Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: iwv3AoSkjGL6tm/O68tQeUCsHCmi0uEqgi3Y49CtYtU=
Subject key identifier: 09:FC:34:D7:4E:0A:6D:F0:4C:91:E3:0D:60:7E:3B:BD:6B:69:B5:0E
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019779417FE09E7123D363434D663BC7756E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0C2A
Signing time: Mon 16 Jun 2025 15:00:24 +0000
Manifest this update: Mon 16 Jun 2025 15:00:24 +0000
Manifest next update: Tue 17 Jun 2025 15:00:24 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: twIUn00HzA5k0N3od6OuZvUncldxgN2evIsIHXTRSFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:7f:e0:9e:71:23:d3:63:43:4d:66:3b:c7:75:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jun 16 15:00:24 2025 GMT
Not After : Jun 17 15:00:24 2025 GMT
Subject: CN=09fc34d74e0a6df04c91e30d607e3bbd6b69b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:0e:16:84:63:8f:dd:5e:1f:94:10:fc:81:
7e:ab:ef:ce:71:80:2a:42:7a:8a:ea:dd:ab:04:98:
76:f2:e7:27:a6:d3:5e:67:eb:17:4e:d3:54:e3:16:
a8:de:3a:fa:52:3a:af:15:ce:99:af:37:6c:bb:bb:
b3:26:20:2c:c6:a9:fe:d9:79:f9:00:50:59:29:ec:
7b:d0:37:e2:9c:d4:36:a2:bc:44:4f:b0:c0:28:e9:
06:2d:45:b8:ca:6b:00:89:e0:ed:e5:37:ca:6c:f2:
9d:6a:83:51:3a:35:7d:cb:69:8e:da:28:65:96:32:
83:0c:fb:03:b8:9c:53:1e:0c:4a:df:21:c9:7f:a4:
84:40:63:f0:8e:91:08:11:62:aa:15:38:eb:36:c1:
e3:bd:03:a8:36:66:d4:a6:40:73:ea:71:5a:ee:87:
84:f4:d9:76:5a:46:80:8e:d5:f6:15:de:f7:f9:93:
fa:b7:e3:37:6d:c8:e9:66:3d:c1:0e:0e:0c:c8:75:
5a:97:b4:b2:d1:fa:ad:49:da:7f:4c:7a:81:cd:63:
12:9b:84:98:45:ca:22:06:38:ac:70:56:b0:ba:27:
20:86:cb:c1:b4:cf:5b:f6:7e:4d:d5:69:42:43:65:
28:d9:50:ed:8d:08:af:85:60:0f:6c:57:fe:d2:ff:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:34:D7:4E:0A:6D:F0:4C:91:E3:0D:60:7E:3B:BD:6B:69:B5:0E
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:26:42:3a:8b:c7:62:e9:a8:a7:3b:7f:98:1b:fd:3e:3f:23:
f3:12:eb:e7:97:94:cd:a9:7f:dc:63:d2:f1:0e:15:4d:4e:f2:
19:c7:e5:02:0b:ab:ee:f4:25:e1:bb:40:0b:e4:c0:da:40:7e:
c6:e8:45:56:b6:4f:20:44:17:c8:46:c6:a1:77:35:ae:5a:a7:
c0:44:7e:15:be:ef:d4:b5:f3:58:19:4c:e5:7f:84:10:c6:d5:
98:82:9b:12:fe:80:da:ef:14:45:e3:2d:eb:e0:1c:4e:35:99:
c4:d3:62:c8:89:ab:90:9e:f9:70:93:24:24:14:87:49:7a:d5:
a2:36:2c:78:62:ba:f7:05:00:f1:44:e5:20:5b:1b:f8:4c:c6:
ca:e8:ba:eb:4a:8a:5c:af:1a:d5:d5:08:0e:6a:08:d5:0f:c6:
55:5f:86:cc:24:9e:cb:98:e3:aa:60:37:93:58:75:9a:ce:36:
b1:db:7d:c6:65:c3:6b:7b:4c:b0:1c:16:a2:2f:40:52:68:40:
61:44:c0:e0:5a:24:3b:b8:42:29:96:b9:a2:fa:4a:4d:3e:0e:
f6:54:76:dd:1d:57:fa:fd:2c:48:35:f1:a8:1a:b1:36:ad:60:
e5:72:01:27:e1:c8:fe:03:96:bf:83:0e:96:f7:fb:56:ca:bb:
7f:9b:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:40:16 2025 by rpki-client