Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: qScD3V5LJ1gOnuw/CjqYYDzUdInMoAGG/5jglZJ5YdI=
Subject key identifier: 99:CA:12:59:30:F1:EC:7A:B8:AB:5C:DD:A4:D8:69:36:5F:BA:1F:8B
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019774BFE076E3D2E85A6B5C6342F5967FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 18:00:21 +0000
Manifest this update: Sun 15 Jun 2025 18:00:21 +0000
Manifest next update: Mon 16 Jun 2025 18:00:21 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: 09wPORhWFCXZ+c9WbXOjdg47A2kTqjlhd46ryyCu5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:bf:e0:76:e3:d2:e8:5a:6b:5c:63:42:f5:96:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jun 15 18:00:21 2025 GMT
Not After : Jun 16 18:00:21 2025 GMT
Subject: CN=99ca125930f1ec7ab8ab5cdda4d869365fba1f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:ee:7c:48:18:99:09:02:2d:98:9a:bd:05:
7d:eb:63:d2:9b:bd:f4:19:fa:fb:22:51:64:2c:a5:
43:99:0b:00:ee:50:1d:88:27:e1:bf:c1:51:0f:6a:
89:b8:b1:0f:d7:63:4f:45:d5:b3:7f:9d:05:50:f5:
03:d7:4c:47:f3:45:87:ef:51:2a:92:c5:90:e4:0d:
ab:fa:d8:8d:4c:f9:ae:60:16:b4:36:88:5d:98:62:
02:11:57:10:ca:7c:c9:84:0b:46:cd:3e:7e:d5:78:
24:37:0e:d9:ee:15:ea:2b:e5:b0:2a:2d:7e:00:64:
97:cd:22:2c:7c:f2:f7:bb:5e:89:41:cc:8f:24:52:
b1:08:1c:d5:f8:5a:3c:ff:3a:8c:9c:5f:87:4f:84:
40:66:6f:e6:c3:07:ff:9c:c4:73:af:92:17:7f:88:
12:16:e9:42:fc:79:00:f1:db:11:ff:71:07:cb:b1:
2f:fb:2e:01:2c:19:23:66:6a:8a:d1:7b:a0:c1:ff:
55:94:35:54:d3:46:59:64:9d:e0:e2:63:8b:44:34:
f5:e0:be:3f:cb:46:8e:1c:a6:0d:c9:19:fd:3b:de:
97:50:ee:33:bc:94:85:d6:2e:e0:81:53:7a:78:94:
68:4f:0f:42:d5:96:23:97:38:19:58:02:81:d7:14:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:12:59:30:F1:EC:7A:B8:AB:5C:DD:A4:D8:69:36:5F:BA:1F:8B
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:ac:6e:98:3c:7a:6d:32:29:01:17:b9:22:00:19:04:28:
21:e3:13:57:67:6c:87:89:22:b6:cd:c5:a5:56:85:8b:45:40:
ed:c8:02:85:fe:f0:1e:f4:f5:78:8d:8a:8c:ee:b0:3f:81:80:
f0:23:55:42:85:0f:4b:3e:a8:7a:74:a5:c3:93:3a:46:75:e0:
3e:24:ed:6e:86:44:95:68:37:0e:2b:98:09:58:b7:82:77:d3:
6b:58:c6:a4:be:31:c5:79:e5:81:06:ae:0d:ed:65:70:23:9e:
b0:e5:a1:84:91:2f:83:f9:6c:8c:cb:2d:5a:eb:4a:85:e0:11:
b3:b0:10:c0:0f:5e:2d:2e:44:b5:bb:74:33:87:39:ee:1d:c3:
a7:26:57:39:dd:d2:37:b8:9e:de:67:b7:1a:80:64:18:56:38:
1f:24:2d:04:1b:7e:2b:b0:22:fc:0e:cc:77:e2:23:8f:3a:8f:
fe:88:e3:77:a4:c2:f8:88:45:b2:ab:08:35:67:87:67:31:3b:
ab:87:5f:21:6d:4a:4e:bd:4f:03:61:7b:69:e0:93:cb:29:3d:
7e:64:c2:8b:e1:2b:6f:54:d6:ea:a2:2c:59:8d:cf:2d:f1:b2:
ff:0f:04:50:2c:c5:98:b8:4c:69:35:5f:a1:2d:59:0b:a2:9b:
b3:50:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:41:28 2025 by rpki-client