Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: +EdRRKj/BS2eV0T5b2o2NmJKIhhdpGnGW8xmE87RP0A=
Subject key identifier: 7A:17:B3:F9:40:D3:05:5B:88:C0:B3:BC:ED:5F:9A:3D:DF:A3:78:D9
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019923A077C9D0E8DF68C98BE85E51A24386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 13A1
Signing time: Sun 07 Sep 2025 10:02:22 +0000
Manifest this update: Sun 07 Sep 2025 10:02:22 +0000
Manifest next update: Mon 08 Sep 2025 10:02:22 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: 8rsYmMBwMRBa3s8UrPfw8O9XuU5ZZPRj2zGiumdPguc=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:77:c9:d0:e8:df:68:c9:8b:e8:5e:51:a2:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Sep 7 10:02:22 2025 GMT
Not After : Sep 8 10:02:22 2025 GMT
Subject: CN=7a17b3f940d3055b88c0b3bced5f9a3ddfa378d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:32:54:50:2d:a4:db:50:10:6c:d0:0e:39:
78:c8:ff:eb:ec:79:ba:42:c3:03:ae:42:90:aa:de:
7e:95:9a:62:af:e1:91:49:91:17:da:c2:4f:bc:12:
42:df:3e:75:29:59:f5:ab:47:5c:6c:8d:08:90:3d:
08:6c:72:6d:2d:2e:85:c2:2a:0e:2b:ab:6d:3d:a9:
b4:07:40:36:61:83:df:73:86:16:03:d0:fe:82:ad:
a6:70:7d:df:e2:99:af:da:34:ea:d2:40:13:18:db:
3f:b2:81:67:99:4b:19:0a:22:8d:f4:9a:d4:97:95:
02:ed:18:46:2c:b5:70:bf:4a:77:0a:ca:a0:6f:60:
f7:34:4b:41:91:ce:61:e1:39:7b:b9:f4:f8:80:c0:
2d:74:6d:8c:0d:f3:11:9f:9c:35:86:dd:52:62:12:
eb:35:f2:4d:d6:65:6e:56:aa:17:50:08:c0:26:2b:
60:6b:d2:06:6e:fc:f8:8c:04:a0:5b:77:26:c1:87:
5e:4e:6b:02:96:32:cf:ba:d6:5f:81:4c:f7:b2:ed:
06:12:8d:dc:33:b4:2b:6e:cb:84:a9:64:57:6f:e6:
11:04:1a:05:6a:73:23:b8:96:1c:8d:5f:7f:61:22:
6b:f1:c6:eb:88:fb:57:a6:0f:4e:34:07:3d:e3:81:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:B3:F9:40:D3:05:5B:88:C0:B3:BC:ED:5F:9A:3D:DF:A3:78:D9
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:8f:92:f9:ab:28:b2:79:9f:bc:20:6a:6a:41:30:bb:ac:
c8:4c:91:82:aa:0b:f7:02:e3:d6:5d:06:fd:f0:fe:7f:87:ba:
9f:3c:78:53:44:ce:de:d0:19:94:b3:03:9e:8c:d4:22:4a:57:
64:45:8c:49:4f:93:fc:0b:08:25:86:3c:1f:6c:ff:44:d3:1c:
6f:96:48:b5:5c:eb:68:a0:d3:52:62:88:e3:f4:e4:35:08:a0:
c5:04:31:5a:07:c4:68:48:3b:f7:5e:e6:67:23:3b:d0:d4:e3:
2e:25:65:c9:9e:9e:7c:76:77:30:84:ab:05:b7:a0:e8:b7:45:
44:28:3b:6d:41:62:39:2c:72:f2:50:1e:38:9b:eb:41:a7:4d:
97:e3:16:a3:2f:fb:5a:9e:57:3d:47:1d:5c:48:a7:2c:a0:0f:
16:b8:a2:3a:b9:8c:27:41:89:e5:12:45:db:a2:86:fe:be:7b:
37:08:25:a0:b9:c0:ef:f4:f9:96:2b:0a:25:ee:10:53:df:46:
0c:f4:a1:39:34:29:37:a9:f2:1e:2e:e5:de:a8:2a:ae:06:a5:
b0:f6:3b:7a:79:69:df:f7:a3:96:3f:3f:ab:83:dd:22:f9:ac:
8d:9a:65:40:d5:3c:55:cb:8e:07:b4:b8:7e:4e:c2:c4:0f:9f:
4e:97:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client