Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: VWgersCJowvKOrH8LNtfUg8zQ7cAcqO34+2sVIKgci8=
Subject key identifier: B5:E1:DB:FD:96:46:30:23:4E:81:5C:EF:20:DA:B1:E4:2F:6A:63:0C
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 0198D4E05174C69FF55349896C371C884115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 0503
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: JtxJNx7u4NjbVv1PAxKRX9CAfvAx5+aRScSvG7S1r1Q=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:51:74:c6:9f:f5:53:49:89:6c:37:1c:88:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=b5e1dbfd964630234e815cef20dab1e42f6a630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:65:96:26:a7:be:ef:18:80:1f:a4:fd:05:
91:02:47:01:14:9c:2d:d0:bd:ef:d2:64:0b:79:16:
25:0f:44:c2:f0:e1:ee:04:20:61:f1:cf:62:7f:09:
d0:75:5c:0b:c5:9e:5b:17:20:10:30:eb:33:d2:9e:
03:f6:25:1b:ee:ad:9a:67:d7:a1:ac:07:3d:f1:35:
dc:e8:cf:ea:03:1c:4e:c1:d3:2f:c8:ea:69:6c:6d:
54:e6:ff:e3:86:c1:18:96:69:60:fc:96:60:71:39:
9a:d3:c7:6b:ca:64:6c:12:dd:4c:d9:d4:7e:a6:79:
b8:a9:bc:17:e1:12:c7:f6:ef:6e:16:b0:cc:95:a3:
d9:ee:0b:46:1f:23:d0:de:60:cb:c5:71:6f:9f:f6:
92:ec:49:36:cd:6f:27:f1:29:15:3c:ec:69:1f:a2:
7f:a5:ec:56:00:f4:2b:b8:4d:29:45:ce:5e:01:bb:
37:0e:3b:98:ab:9c:26:3c:ec:97:9e:dd:46:70:9c:
6c:46:ab:4f:cd:92:de:bb:fe:a0:83:63:cd:3d:ec:
02:7f:6d:38:4d:c7:7e:b6:ca:9f:8e:31:47:99:55:
93:ab:ec:bc:67:b4:2c:0f:2d:30:3f:f9:9d:09:9c:
4a:62:2b:d0:7f:0f:5a:2d:25:39:cc:07:83:9e:e9:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:DB:FD:96:46:30:23:4E:81:5C:EF:20:DA:B1:E4:2F:6A:63:0C
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c8:8a:48:f6:4c:2e:77:f2:eb:ec:14:93:48:d1:99:6d:05:
02:64:4c:91:e2:67:ec:34:7e:a8:c0:63:bb:c5:2e:ca:2a:63:
a4:42:1c:28:2e:e3:bb:b2:fb:28:b8:93:3b:71:43:0e:f1:0e:
c0:d9:6d:57:83:9c:0b:eb:b5:d3:b3:c5:b9:6a:d1:9d:a3:10:
4e:02:3a:63:db:85:5a:34:24:a6:dd:84:d1:e7:4f:53:e2:72:
10:04:4e:f7:6e:cd:1b:3c:af:7e:41:b5:bb:38:2a:b4:72:11:
13:aa:16:55:91:55:65:a7:b2:7d:cf:d2:3d:43:ee:1b:ba:18:
12:89:ec:91:9c:ae:5e:e7:bd:ff:66:2a:98:7e:eb:d4:30:27:
4c:29:0b:6e:ad:5a:29:4b:8d:20:c7:d9:1d:9a:82:94:41:d4:
2e:c5:9c:bc:a0:8e:df:38:f7:73:d1:c7:62:94:e6:ec:89:07:
3a:21:6a:eb:b7:26:0f:8e:cb:70:5b:07:a9:7f:00:11:b1:f1:
d3:39:68:e6:db:16:cd:2e:74:c5:f8:9d:38:71:43:31:19:1e:
01:0f:36:f2:c7:f9:e6:3d:da:b3:56:d3:27:cd:5a:74:92:58:
4f:8f:81:3d:5d:0c:2f:5e:32:d7:d4:4e:07:95:3b:5a:a8:97:
20:26:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:26 2025 by rpki-client