Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: 0k2mJlfiuT2n3C9R+WIEAhmE9kKyDBPMwJnRvrIqOuw=
Subject key identifier: C1:1E:44:24:80:C4:C6:25:0E:02:B4:23:02:19:DD:15:62:0E:D3:2E
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01976CCF7DEC6D48BAD2D54DD7F0CEFE5AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0CC7
Signing time: Sat 14 Jun 2025 05:00:26 +0000
Manifest this update: Sat 14 Jun 2025 05:00:26 +0000
Manifest next update: Sun 15 Jun 2025 05:00:26 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: uzDsEcrNco1WppKj2PX9G97tgbob4BeAcfLhYxv5s/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:7d:ec:6d:48:ba:d2:d5:4d:d7:f0:ce:fe:5a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Jun 14 05:00:26 2025 GMT
Not After : Jun 15 05:00:26 2025 GMT
Subject: CN=c11e442480c4c6250e02b4230219dd15620ed32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:c7:04:86:43:f3:d9:7e:5d:ae:18:97:fc:
65:0a:19:22:2d:22:87:c5:74:89:44:bb:09:f1:21:
6c:f7:7f:b5:05:56:fa:cb:f1:79:0a:3c:96:a7:80:
33:06:9b:58:3c:41:82:75:18:1d:f5:23:e9:50:36:
05:c7:52:9e:d3:d0:84:d3:3b:55:dd:99:05:da:40:
8d:3c:79:a3:1f:44:25:ac:00:6c:aa:65:d5:fe:87:
ce:21:87:0e:37:ef:5f:a6:a2:4b:25:eb:dc:75:68:
15:76:87:1a:83:42:c0:55:fe:68:17:82:5b:78:fb:
99:c9:cc:b8:95:4a:79:09:9f:b7:fa:51:f5:7e:81:
8c:0c:f6:27:2f:7b:d1:34:b2:79:0a:6e:73:68:0a:
45:e8:9a:6c:b8:1b:05:bc:c4:3c:87:c2:ba:29:01:
41:66:ae:66:74:f5:ba:63:29:65:36:b6:fb:01:ee:
75:83:aa:42:c7:64:28:b6:b9:71:06:7d:1c:79:23:
18:77:b6:25:0b:53:3b:d0:96:51:54:4d:59:a6:bd:
18:cd:3f:00:9d:1f:11:0e:80:02:fa:46:c1:6d:15:
af:70:73:4b:77:15:a9:d2:13:4e:64:8a:e0:7c:f3:
37:62:b0:ce:17:eb:85:2e:f0:d1:17:b7:8e:14:3f:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:44:24:80:C4:C6:25:0E:02:B4:23:02:19:DD:15:62:0E:D3:2E
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:7e:c5:48:f8:a9:b2:ea:47:db:07:41:06:49:c6:78:a3:
a9:dd:80:de:74:48:6d:1d:fb:f5:b8:6a:2c:dd:43:cb:cb:3e:
f4:d3:a4:9f:39:35:1d:82:96:78:d3:e9:7d:a8:37:73:f2:21:
39:93:1b:3c:3c:ee:67:0e:e7:72:c5:04:de:30:46:0f:9f:fe:
3f:32:e0:4a:02:dd:f3:f6:72:de:72:0e:c1:fa:04:b1:9d:1a:
b1:0a:9d:0a:c2:65:05:aa:3d:42:20:ee:98:91:e2:cd:2e:ab:
b0:88:e1:08:80:ba:64:51:1b:78:e0:61:ad:f0:32:be:52:26:
86:75:07:8f:00:38:1e:f8:1c:5b:a4:5f:67:68:f7:22:8e:55:
e5:9a:87:a9:b0:f5:91:4f:75:ad:6c:46:32:91:18:77:ed:67:
b1:17:87:f0:1c:be:01:5a:d6:36:ac:54:73:ab:68:a4:4f:0c:
0e:f9:21:20:7e:fc:6e:a2:72:ed:c1:aa:51:f6:26:db:6b:24:
95:78:64:39:f3:94:3e:a8:27:b8:d4:3e:6c:52:b6:78:da:4f:
12:87:b1:b1:03:c7:ab:82:d5:19:fb:75:32:af:8d:d4:e2:7c:
43:f3:9f:ec:77:eb:9a:44:69:fe:e7:68:a2:1b:54:fd:f9:8b:
db:8b:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:30 2025 by rpki-client