Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: h7c8VSOlyzHs8PKDqzH1zJtf6PC1vKCSjM62cxWP7HM=
Subject key identifier: 02:DF:28:A3:B1:46:E4:37:BB:C1:75:29:E7:A2:37:57:BC:F4:F8:F8
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019880F959DDFF8225F82D20D4881336596E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0D56
Signing time: Wed 06 Aug 2025 20:01:21 +0000
Manifest this update: Wed 06 Aug 2025 20:01:21 +0000
Manifest next update: Thu 07 Aug 2025 20:01:21 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: V0BpG3Rd+d7vgWYvo56g166wUk4qYbFp7E1MM8YSgdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:59:dd:ff:82:25:f8:2d:20:d4:88:13:36:59:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Aug 6 20:01:21 2025 GMT
Not After : Aug 7 20:01:21 2025 GMT
Subject: CN=02df28a3b146e437bbc17529e7a23757bcf4f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:90:d1:d5:b8:16:d1:a7:09:c7:a9:6c:1c:
f6:ab:f4:13:d7:0e:f0:12:4a:42:9e:d9:03:29:b9:
98:7c:a8:06:f9:19:b5:39:ca:50:d5:1c:c1:48:9b:
82:e7:6f:ee:ba:f4:6f:c8:3b:93:62:56:62:6e:a2:
2b:ea:1e:eb:af:48:f3:51:28:ba:e0:8d:96:8a:4b:
3b:1a:09:71:ed:69:65:79:39:a3:e3:9d:cd:8f:6a:
71:27:97:cc:d7:2c:01:a8:bc:da:97:7b:b7:91:d2:
7a:28:a5:a9:1d:a1:62:18:5b:a0:1c:28:ff:6e:4c:
51:4b:78:74:e5:5a:e4:27:e0:7c:93:3d:f9:9c:c2:
0e:79:a1:44:b6:c6:fd:72:e0:30:3b:30:39:42:a7:
47:3d:53:1d:ad:37:92:f2:e7:b8:cf:bf:f4:53:98:
2d:d5:7a:02:86:66:0e:d5:15:eb:88:7f:29:19:34:
a6:04:5c:10:14:27:30:fe:c1:13:ee:a3:34:ea:c2:
54:f0:73:1a:7d:06:3a:86:4f:f7:fb:a3:d6:d9:1c:
35:77:b3:95:97:69:d9:f0:c3:46:11:b4:84:ce:fd:
37:9e:5d:e2:09:94:53:bf:61:15:9f:dd:21:3f:35:
38:cf:b5:0e:26:b9:1a:b1:45:0b:75:51:c0:5a:c5:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:28:A3:B1:46:E4:37:BB:C1:75:29:E7:A2:37:57:BC:F4:F8:F8
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:9d:b2:92:03:88:76:fb:7c:c5:4f:88:a8:df:7e:c0:e7:
ec:11:7c:54:00:3d:2b:75:ac:38:76:0a:30:99:f2:d3:64:d9:
37:b5:de:24:91:71:88:35:6f:c4:4d:60:92:02:a7:8e:3c:ab:
38:99:a6:8a:2b:ed:f7:e0:76:69:6e:c8:22:3c:69:5c:8f:69:
4f:3b:44:8b:9e:d0:1a:6f:1a:28:ec:d9:2c:75:b2:97:ff:07:
f5:2e:1b:c1:74:7d:6e:c1:9b:0f:51:9a:bb:52:ea:35:ea:61:
bd:b3:76:60:43:47:63:5f:06:1a:73:84:3a:49:97:b9:24:11:
6a:d1:91:b9:01:7c:14:8b:c1:a8:bc:59:f7:6e:7a:78:a7:fb:
55:4f:23:ed:43:71:a9:c0:66:20:39:c2:64:51:67:99:a7:8f:
5d:1f:cb:5c:c1:31:17:33:2b:49:9f:91:83:81:26:37:3b:34:
0d:81:ba:cb:b1:48:0a:c7:04:51:e0:3a:64:76:0c:08:61:43:
b3:84:89:7f:04:8a:73:ee:f6:93:e5:47:97:6d:32:42:bd:5c:
c9:d1:f8:83:be:72:5c:48:f9:f5:4e:6e:c4:7c:85:9c:e2:ce:
a0:e2:c0:ec:5f:2e:f0:25:20:e1:9b:a6:e2:4f:35:11:2d:49:
09:e0:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:38 2025 by rpki-client