Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: l8cNHZF6IGqOaK5LZLGQ8pM+/rk8BG2UveE6IawhjJM=
Subject key identifier: 29:40:B0:AA:E2:50:D9:E0:E0:67:2B:8E:98:94:B6:29:FF:1A:8A:83
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 01982710A0765D4F648EF8548DE4A7D1509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 04A9
Signing time: Sun 20 Jul 2025 09:00:57 +0000
Manifest this update: Sun 20 Jul 2025 09:00:57 +0000
Manifest next update: Mon 21 Jul 2025 09:00:57 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: 1YCRyPn7qKKJbyCWIZvPXGbxq0sAxwtrpGAriEITfIo=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:a0:76:5d:4f:64:8e:f8:54:8d:e4:a7:d1:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jul 20 09:00:57 2025 GMT
Not After : Jul 21 09:00:57 2025 GMT
Subject: CN=2940b0aae250d9e0e0672b8e9894b629ff1a8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:c7:a0:fc:89:ee:da:5d:58:9a:7c:c7:f8:
0c:ea:f0:35:49:34:98:3f:e8:0c:1f:1b:41:d7:a9:
15:c9:67:d8:b1:e3:56:3e:65:0f:0e:78:6d:2f:1e:
89:0f:7b:31:fe:3f:84:31:83:68:81:ca:0b:ba:ca:
4c:d9:74:26:c4:4c:4e:89:65:c8:0e:6c:48:a6:94:
c6:86:57:3f:ac:4f:d8:91:35:cd:9f:b3:48:14:64:
8f:80:ef:34:09:78:ab:82:53:74:2c:23:05:0b:bf:
b1:be:6f:75:17:74:03:31:33:85:5c:4b:fe:2e:cb:
2f:45:8d:94:6e:76:95:1f:1f:22:df:25:d6:7a:5a:
ba:88:6a:d0:01:82:43:5f:21:b7:6b:fb:18:1c:4b:
98:d4:a5:54:03:96:0f:31:6e:ca:54:02:3c:88:f1:
63:b4:bd:ce:f4:63:03:8c:65:06:c5:f3:e0:89:91:
e4:fc:7c:dd:f0:9e:7e:1a:5e:cd:84:48:9b:cc:06:
34:c9:16:26:f2:eb:1d:23:d7:2e:67:02:df:5d:e0:
6b:af:6a:02:e5:68:0a:73:d4:81:0f:12:63:42:3f:
27:e9:9a:7b:6a:8b:c0:72:ca:0a:d4:a5:ea:a3:a5:
f1:1f:e8:58:f0:46:87:bd:70:14:48:a3:16:3d:51:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:40:B0:AA:E2:50:D9:E0:E0:67:2B:8E:98:94:B6:29:FF:1A:8A:83
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:be:b5:f5:71:03:f7:0b:85:18:75:16:ac:51:df:3b:6d:a6:
9a:a7:f0:3e:f1:a7:8e:de:b6:c9:f0:97:bc:65:bc:59:dd:26:
fe:a9:7f:82:01:78:61:1e:d2:e2:23:7e:18:42:1d:46:c5:2a:
31:21:14:6e:0d:62:5e:31:7f:91:b6:67:80:da:43:bb:86:e6:
a7:14:11:b0:8f:0b:78:08:38:fd:42:35:89:c4:8b:9a:79:83:
06:2d:88:89:d8:d2:e9:06:4a:13:d1:68:71:0e:21:ef:7f:cf:
3b:09:c7:f5:52:13:50:a1:53:d0:a2:43:54:55:d3:29:31:af:
05:80:9c:af:84:68:3b:9d:72:04:8f:89:38:09:e9:61:bd:62:
e8:47:78:f3:6b:c8:5e:14:b3:3e:b4:e2:24:87:5d:3d:ae:46:
2c:f2:06:c7:dd:86:44:e7:af:d9:eb:4f:83:4f:e4:99:25:05:
4b:20:dd:e2:b9:e6:18:fe:eb:0b:79:87:8e:1e:be:ba:cb:cf:
81:ce:cd:9b:ca:89:79:92:eb:88:e2:e3:f2:2a:a9:4e:1f:b1:
44:db:1a:e8:92:0f:40:4b:c9:8b:af:a7:bd:c5:70:f9:2b:76:
21:d8:32:95:2f:bf:58:04:2f:e4:c9:ed:1e:e6:d4:04:3a:88:
50:2a:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:31 2025 by rpki-client