Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: 7IK6HYHCF56IknYBN8j8qX/pz5Xidn2NCJ1qCQGQiRU=
Subject key identifier: 85:8A:D7:F4:0E:84:51:59:EB:25:0E:2F:35:92:FB:D9:62:0B:FE:2D
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019849D2E45F151B22F0CDA15A129A265561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0C44
Signing time: Sun 27 Jul 2025 03:00:14 +0000
Manifest this update: Sun 27 Jul 2025 03:00:14 +0000
Manifest next update: Mon 28 Jul 2025 03:00:14 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: jZ30mG/4LJKzNkwMfGsspwNd1sb32KLIT4A6vYm8nrE=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e4:5f:15:1b:22:f0:cd:a1:5a:12:9a:26:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jul 27 03:00:14 2025 GMT
Not After : Jul 28 03:00:14 2025 GMT
Subject: CN=858ad7f40e845159eb250e2f3592fbd9620bfe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:fa:e3:5b:f5:b4:7d:ef:aa:90:7d:dc:54:
3f:65:c8:35:d4:00:75:bd:c6:7d:82:3b:fa:cc:cb:
1c:a9:5e:83:f8:10:bf:a0:6f:2f:29:08:bf:8a:46:
56:2e:00:09:10:0c:6c:0d:3d:fb:d0:b7:8b:8c:b3:
96:dc:28:fb:4c:2e:5f:a0:16:90:3f:b2:21:0d:71:
76:9a:74:93:5e:30:53:50:96:e4:12:38:cd:0c:41:
4d:63:17:15:1d:2c:4c:03:d5:8c:e9:39:62:36:a5:
94:92:8b:33:da:74:61:af:7b:3e:0d:c0:17:e2:f4:
14:9c:37:9f:e1:92:fc:88:76:4e:9d:ae:0d:6c:dd:
71:74:70:aa:9f:08:9e:00:bc:1a:a7:7e:56:86:21:
20:6a:56:5f:35:5d:bb:b8:de:be:26:c3:0e:db:c0:
1a:44:5e:35:02:a3:f5:6a:d0:35:31:17:a4:b5:86:
e8:f6:a8:cd:17:e4:49:10:ca:81:8b:f3:f7:ec:78:
09:ee:8b:09:b5:00:e2:93:c4:41:11:38:90:1c:74:
11:a9:3d:d9:2d:a0:4b:b6:31:13:47:08:f7:71:fb:
13:6d:a3:5b:a2:04:47:bf:84:65:f8:fb:be:a1:d7:
ce:7e:30:1c:37:1b:d2:b6:f5:14:37:94:28:9e:0a:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:D7:F4:0E:84:51:59:EB:25:0E:2F:35:92:FB:D9:62:0B:FE:2D
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1d:43:fb:c9:19:9c:b5:3a:f2:e2:08:ac:f9:2c:c5:1e:53:
29:2d:44:3c:f2:bb:af:77:08:99:7c:af:e5:cb:1c:c0:ef:63:
e3:1a:b5:a7:b4:b6:64:ff:e8:0a:07:50:c4:f5:35:3f:74:14:
7c:f1:46:b2:c8:d6:5c:84:fc:34:28:95:ca:c9:d5:c2:ef:7e:
cd:cd:9d:02:8b:6f:a6:cb:90:11:13:82:a2:b4:52:1c:20:55:
d4:4c:aa:bf:2a:10:16:ed:1b:ef:84:3f:4d:18:a7:8e:98:0a:
6a:fd:7e:b3:83:a4:cf:5c:f0:c1:d1:5d:e7:04:10:06:bb:8e:
34:f7:f8:c0:6b:0b:c6:d7:c4:00:5a:9b:3e:9c:4d:33:9f:18:
eb:ac:d8:0c:9c:d5:74:1c:e6:6a:6d:f7:1b:29:03:f2:ec:e6:
d2:30:2b:4c:cc:84:00:2d:c7:88:a9:29:3f:dc:23:fe:53:c9:
b5:e6:90:4f:ef:61:9a:46:5a:c0:02:4e:2b:4d:b7:4d:9b:59:
1c:68:a4:2e:35:bf:02:cc:2d:a0:3a:8c:95:81:5f:5a:0c:5f:
34:1b:eb:38:7a:65:f3:5f:df:a5:c2:62:2a:67:5b:20:e3:96:
36:1e:e3:05:35:b4:c8:c1:a5:62:59:82:36:7a:3e:dd:2c:40:
10:a5:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:14:36 2025 by rpki-client