Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: w/51LtMPmLyne8XR5B4c/ljvKaHPI6P+sHgSrjlB+r0=
Subject key identifier: CE:3B:85:19:A8:80:8B:1A:BF:D2:DC:F8:A0:FF:EB:B4:F8:DE:B4:25
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 01978A35DD0B8C2B35615C55BB7A1E5BF491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 111C
Signing time: Thu 19 Jun 2025 22:01:14 +0000
Manifest this update: Thu 19 Jun 2025 22:01:14 +0000
Manifest next update: Fri 20 Jun 2025 22:01:14 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: KkBvzuTAYK9g4Ky4ZZF5vQslip6CYBVputOS70bcCEE=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:35:dd:0b:8c:2b:35:61:5c:55:bb:7a:1e:5b:f4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jun 19 22:01:14 2025 GMT
Not After : Jun 20 22:01:14 2025 GMT
Subject: CN=ce3b8519a8808b1abfd2dcf8a0ffebb4f8deb425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:f6:de:13:b2:15:47:40:fb:c3:14:5e:18:
45:e8:9d:42:ff:dc:68:a3:9d:63:2f:bd:5c:a7:39:
6d:bc:fb:b8:9b:40:73:f9:bd:81:e1:51:bf:8b:12:
e4:dd:9e:bb:63:0e:f2:be:82:53:39:5e:29:2a:7d:
d6:a6:ba:fc:50:b3:b8:55:cc:ff:0a:79:ba:c8:ad:
69:84:64:82:ea:11:ad:56:36:d3:91:1b:eb:af:4a:
92:52:a4:ad:ba:74:e5:59:1d:ad:f4:19:9a:82:88:
7f:e7:0e:2e:18:e9:ee:72:03:fe:06:c6:15:2f:a0:
f0:e9:ba:d3:a3:c5:79:57:cb:56:fc:f6:bb:b5:33:
6c:89:95:c9:bd:50:62:0f:fd:b5:7a:cf:4b:e6:07:
37:98:be:29:90:1f:c3:a8:23:54:07:0d:2a:7e:91:
71:a6:1a:e6:56:22:cd:06:f2:9c:bf:50:6b:18:f1:
bc:39:88:ca:1c:1d:d9:1a:2c:33:67:cc:c8:de:d7:
eb:b5:3b:84:db:cb:df:37:07:38:7c:a3:73:a3:ad:
b0:2d:60:1f:e6:d6:e8:0c:16:aa:11:ae:91:cd:ef:
6a:d5:09:85:b9:9a:08:0d:b2:3f:74:b9:c1:b0:5a:
ca:fc:8f:a5:ef:ea:1f:4b:3f:4e:75:86:d4:88:2c:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:85:19:A8:80:8B:1A:BF:D2:DC:F8:A0:FF:EB:B4:F8:DE:B4:25
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:f1:1c:10:d6:03:3f:21:b8:c3:2e:b6:07:06:0a:a1:83:
d2:91:2a:df:5d:f6:d8:72:87:76:d6:73:06:05:73:a1:da:f9:
3c:b0:5b:fa:80:62:21:f6:aa:6e:3d:e5:6b:19:56:3d:43:43:
ac:06:48:2a:39:cf:d0:04:55:b6:b0:4b:8c:07:2d:27:6d:32:
37:02:9e:1e:d4:0a:80:09:c5:5b:80:f4:3a:7f:d3:72:31:5b:
28:d6:98:4c:8f:9a:e3:8a:10:80:ab:32:0c:42:1c:83:32:28:
d8:de:bf:fa:88:78:fc:e3:40:d2:74:e2:b8:70:63:6e:49:62:
8c:93:89:76:02:d0:54:00:7f:75:c2:c3:cd:e3:d3:8c:d2:13:
83:e2:50:ef:0f:5a:97:46:e1:a8:cc:ed:23:62:3d:94:77:44:
55:ef:e3:03:b0:dd:87:fb:8a:48:07:86:08:e3:fb:cd:46:62:
24:ff:e5:82:e0:a6:4c:25:1f:62:90:b6:0b:21:0b:36:d5:73:
59:87:1d:4b:d8:d8:f1:e5:73:10:eb:89:2d:03:18:9d:0d:7c:
4b:6e:a8:51:b3:44:01:82:7d:e6:af:54:90:63:b2:5a:6a:cb:
50:fc:4c:1c:cb:63:7f:c1:c2:3d:6e:3e:16:32:b7:2c:06:ef:
eb:7e:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:02:49 2025 by rpki-client