Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: ioturtWWP8rU0PUy+0+u7SMZ0G1cXMu9pz14HLvP9DA=
Subject key identifier: B6:26:B6:A7:E7:14:D0:30:69:04:64:5D:CB:93:7B:1F:9E:B5:F6:EF
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 0197B9D916586FD9EE0B74B9136CDE626C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 010D
Signing time: Sun 29 Jun 2025 04:01:41 +0000
Manifest this update: Sun 29 Jun 2025 04:01:41 +0000
Manifest next update: Mon 30 Jun 2025 04:01:41 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: aJVqLWbFag9AXK3tPkiKX9q9OUhgzda87TEK5iv9u30=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:16:58:6f:d9:ee:0b:74:b9:13:6c:de:62:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jun 29 04:01:41 2025 GMT
Not After : Jun 30 04:01:41 2025 GMT
Subject: CN=b626b6a7e714d0306904645dcb937b1f9eb5f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:2f:e7:a1:6e:4d:1b:89:5d:eb:3a:e7:8d:
a4:29:d4:22:40:60:8a:25:14:d7:d7:20:ee:ba:d0:
e5:88:70:a5:46:2a:29:72:40:7b:e7:80:46:5f:39:
03:b8:ba:2f:8a:d2:c9:77:cc:a3:99:18:b4:64:f4:
c8:15:51:eb:c0:ba:3c:48:d4:b8:78:2e:22:32:8d:
c9:2c:ac:93:e1:bb:f0:41:5e:4f:22:85:23:32:7a:
f6:00:52:e0:56:e9:b1:07:fd:b3:03:92:f3:7f:45:
98:df:79:25:63:d6:86:6b:e1:08:99:f1:5e:f0:c9:
8c:38:22:6f:27:7b:a0:1c:05:4f:d5:6c:77:f4:ca:
4e:1f:3b:7c:b8:84:f3:6a:7a:43:a2:5f:4f:9a:b4:
78:92:56:83:d9:f7:dc:b8:72:85:6a:bc:9f:71:86:
18:32:40:3b:8d:3a:4c:b8:06:4b:66:a3:70:fd:02:
33:fa:c1:91:23:b7:11:71:b7:2d:67:3f:21:e2:e7:
dc:11:1d:53:5d:01:f7:43:a0:1a:9d:27:68:4e:e0:
93:6d:33:ba:12:6a:8d:a2:9d:9a:f8:48:ea:9a:e3:
55:81:f9:c6:42:0b:41:39:8c:51:c1:57:23:95:6d:
33:8a:8f:72:3f:21:a3:77:b9:84:94:83:28:bc:f7:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:B6:A7:E7:14:D0:30:69:04:64:5D:CB:93:7B:1F:9E:B5:F6:EF
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c1:c6:50:72:30:4d:69:d8:a1:ec:9e:b7:5b:93:77:8f:70:
da:c1:bb:2b:98:dc:39:3e:9e:d8:fe:a1:20:f3:0c:d0:ba:16:
62:73:6e:b8:82:eb:bd:59:93:cf:a8:f5:27:76:ae:7d:12:bf:
e7:f7:14:c6:6d:66:e0:bb:3a:37:9f:b7:f5:36:ea:e7:ca:f3:
4d:b4:2a:b8:59:26:a8:15:21:dd:dc:fd:a5:75:d3:88:d2:84:
dc:65:8e:d4:2d:62:74:5a:0e:4e:a4:72:ee:c9:43:c2:b2:ad:
7f:64:b1:32:21:f2:61:dc:ad:5e:ca:07:42:34:71:a6:de:41:
a6:b7:3c:ed:9d:f4:11:a9:df:92:08:b4:ae:53:61:4c:6a:f2:
6b:ab:f3:94:e1:be:56:92:be:63:65:98:b2:4f:76:89:3b:87:
e5:c3:69:cb:2d:d6:c6:e9:94:a0:1c:8e:33:36:40:07:45:7e:
58:c1:19:5c:e1:f1:89:eb:9c:68:df:c9:9a:46:e7:95:cd:37:
64:70:a2:f5:75:07:a3:8d:83:b2:3a:00:05:d8:c9:82:37:6c:
8b:47:0f:e8:ef:1f:16:6f:c4:b0:f6:d1:2a:31:bf:33:ef:42:
4f:73:0b:5e:67:95:33:ad:17:ca:79:6a:cf:c4:10:ec:80:75:
64:b8:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:09:22 2025 by rpki-client