Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: F6D7yhR3VFR4JEO8pODXDEJZQ1XqEJ1YG5dsvDj+454=
Subject key identifier: EB:82:D6:78:9F:54:0D:D5:04:1B:87:6A:71:D9:41:3B:C3:08:BC:ED
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019873E2F7608E08D0C3DCCBEBFD65CB450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 1346
Signing time: Mon 04 Aug 2025 07:01:50 +0000
Manifest this update: Mon 04 Aug 2025 07:01:50 +0000
Manifest next update: Tue 05 Aug 2025 07:01:50 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: CEc2OdR68ZwcfKfLfd/720kXyujytYHzbR+CbboqNwI=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f7:60:8e:08:d0:c3:dc:cb:eb:fd:65:cb:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Aug 4 07:01:50 2025 GMT
Not After : Aug 5 07:01:50 2025 GMT
Subject: CN=eb82d6789f540dd5041b876a71d9413bc308bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:e6:71:7c:4e:2d:85:56:c1:4c:fb:5a:e0:
87:5b:ab:ff:2d:83:d3:ad:8d:5a:17:63:01:df:dc:
bc:c1:81:3b:8e:3c:c1:c9:bb:29:4f:78:a2:a8:9a:
78:cd:35:87:c2:d8:4e:08:3d:e2:81:ac:7c:53:e1:
99:67:ca:8c:9b:fd:bb:00:1b:2a:a4:b4:79:e0:91:
86:bc:23:c0:48:26:90:96:c3:c4:b6:de:21:59:49:
b4:62:5e:90:33:a5:49:dc:38:35:c5:20:55:78:33:
8c:7e:25:b9:f9:94:e1:e5:c2:26:0e:5d:9a:e3:60:
05:9b:06:08:0d:a2:a6:9a:07:78:3a:20:fc:34:9e:
51:c5:37:6e:b5:86:0f:27:44:a8:55:22:13:ae:ae:
7f:2a:52:ed:85:8c:57:38:7b:38:a7:5e:bc:84:77:
2c:d3:3e:39:c8:78:d7:9f:dd:39:80:19:33:21:45:
da:9a:bf:f5:40:0f:b2:fc:85:c6:3f:7f:7f:47:75:
b5:49:32:d9:98:26:32:50:57:19:30:1e:94:ba:04:
50:43:36:24:0d:01:c3:45:d0:be:e3:6e:96:62:68:
f3:b0:43:a3:55:72:8f:d0:b7:ae:ce:c9:d3:0d:26:
58:8f:25:8a:a3:88:db:ef:c5:d7:23:31:23:c8:7f:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:D6:78:9F:54:0D:D5:04:1B:87:6A:71:D9:41:3B:C3:08:BC:ED
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:0a:14:35:30:af:66:59:ca:28:9a:a2:01:98:cb:d3:02:
59:96:92:92:66:8b:3a:6c:98:7d:b9:1f:6c:59:37:40:9e:d3:
8f:c5:16:4a:36:82:89:42:7f:b4:0d:93:e3:17:64:e0:20:d2:
98:b3:8e:f6:ad:3f:e2:68:a3:33:3b:46:a4:ec:43:07:c7:50:
93:de:46:ec:a2:ea:18:1b:d5:64:8f:72:6c:ed:e2:3a:5b:bd:
6a:c3:f3:3b:5a:44:87:9e:78:29:9d:78:ae:67:7d:fc:a5:2a:
f6:02:32:ee:10:db:f8:be:94:b5:93:5b:09:61:e8:31:c6:60:
89:27:2b:26:80:c2:c2:7a:95:27:81:95:7f:31:ac:7c:15:22:
0f:4e:fe:16:03:c0:59:72:38:06:d2:19:0c:5d:87:1d:31:01:
e3:e6:fa:e3:69:08:e9:0f:f1:d1:65:02:3c:2f:98:df:96:02:
d4:b4:b7:58:39:67:1b:c3:6b:8a:09:cd:57:e3:e5:67:1e:45:
e6:37:2c:b7:02:d3:4b:90:19:ef:56:2a:a0:76:a7:53:d4:0c:
92:e0:4f:9d:3c:a0:b8:a7:8c:d4:dd:82:7b:60:e9:51:18:2c:
d9:31:e8:3c:f6:75:52:fc:09:f3:44:3c:e7:38:f3:28:35:f0:
d6:5c:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:00 2025 by rpki-client