Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: RSWF29ocmRKNs3ygLzwjuNWD3k903rzyqpUmO9Sb62s=
Subject key identifier: 01:5A:80:C1:A1:D9:E8:65:CD:2E:A4:63:44:95:A6:5E:04:77:94:DA
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 0197CB034912D53B7AFAEBDC83270219AD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 12:01:19 +0000
Manifest this update: Wed 02 Jul 2025 12:01:19 +0000
Manifest next update: Thu 03 Jul 2025 12:01:19 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: 3U3XaUq1DfsNFEmceH22jWifKEGzf9qQEgu99cLGKBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:49:12:d5:3b:7a:fa:eb:dc:83:27:02:19:ad:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Jul 2 12:01:19 2025 GMT
Not After : Jul 3 12:01:19 2025 GMT
Subject: CN=015a80c1a1d9e865cd2ea4634495a65e047794da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:20:79:64:ab:1c:b3:9a:6f:02:dc:00:41:0f:
b5:3b:6f:9c:91:d9:c8:ec:bc:9f:23:10:7c:b7:7b:
d6:1c:c6:cc:59:aa:36:eb:df:54:59:16:ff:7e:64:
61:95:a9:8c:0c:58:a1:88:55:86:1b:4d:80:d5:66:
53:47:40:b4:10:61:a3:61:05:1e:41:4d:3b:53:06:
b5:f8:d9:ff:7b:08:c5:89:13:18:43:b1:f7:a1:f7:
3e:98:45:ad:aa:62:0f:cd:2c:a3:c0:5e:63:35:eb:
81:ae:03:c9:bc:15:da:3b:7e:12:6b:67:8c:42:f0:
eb:b6:59:31:d6:61:43:4a:e2:df:a1:24:ea:0f:6c:
39:1c:f4:eb:d3:71:e8:c3:00:c7:44:65:58:78:c7:
b4:3d:4f:f9:2a:8c:10:4f:da:2c:a1:a5:4c:65:dc:
d0:c7:54:71:df:aa:35:04:d2:53:ee:95:26:4a:f8:
18:0c:56:8c:f0:0b:f3:d0:db:f5:10:eb:7e:2b:aa:
fc:6e:99:97:73:29:a8:ed:27:4b:35:e0:8d:f2:2f:
24:da:69:0b:11:25:d3:67:46:cf:b0:75:49:34:95:
21:0a:d4:b0:0b:bf:10:53:3d:9f:29:0b:9b:ee:3c:
0b:23:72:0b:2b:6f:76:f9:19:a9:0d:1f:f9:50:75:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:80:C1:A1:D9:E8:65:CD:2E:A4:63:44:95:A6:5E:04:77:94:DA
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a5:2f:ab:90:f7:61:23:a6:bd:6e:28:6d:20:77:8b:88:12:
6d:9e:aa:70:c4:d9:ce:61:a8:61:ea:b7:86:6b:af:b8:64:e9:
d9:49:63:9e:bf:14:bc:94:33:40:2b:ba:2a:31:24:eb:be:49:
c9:67:dd:a2:36:c5:b8:59:ca:fc:28:9d:59:cd:c0:ef:af:47:
ed:45:53:c4:b2:fa:e5:83:c3:73:fd:8f:57:98:09:0c:8d:6d:
dc:43:73:42:45:0b:23:a3:b2:e0:79:be:be:25:26:c3:79:fd:
ff:e6:22:e7:d5:61:1b:bc:2b:5c:2d:cd:cc:17:31:6a:36:1c:
ea:25:4e:67:c4:dc:55:60:6c:3d:ad:a1:86:da:63:a4:11:8e:
c6:e4:de:db:38:4e:62:e1:cf:a8:51:e2:90:db:78:af:1d:87:
0d:99:2f:b0:98:fe:9b:33:1e:17:bb:b9:bd:ab:c5:c7:28:66:
20:4c:53:41:0b:f3:fc:b4:b2:10:91:fd:57:3e:c3:d8:e5:ad:
0b:88:31:31:49:65:6b:dd:af:d3:ab:c6:c7:c3:35:52:96:2f:
32:f3:c2:e5:54:c8:27:a2:a0:c3:45:26:fe:f1:34:cc:8b:16:
ad:2c:72:80:3b:c1:fb:2d:e9:7d:b0:90:e1:d4:35:b2:44:da:
f5:36:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:18 2025 by rpki-client