Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: b4DgGXSzYCYbGajSDfmplotrjKKt75oUHVOp2B/OkiY=
Subject key identifier: 22:30:08:B1:A8:DD:7A:80:77:AC:E6:1D:93:5D:89:34:2C:E3:F7:91
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 01985757E02BF19CDCE36C97E9263253987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 18:00:33 +0000
Manifest this update: Tue 29 Jul 2025 18:00:33 +0000
Manifest next update: Wed 30 Jul 2025 18:00:33 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: Ow8zpnmsR/ERRPHyZV95GdFnKPsRIzjOlb/rnnEjjIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:57:e0:2b:f1:9c:dc:e3:6c:97:e9:26:32:53:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Jul 29 18:00:33 2025 GMT
Not After : Jul 30 18:00:33 2025 GMT
Subject: CN=223008b1a8dd7a8077ace61d935d89342ce3f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:e6:ad:e0:e4:97:fe:3b:63:19:5d:12:5d:
70:3f:c7:3a:94:54:0f:3f:b8:a8:9e:6b:c8:fd:b5:
39:9e:43:4c:84:75:02:64:a0:b7:ee:19:27:ff:c5:
5d:1c:5c:28:5b:c4:5e:b5:eb:64:7e:b0:4d:29:97:
61:3b:51:35:ae:a3:ee:d8:5e:fd:82:ba:c7:d0:a2:
73:45:91:64:00:8e:52:73:bf:4c:fe:ac:05:e3:c9:
e5:bc:74:f0:b9:3f:f7:29:e0:56:b3:bd:b7:f2:f1:
7e:7f:63:f3:92:a8:c3:68:55:97:7e:2f:8c:fb:80:
74:a3:4c:46:0a:6a:06:38:a2:a3:02:98:43:c8:d8:
f0:44:3f:a7:3a:0a:d6:06:f6:43:70:17:3b:36:f2:
1a:7c:0a:7c:e6:56:a7:b6:1e:19:a2:75:c7:38:4d:
6d:17:69:af:44:8d:ef:05:cb:4e:cf:9e:d2:98:49:
02:4a:c2:cd:23:fd:ea:b4:3d:f1:e0:7f:d7:8f:63:
b5:d5:93:6d:2e:a5:f6:60:81:1a:33:9f:46:85:9d:
2c:11:41:1f:07:dd:fb:cb:0c:a3:7a:dc:1f:00:a2:
e2:62:a8:f7:a5:c1:0a:1c:1e:3c:88:a4:76:94:ed:
51:9e:86:89:23:3f:15:d3:e8:4c:5a:29:63:0f:8b:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:08:B1:A8:DD:7A:80:77:AC:E6:1D:93:5D:89:34:2C:E3:F7:91
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0a:43:48:d0:0a:2b:46:cb:3f:03:5a:d5:7c:d0:8d:3d:9e:
bc:74:31:a2:c3:8b:02:91:89:fd:29:58:df:fb:d8:81:50:3c:
18:6d:12:6e:36:e1:e7:31:d0:f9:16:d7:4b:b4:18:14:3d:e1:
fd:45:fd:3a:4d:2a:db:a2:0f:ab:fb:0c:fc:da:56:c1:fb:b5:
d8:4c:d5:b1:d3:4c:cb:f1:40:9c:3e:34:9f:32:eb:90:33:5f:
f8:4d:74:91:f0:6b:fa:67:03:16:47:13:de:14:76:96:5e:4d:
24:96:8e:cc:92:21:f9:93:64:13:e7:5c:ed:24:2d:62:8e:07:
91:d5:63:99:96:85:59:8f:e4:75:f2:a0:11:83:bf:29:5a:c5:
5e:e1:96:99:44:d9:7a:00:a3:2c:c8:6c:57:2e:0e:f0:a7:d9:
01:bb:82:e4:40:61:dc:36:ff:6e:43:11:0c:77:9e:4e:a5:44:
7f:1c:53:a0:62:f3:96:10:68:33:c5:c6:60:d7:db:37:95:a8:
63:67:a6:3b:59:b4:e3:60:d8:cd:14:cd:53:96:68:79:06:7f:
0a:e5:7f:77:eb:c5:ae:0c:0c:e5:bc:b1:69:c0:84:26:56:5f:
81:31:69:9d:32:d0:d6:5f:9a:89:15:1d:8a:ea:6f:e7:0e:b2:
a3:29:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:53 2025 by rpki-client