Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: jGWGCUm0WsKiBYmnE4y40yNOd3H0GE6/n1BwfqG985U=
Subject key identifier: AC:17:FF:68:00:C0:7E:94:B0:8C:76:24:88:C4:BB:F7:50:EA:6D:6D
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019841AC98E37230CC0A522A10EAA66CD297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 13:01:27 +0000
Manifest this update: Fri 25 Jul 2025 13:01:27 +0000
Manifest next update: Sat 26 Jul 2025 13:01:27 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: NCj0pMHLTruB4eMxrRo+6+immaw91bkc58rMPX3VqYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:98:e3:72:30:cc:0a:52:2a:10:ea:a6:6c:d2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jul 25 13:01:27 2025 GMT
Not After : Jul 26 13:01:27 2025 GMT
Subject: CN=ac17ff6800c07e94b08c762488c4bbf750ea6d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:9a:2e:21:6a:6f:59:a6:1d:f2:d2:d0:2a:
25:39:c5:cb:a4:2f:ec:81:e9:00:f1:1a:11:f6:a0:
09:f0:c9:e4:44:c7:c9:86:34:b0:01:6e:ba:9c:a6:
d3:54:2c:d7:6f:ad:b3:68:2f:a9:32:5b:e2:fd:98:
0f:38:c3:3f:c5:f4:57:be:eb:53:17:ec:d4:34:86:
d6:41:15:31:89:ae:e6:1d:47:13:ce:76:ca:71:be:
42:c9:21:ce:0e:66:37:6f:d3:7b:b7:4e:b8:54:e3:
6b:9d:c9:05:5a:fe:f9:a1:39:79:a8:3f:3b:36:94:
b5:98:25:ef:4b:b2:7e:b9:f0:8b:a8:56:e1:0f:74:
35:25:f2:b6:b6:79:67:33:dc:e3:68:20:ed:0c:cb:
01:a8:72:55:5b:54:43:80:5c:ce:bf:43:28:a7:53:
44:34:39:37:3b:7b:f2:8d:5d:1e:66:77:2b:8c:18:
77:4b:3b:02:03:c3:eb:cb:9d:33:05:e2:b7:7b:4d:
4c:74:10:d6:d8:13:d1:92:e5:30:e0:5c:9a:b9:41:
bd:42:f1:bf:1a:b8:c3:70:7d:44:bb:d3:84:63:58:
5b:96:cb:6e:dd:2b:dd:38:97:1c:09:64:b8:88:82:
2f:69:59:05:24:9e:72:ca:54:22:af:d0:b5:db:43:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:FF:68:00:C0:7E:94:B0:8C:76:24:88:C4:BB:F7:50:EA:6D:6D
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:7f:70:36:a1:b4:6d:fa:15:a6:bc:37:68:91:da:22:56:
78:4c:c6:d8:8b:12:c5:61:29:6e:6b:4d:d0:b9:80:18:20:f0:
ae:21:06:72:2f:6f:90:06:f7:64:89:de:1f:95:04:75:dc:8d:
23:c3:6c:76:99:f6:7a:da:fb:0b:8b:90:8f:fc:72:28:ab:67:
a9:a5:43:a2:dc:cd:e1:00:aa:78:1c:30:11:c5:4a:65:bb:a6:
d7:da:6e:0b:02:4a:1b:85:37:28:44:7e:ee:45:70:b4:41:34:
19:94:d3:13:7e:00:65:6c:2b:6e:18:f0:1f:75:1c:fc:4d:cd:
a4:93:90:86:da:a0:9c:24:36:2d:c6:6d:8b:09:aa:3e:c0:fd:
97:33:dd:b4:25:fe:f6:93:af:50:a0:45:c3:c1:c1:55:58:0d:
7e:bb:d7:aa:1e:b9:49:b8:61:08:8d:93:38:1a:77:a2:f3:70:
58:f9:e1:00:a9:ab:c8:0f:33:30:48:c7:c8:5c:62:46:32:f0:
fb:df:a5:b2:51:a9:c8:2a:6c:34:c6:6a:06:37:18:14:e5:59:
b8:57:fc:a7:5d:9b:19:52:f3:d1:41:bc:c8:4c:af:9b:03:4a:
1f:05:32:a6:03:15:ff:ba:c6:2b:a7:bd:ac:94:9c:d0:77:15:
be:ed:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:14:35 2025 by rpki-client