Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: nQZQcMw70gM4Ez8rFNCUmLZlqOjyP47a9UZnO61RYQE=
Subject key identifier: 01:DA:E6:91:84:B2:B9:F5:D7:28:46:E1:84:E1:5E:DA:06:95:C0:9E
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 0197B70EC6D8AC742DEC041E3CC51A8A8E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 046F
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: YYSMjtbTTVt8fGES1Ix3IhubVr9Wy+6XtOAfFTwnC+g=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:d8:ac:74:2d:ec:04:1e:3c:c5:1a:8a:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=01dae69184b2b9f5d72846e184e15eda0695c09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:2e:ad:bf:ee:c5:49:5a:ba:85:ec:bd:d7:
70:90:ee:0d:76:12:ef:35:ae:7f:8c:51:00:52:3b:
85:33:5d:1d:e8:5e:af:b5:37:a9:d0:15:d2:68:5e:
99:61:c6:23:42:7a:0f:b5:d3:f2:85:be:ca:bc:58:
8b:95:1a:0e:0b:6b:72:85:69:bd:22:af:75:a2:34:
2c:9e:8b:d4:c2:8b:d0:c9:f6:12:83:d2:cd:e8:d7:
b6:4e:98:65:d2:d8:2a:12:36:60:ba:09:6a:29:72:
11:ed:75:2f:fb:04:44:55:af:e3:b9:e9:2e:47:71:
fc:31:4a:67:97:ea:1e:1e:3d:a8:f0:97:ec:37:ef:
17:b5:d1:0b:7d:3d:fc:b3:49:ab:6c:57:63:6c:d7:
1c:04:a3:ed:b6:68:ce:2f:b7:23:46:ad:65:b6:2c:
ed:aa:f9:ff:4b:2e:f6:2d:c7:a1:84:62:e2:f8:5c:
21:92:a0:4c:18:2d:1a:33:ed:46:3d:de:56:46:21:
23:2e:ec:82:b7:a2:85:02:df:81:55:fd:13:a5:9a:
98:7b:2f:ba:10:4c:39:32:42:f8:d3:67:39:e1:f5:
ab:e5:f6:2f:17:78:28:bd:fc:0c:e5:0d:31:a0:b1:
24:3a:05:a3:41:6d:e9:5b:c8:71:82:c5:3e:7e:b2:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:E6:91:84:B2:B9:F5:D7:28:46:E1:84:E1:5E:DA:06:95:C0:9E
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:83:8a:0a:a5:53:4d:13:ee:ec:10:d1:05:f9:8e:cc:00:
e4:4d:b8:9b:c2:b7:71:53:42:7a:18:ab:c9:3d:60:92:3b:c3:
35:29:e3:9d:c2:7c:9a:cd:89:76:85:a2:6f:a4:97:7d:11:5d:
d7:ed:e6:79:86:d5:1e:df:43:bd:1a:d3:ea:c3:72:de:66:05:
b2:ef:87:43:db:cf:41:cf:22:71:75:cc:38:0a:af:64:f2:e9:
6e:c8:0f:32:5a:7f:20:b6:6c:92:32:1e:58:55:1a:91:64:52:
e6:76:97:9a:2b:f2:d1:60:c1:2b:a4:41:f1:ec:9f:77:3c:dc:
5f:12:7c:32:e1:2c:ea:fd:50:ed:76:a9:09:d4:49:82:cb:f3:
fe:3c:50:3e:e9:06:4f:1b:92:af:d0:c5:11:c5:a9:5a:a9:f1:
c0:e8:00:62:0f:30:09:d9:c9:85:12:e3:d5:a4:7b:21:6e:27:
3b:77:17:2e:b3:60:50:1d:68:d0:d3:a8:4a:d3:5b:41:b4:c6:
a9:1c:93:84:17:e0:72:77:c8:49:13:6f:82:fb:fc:d6:39:4a:
3a:31:e0:d8:a6:33:b0:88:30:2d:35:c3:52:06:28:e6:76:f3:
92:0b:33:8c:fe:50:a0:ed:31:27:7c:43:16:da:db:37:75:1d:
32:cb:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client