Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: WOOl06bQnNUzSZdCbNITxPBpSe0MUZyYa00RSdszJZ8=
Subject key identifier: 2E:E9:AB:15:50:C4:40:FE:76:22:E4:E8:6D:69:B2:32:F2:94:87:DD
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 01988242C6DB9F48EEFADE6358429DA9C863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0DB1
Signing time: Thu 07 Aug 2025 02:01:10 +0000
Manifest this update: Thu 07 Aug 2025 02:01:10 +0000
Manifest next update: Fri 08 Aug 2025 02:01:10 +0000
Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: g97ticZCw7RnGFhaZ01+1DW6let+Ujo8yKL5bSyGN0s=)
3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:c6:db:9f:48:ee:fa:de:63:58:42:9d:a9:c8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Aug 7 02:01:10 2025 GMT
Not After : Aug 8 02:01:10 2025 GMT
Subject: CN=2ee9ab1550c440fe7622e4e86d69b232f29487dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:2b:27:32:24:94:3a:af:c1:7e:85:66:b5:
22:f7:57:52:f8:8e:b2:20:4f:0a:67:10:d4:f6:72:
84:b4:15:d6:b7:e1:06:98:c1:dd:31:28:27:e4:48:
94:de:bd:f9:21:9b:38:6d:2c:36:1b:c2:08:ca:22:
88:ea:bb:37:34:bc:8a:1e:e8:fe:f2:84:04:c5:7c:
30:c5:d1:74:f5:a6:56:82:e7:4d:c0:18:e9:8b:56:
41:94:07:a9:4b:7b:33:50:31:40:55:35:4d:e0:34:
2e:2d:a0:57:5c:ab:c5:af:2b:f6:89:ba:77:21:dc:
e9:ed:a3:49:82:60:8e:90:8c:98:da:44:65:1f:f6:
e9:82:de:02:25:13:a2:c2:05:bd:58:94:05:74:52:
7d:a6:60:03:5c:1c:aa:88:2c:bf:3c:f3:59:fc:32:
a2:01:07:28:ef:ce:1b:3a:2c:a5:c9:74:c6:af:da:
84:c6:f0:63:9c:0a:1c:d8:18:ed:d1:a5:28:b8:4e:
47:c5:5d:db:c6:b3:1c:92:98:c3:ab:52:fa:90:b8:
3d:72:75:3b:0a:c5:6f:5a:97:c3:51:16:47:3a:7a:
95:51:94:ff:80:1c:cf:fa:1b:fc:76:19:de:c8:20:
48:ea:4b:38:22:af:9d:e0:e1:e3:45:d4:11:8d:d5:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:AB:15:50:C4:40:FE:76:22:E4:E8:6D:69:B2:32:F2:94:87:DD
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9e:42:ca:3c:89:aa:d4:fa:43:a0:ce:cf:89:01:41:bf:aa:
29:f4:92:33:35:d2:d5:39:f6:f1:bf:39:b6:9a:f4:5b:78:93:
fc:ad:7c:f4:93:f6:5a:a6:90:d2:ae:0d:3a:14:f9:00:42:68:
15:3b:b7:2e:38:f4:36:8e:4b:fd:e0:56:ec:ad:f4:73:98:07:
49:1a:ee:6c:9d:dd:d3:8f:97:f8:a2:4f:4e:c1:4e:19:b5:4a:
7a:7b:47:54:0b:4a:eb:ad:a4:05:2d:ba:aa:90:90:30:fe:a0:
da:e1:76:3a:6f:ea:9b:34:a8:3d:a8:2c:f0:e6:03:af:af:3e:
d2:7f:e0:e3:f5:17:cc:05:d7:58:21:ad:ce:50:e9:44:df:9a:
62:86:48:f5:16:2f:34:28:26:bf:7d:6a:f1:cd:0d:c8:c6:86:
57:eb:6c:19:6e:9d:49:18:49:15:1b:d1:87:86:0e:dd:56:84:
be:3a:64:72:c3:e7:1f:cc:b3:fd:ff:59:66:26:56:a2:6e:76:
8c:f6:0e:00:89:7e:97:2f:76:77:f5:71:85:7c:32:16:0f:99:
67:12:82:12:ec:6d:37:6d:8b:3d:13:23:ae:bb:59:80:4b:08:
89:0c:ce:a9:11:8c:64:f0:f1:d7:4f:27:5f:41:3a:1c:c0:72:
44:6a:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:24 2025 by rpki-client