Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: XS7aNLvAz97rXQOzlVuqH1zYdmd8YG2pb0wF2GWLeuw=
Subject key identifier: 62:0B:6D:E7:8C:AB:1E:A3:7B:59:41:67:78:7E:60:DA:6D:41:3F:18
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 0197C2A4941D964F63DB6E2D5DB326066E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0C50
Signing time: Mon 30 Jun 2025 21:00:54 +0000
Manifest this update: Mon 30 Jun 2025 21:00:54 +0000
Manifest next update: Tue 01 Jul 2025 21:00:54 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: gpuwdQkPtZsUuk2Y1TrcqVzaunb1ikfYyILZgRugAcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:94:1d:96:4f:63:db:6e:2d:5d:b3:26:06:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jun 30 21:00:54 2025 GMT
Not After : Jul 1 21:00:54 2025 GMT
Subject: CN=620b6de78cab1ea37b594167787e60da6d413f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:7a:69:ed:65:f0:93:77:65:55:5e:e1:57:
ee:43:e4:80:0d:c6:35:65:ff:60:9d:ff:93:b4:b9:
7d:22:a2:6d:60:6d:cf:49:e7:2f:dd:23:65:f3:62:
a4:52:bf:d8:db:f3:6b:24:89:cb:f8:bc:ca:8c:aa:
da:cb:19:0f:ad:76:ad:ff:dc:f6:c1:36:fc:88:a5:
88:27:c4:07:53:c8:23:71:f5:85:e5:21:1d:f6:fb:
8d:73:46:ec:66:49:69:36:c4:e7:d8:7f:50:ca:b9:
18:26:5c:69:62:05:69:cd:e7:85:31:9d:c8:f4:d4:
16:f2:26:45:22:6a:eb:23:24:b6:3a:e8:ce:8a:f4:
52:1d:89:fa:d0:47:0e:c6:94:cf:7d:f2:23:e7:7d:
ba:5f:d4:c0:2d:8a:c8:a7:1f:0e:de:50:1f:c3:23:
fa:64:b6:16:64:a4:d5:a8:00:6f:ad:90:a8:c8:ae:
d2:78:bc:91:e7:90:46:99:a3:b1:5c:ea:29:f4:7f:
26:ee:20:72:c7:d6:37:ad:94:91:99:be:92:be:dc:
40:75:80:8e:54:5d:eb:ce:fe:a2:1c:9c:2a:a2:e1:
44:0a:3b:5c:94:4c:25:68:97:cb:1b:a2:89:76:d5:
45:86:e0:28:4d:c4:9a:07:96:f1:a4:62:bf:93:9d:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:6D:E7:8C:AB:1E:A3:7B:59:41:67:78:7E:60:DA:6D:41:3F:18
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:69:bb:fb:b4:31:48:cd:0f:b5:9a:a8:31:e9:6c:0f:89:
8c:28:6c:89:07:e4:39:f0:7f:47:97:75:fe:cb:4f:dc:24:5a:
58:cf:2a:6b:4f:a3:ec:9b:07:74:63:5b:11:c7:f1:8d:80:66:
84:f2:72:a6:7f:3c:95:b8:6a:c0:42:6b:07:41:ad:ad:71:fc:
91:20:48:4b:88:29:ea:55:75:f6:1e:79:49:38:4e:95:87:ba:
f3:f2:37:d7:9a:11:7c:9f:4a:fa:4b:10:36:65:a4:a8:5c:21:
51:c4:1f:47:04:b4:4a:6e:5c:23:d9:a5:55:ee:36:a4:f3:68:
2b:c7:45:df:55:2e:68:a3:1b:5e:20:47:46:a3:be:93:bf:c5:
e6:10:8c:e5:0a:95:8a:0f:99:68:53:11:ba:f7:dc:38:ee:55:
e6:23:37:b3:c1:0a:33:ef:27:5e:90:31:6f:48:69:f4:fa:0e:
7c:c2:f4:af:da:c7:a5:e9:1b:7a:db:d7:5d:b7:bf:dc:4d:49:
5a:40:c8:23:13:d2:8f:db:36:e2:e1:38:64:d0:67:cd:6c:22:
be:4a:40:09:14:7b:55:b4:7a:81:71:dd:75:48:62:e6:ca:a6:
a6:76:e4:dd:65:bd:b9:21:69:a8:0f:6f:28:bf:89:05:8f:b6:
c1:99:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:34:43 2025 by rpki-client