Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: 7HH2v59AAAIKAFstJ2m5hhNiaLXdhqG2EF+1UdSCleg=
Subject key identifier: F2:6A:89:D1:8D:FA:1E:02:A1:75:41:6F:91:31:25:43:17:1A:15:2A
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01976FD0EA5049CB5AB46BDCA119B1B0FECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 04B9
Signing time: Sat 14 Jun 2025 19:00:51 +0000
Manifest this update: Sat 14 Jun 2025 19:00:51 +0000
Manifest next update: Sun 15 Jun 2025 19:00:51 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: 4snEwYqBjVNPtSB9bMmurF1QoxYwXWYk53NSlofbuGY=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:ea:50:49:cb:5a:b4:6b:dc:a1:19:b1:b0:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jun 14 19:00:51 2025 GMT
Not After : Jun 15 19:00:51 2025 GMT
Subject: CN=f26a89d18dfa1e02a175416f91312543171a152a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:24:10:46:b1:75:53:8a:40:31:e5:34:e6:
ed:61:43:86:be:27:1f:4d:1f:d2:46:4e:8c:c4:02:
e3:e4:2a:fe:eb:ec:6c:3c:02:2d:3b:ad:8c:6c:36:
51:3a:0d:b7:5d:43:09:de:64:e6:04:82:ab:22:cd:
dd:c4:96:71:83:a1:3f:2b:8a:37:69:22:cd:48:da:
47:6c:4a:6f:2f:48:7b:3e:9b:26:a1:80:6e:99:e0:
8b:c6:db:b3:f8:2d:d3:e3:ee:d0:55:c8:b1:1d:02:
5d:df:69:ea:2c:ff:05:22:49:ee:35:58:f3:a3:90:
68:57:70:e2:b7:90:c3:bd:bb:d5:e7:7c:be:43:6b:
47:0d:37:8c:b1:ea:c8:2d:e6:e1:25:61:1f:7c:7b:
33:9b:e5:da:8e:61:c1:ad:f6:84:24:82:ea:0c:5d:
0e:67:fe:62:a4:6c:0b:d6:70:4f:e0:36:74:72:fe:
f2:14:fe:5c:8b:9e:6e:a6:0f:6c:71:3b:bf:62:69:
74:29:af:c7:04:8a:d4:33:28:90:42:a4:5b:a7:f1:
8b:fc:19:29:a4:a4:12:80:2b:8e:fe:b5:cd:96:84:
6c:57:35:bb:e9:17:d2:48:89:08:21:8b:58:52:9e:
50:01:53:48:b7:1d:b0:9f:fe:97:25:a7:d5:c1:43:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:89:D1:8D:FA:1E:02:A1:75:41:6F:91:31:25:43:17:1A:15:2A
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7c:74:29:21:fc:be:75:a4:28:81:16:fe:67:b1:ef:86:a7:
a9:e4:90:1f:6d:8b:19:31:bd:d3:d9:b2:7a:23:38:0e:19:71:
3c:9b:50:e9:b8:4f:e1:9a:60:a6:5e:57:36:4f:15:86:98:5d:
4b:ee:bc:8b:3f:ca:b3:0a:9f:88:66:39:3c:23:92:25:58:87:
a6:4b:b4:39:f8:1a:39:26:be:49:e6:64:93:9e:78:16:a2:df:
1e:af:5f:b2:83:b5:e1:d7:d8:b1:1b:8c:5c:bc:5f:35:5d:4a:
9b:82:6d:25:36:5d:5c:51:b8:e4:ac:23:ce:24:c4:76:4d:7c:
ec:92:fb:9d:cd:ed:c9:d3:c6:79:ad:fd:92:29:13:39:38:5a:
fc:68:44:12:d5:5c:4a:23:c6:c4:13:9a:89:43:90:6c:7c:f8:
7f:44:76:ad:d6:e3:f2:b7:a8:2d:49:c8:15:9b:4e:7a:8d:b3:
e4:a1:72:f2:4e:f3:77:85:77:81:bb:08:e1:d4:65:53:48:c6:
5f:e5:80:c5:1d:aa:4b:71:cc:19:f2:26:a6:31:03:77:cc:ad:
57:bd:ea:2b:d0:49:78:83:4a:14:8b:e7:7f:36:07:4d:f3:09:
6c:ed:59:30:b6:f0:58:0e:c1:f7:cc:9c:c2:2c:8b:52:ba:e9:
d1:45:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:56:09 2025 by rpki-client