83
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:69:5a:5c:7a:c7:31:9f:a7:6c:66:7f:09:05:6d:0a:66:b8:
dc:fa:78:f1:97:cd:5b:51:84:d3:34:7d:dd:31:b4:26:26:36:
83:46:6d:80:01:43:be:26:04:23:1d:13:ea:a1:a4:0c:6c:fb:
21:9c:b3:4e:f7:a9:5e:08:a4:bc:57:08:d6:56:bf:02:e9:38:
34:7d:9f:63:83:25:20:38:1f:78:87:51:36:dc:7d:b5:cf:d2:
ee:6d:13:23:53:0c:a0:2d:2b:4d:6c:41:68:60:50:51:06:bb:
ce:e7:96:b2:91:57:ec:f4:0d:93:47:02:0b:0f:13:51:fd:9b:
18:9e:2f:a1:c6:61:8b:6d:30:3d:45:db:6b:64:9c:9d:7e:d9:
36:01:88:a7:08:41:cc:e3:37:a4:34:bd:05:ed:2c:3c:02:17:
02:ef:6d:04:2c:95:e2:b1:0a:d2:4d:39:34:16:5a:2f:d5:7c:
02:ad:ab:23:96:8c:8f:e3:58:aa:f4:06:3d:e8:49:90:ac:55:
9f:cd:0c:cf:e4:f4:e7:40:b3:4e:19:a0:41:95:cd:04:8f:aa:
a7:dd:17:96:7b:df:31:13:af:e0:09:c6:12:33:24:2d:e2:32:
1f:c0:cb:6b:49:fa:30:4f:ee:96:75:b5:af:d8:8c:e3:f2:d7:
f5:33:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:29 2025 by rpki-client