Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: rYB/d9cRFb9b0GZKaz+pBm/5gJ27908RtjgUHGz2sLs=
Subject key identifier: EA:95:0E:12:74:C9:69:31:0D:83:9E:10:CF:CD:BF:A9:5F:E6:05:D5
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 01976929D3C0946C8847B8A8B4D1644E8536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 12BC
Signing time: Fri 13 Jun 2025 12:00:38 +0000
Manifest this update: Fri 13 Jun 2025 12:00:38 +0000
Manifest next update: Sat 14 Jun 2025 12:00:38 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: yLzZUWg8F66P1VUXwvqyHMK763xzds0AYbSylzoimYg=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d3:c0:94:6c:88:47:b8:a8:b4:d1:64:4e:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jun 13 12:00:38 2025 GMT
Not After : Jun 14 12:00:38 2025 GMT
Subject: CN=ea950e1274c969310d839e10cfcdbfa95fe605d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:69:6a:d1:71:c7:f4:d8:68:65:c3:4d:81:
d5:bc:43:f5:5d:3f:77:3e:86:eb:2d:d6:c9:4d:0d:
8b:41:57:eb:52:36:94:03:93:f3:c7:48:07:47:e8:
36:83:81:fd:18:cd:1c:fe:19:6d:a5:53:74:f1:91:
35:d3:da:a7:0e:3d:c5:59:9a:49:fa:51:8e:fc:b5:
b0:1a:fc:5e:3f:78:b0:6c:c5:27:d0:51:2b:39:ef:
6e:35:ff:54:18:61:92:8b:fc:7c:2f:ee:6e:63:7d:
9b:e4:0c:f6:d4:f6:b9:31:ca:1f:43:34:e4:0a:39:
46:f5:6a:91:07:5b:85:34:e2:45:6f:d6:dc:86:45:
0f:c2:8d:45:8e:2d:ca:ae:21:e8:c1:20:90:67:1a:
59:a0:3a:6b:c3:57:6e:8b:7b:72:4f:fb:2f:34:25:
22:3d:bc:de:d3:e2:2b:a0:51:b7:00:25:08:21:cf:
d1:2e:d6:a5:fc:5a:ed:52:c4:46:73:ce:71:20:63:
0c:1e:6d:d9:65:16:e0:a5:d0:b6:00:00:c8:e9:f3:
d6:b1:86:0e:8d:2d:17:3b:47:50:a6:c0:e4:5f:ce:
73:36:0c:48:a5:ac:61:d4:6d:e2:b6:25:68:fc:82:
aa:cd:34:4b:0d:10:9f:8a:7e:93:4a:46:13:e8:b3:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:0E:12:74:C9:69:31:0D:83:9E:10:CF:CD:BF:A9:5F:E6:05:D5
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c9:03:a9:c4:38:39:1e:5c:44:64:d7:3c:19:d3:0d:62:4d:
0a:99:49:de:0b:60:27:45:8c:f6:f7:fc:87:ec:0a:3d:9b:8f:
0e:95:fe:98:bc:c7:28:4c:0d:9c:bc:c4:0b:0f:82:f0:b0:ce:
23:fa:0a:75:a6:ab:7b:8e:c7:c1:9f:47:56:16:6c:53:c4:4f:
e2:15:8b:7a:f5:c3:c0:eb:20:48:6f:f6:f8:cb:63:a5:ff:22:
be:18:09:04:7b:71:f2:3a:f2:f7:a3:54:7b:33:28:9f:82:a4:
44:dc:40:ee:44:3d:6d:87:88:fb:c7:0a:0d:66:90:bf:6b:d5:
be:8c:53:48:bd:98:a6:52:5e:7c:99:7d:a3:fb:2c:d9:90:70:
0a:5a:29:d7:4f:83:16:b0:09:b7:35:6a:45:e3:da:15:31:b3:
5f:64:ac:31:a1:a9:85:a4:2e:17:74:4d:fe:71:dc:e1:cf:90:
2b:89:eb:2a:b5:e0:27:e6:94:3a:43:cb:e5:f5:d0:12:c7:6a:
6f:c7:66:ab:6a:1f:0b:6d:ae:04:e5:58:de:cd:65:c7:27:7d:
89:10:21:7d:22:5e:e8:d2:64:45:44:b1:a8:75:55:18:ea:7b:
dd:98:ca:8d:29:a6:4e:42:3f:d7:eb:82:30:2b:aa:31:7a:dd:
09:9d:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:17 2025 by rpki-client