Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: sn690X6z/G2WrefxRNWM1acntN25R7inh/zQpA5EYjw=
Subject key identifier: CE:D2:05:74:D9:0F:A4:E0:79:19:1A:25:C8:4C:44:C3:9B:BF:59:54
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 01976BBD50E3F5BFF98F39F14F8E09334DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0BD1
Signing time: Sat 14 Jun 2025 00:00:58 +0000
Manifest this update: Sat 14 Jun 2025 00:00:58 +0000
Manifest next update: Sun 15 Jun 2025 00:00:58 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: 6CVv8QWbugcsq+dG+ISTtb+rQdGtxFq72Q2dNrD1eDI=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:50:e3:f5:bf:f9:8f:39:f1:4f:8e:09:33:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jun 14 00:00:58 2025 GMT
Not After : Jun 15 00:00:58 2025 GMT
Subject: CN=ced20574d90fa4e079191a25c84c44c39bbf5954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:af:78:cf:da:5d:f5:d0:fe:22:39:87:5b:
ca:f5:91:b9:ca:0e:09:40:b0:ef:ae:a9:cd:ab:e7:
04:5e:57:3b:49:d1:f3:d2:d4:05:74:3d:32:51:c7:
27:b8:c6:f4:4d:dd:e6:d6:e7:35:30:6f:26:d5:f9:
bc:8e:12:4a:87:a0:e1:16:21:17:c1:08:b5:9b:37:
8d:25:e6:d1:54:4f:6f:e0:57:0f:72:58:0e:c4:52:
73:31:83:10:3a:fb:ed:ec:da:83:3b:9b:8f:a1:68:
d1:16:35:0a:bd:d0:5e:f0:04:ad:3a:99:75:98:77:
34:bc:9a:56:48:27:b1:9e:f5:e6:03:1d:22:3d:38:
b9:f4:ef:c1:de:fe:ef:96:9e:7e:07:88:40:d4:a0:
bc:2d:b5:59:91:18:75:82:0a:cf:8e:9f:19:29:03:
bf:c1:40:cd:48:00:08:0e:2f:12:09:04:5f:d4:56:
2b:85:be:f9:0b:95:29:e1:04:72:da:87:0e:4c:8f:
70:3e:c2:43:12:75:60:6e:74:4c:bf:61:86:79:89:
40:9f:4f:17:07:7b:54:33:fd:73:03:ff:4d:15:a3:
b2:22:4f:b4:d6:31:9b:66:ff:e2:99:3e:54:ee:d0:
9e:6f:59:92:d4:61:65:fc:4a:74:51:7b:0f:56:86:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:05:74:D9:0F:A4:E0:79:19:1A:25:C8:4C:44:C3:9B:BF:59:54
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:53:76:25:5a:33:de:ba:5c:2c:ab:0f:ed:30:28:d6:dd:e2:
c8:92:36:de:dc:a9:d3:5d:07:d8:05:07:c4:11:41:5a:78:f3:
eb:1c:8b:f8:03:99:47:48:4f:03:29:5d:ae:30:75:e2:4b:ec:
7b:96:c2:ab:17:65:74:c7:8d:59:a6:bf:2a:18:5f:8e:cb:1d:
de:c1:f7:82:27:76:7d:5d:8b:d4:0d:d8:d9:94:b9:0b:ba:a0:
32:48:6c:c1:b7:3f:fb:32:13:d1:4c:b8:95:3d:60:ea:e8:7b:
eb:22:46:b0:80:73:c1:10:77:1b:e5:8b:02:57:16:ec:02:5e:
4a:aa:44:57:cb:c2:db:18:5f:87:29:7a:16:f1:31:07:40:b3:
6f:d6:5f:bc:45:28:2f:06:a6:e1:d7:79:8d:39:59:70:ac:a8:
96:23:20:43:dc:1b:b4:cd:7d:e3:21:f3:ff:e1:5a:d0:ff:b3:
37:76:13:0f:cc:ad:cc:cd:c4:a2:2d:27:2e:cd:80:32:0f:15:
4b:a2:78:df:10:4c:fb:2d:37:c7:39:36:79:30:94:97:63:5d:
b5:c5:8e:53:82:d9:9d:55:d1:7d:2a:a6:b5:71:c8:82:e6:62:
b6:fa:a0:91:a5:1e:3c:d1:9e:7d:91:db:d4:b0:d9:1d:ff:3e:
70:d4:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:05 2025 by rpki-client