Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: WnitOdKc2AiJOrh61TM8c8bTZZaDbfoQgVhume+lkig=
Subject key identifier: 2B:7E:07:89:BF:D2:99:A1:F2:96:63:6D:F6:55:84:84:99:B0:8E:22
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 01974666DE2B7BF4AB9039187D8091EF1CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 10F9
Signing time: Fri 06 Jun 2025 18:00:35 +0000
Manifest this update: Fri 06 Jun 2025 18:00:35 +0000
Manifest next update: Sat 07 Jun 2025 18:00:35 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: iB99zhWeUAhGc5IuArPhak6/mzTmVqR6wSYH6aK3+5A=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:de:2b:7b:f4:ab:90:39:18:7d:80:91:ef:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jun 6 18:00:35 2025 GMT
Not After : Jun 7 18:00:35 2025 GMT
Subject: CN=2b7e0789bfd299a1f296636df655848499b08e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:54:d0:6f:08:dc:cf:7f:d4:37:7a:09:ff:
47:54:a5:b9:a1:bc:f6:98:76:58:83:54:76:8d:60:
eb:4c:9f:bb:da:48:23:5f:14:ff:4e:30:32:db:50:
e1:b4:db:04:c1:70:2a:7c:ea:c8:09:a6:b6:90:e4:
2e:2c:49:5d:2f:54:d8:65:be:06:3c:db:2b:6e:80:
e1:f2:5c:4c:2d:1c:14:ce:7e:9e:ac:ff:c3:a7:40:
e0:f2:13:36:e0:51:a6:14:a3:77:59:93:bf:5c:d7:
f6:cf:fe:07:77:d6:5b:5e:bd:a8:86:09:28:17:72:
37:68:2f:d3:fa:41:63:2c:97:df:92:87:2b:b1:8f:
02:c3:54:b6:9d:ed:77:5b:ae:ce:42:04:5c:03:e6:
d5:fb:e1:f0:2d:05:a7:6e:0c:85:03:5e:b4:7c:68:
25:98:92:95:1f:14:a1:f6:ca:74:ea:68:ce:c6:e8:
83:f1:b0:e4:55:97:0e:45:8a:7f:45:01:38:50:3c:
8a:99:d1:38:4d:ed:04:14:f2:ab:81:46:71:78:3d:
bc:fc:2f:8a:8e:22:27:04:c3:b7:17:e9:e0:7c:a9:
6e:80:a7:66:a8:82:89:99:0b:f7:dd:bd:e6:d6:7d:
c1:aa:66:1c:60:f7:9b:27:76:e8:71:ee:dd:1b:03:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:07:89:BF:D2:99:A1:F2:96:63:6D:F6:55:84:84:99:B0:8E:22
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:13:81:db:9c:cc:81:bc:5e:d4:95:66:a6:64:27:a8:c6:
01:c6:ae:45:a1:84:be:a5:54:b3:63:58:06:59:e8:4e:3c:1b:
c2:42:3f:9d:4b:52:96:cf:30:76:bb:9c:b3:74:87:d6:20:e8:
af:28:f1:15:26:8e:e5:ff:27:87:b2:fa:38:18:89:c2:b2:0d:
5b:c8:59:eb:c9:f7:f1:82:1c:78:8e:01:90:b4:f2:60:ab:0c:
2d:c5:86:02:aa:79:b3:4c:55:47:ea:c0:ca:78:90:28:b7:04:
37:59:31:3d:17:2f:61:12:69:fb:32:9d:dc:70:67:b3:8b:2e:
e6:4d:6b:0b:57:5f:d1:09:fd:7b:1a:98:e2:87:52:7c:82:ac:
8a:fc:f7:42:8f:b5:21:d7:1f:75:72:e7:10:bf:97:90:cb:c3:
4b:1e:45:71:85:0a:0c:6a:a4:c7:82:32:b2:88:2e:aa:82:89:
a2:50:cf:0e:96:73:0a:45:ad:e4:e4:6f:49:b4:eb:6a:c3:1d:
66:60:11:43:f5:b2:05:01:5d:93:c4:ff:7c:b3:7d:51:56:83:
2f:24:82:6e:f1:27:98:52:64:20:9d:8b:2b:2f:28:26:51:7c:
0a:55:29:8c:3f:6f:0c:b6:f4:6f:98:8c:16:5d:54:ec:4e:f0:
00:b6:65:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZt4re/SrkDkYfYCR7xy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1
YmI5MzkwHhcNMjUwNjA2MTgwMDM1WhcNMjUwNjA3MTgwMDM1WjAzMTEwLwYDVQQD
EygyYjdlMDc4OWJmZDI5OWExZjI5NjYzNmRmNjU1ODQ4NDk5YjA4ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jxU0G8I3M9/1Dd6Cf9HVKW5obz2
mHZYg1R2jWDrTJ+72kgjXxT/TjAy21DhtNsEwXAqfOrICaa2kOQuLEldL1TYZb4G
PNsrboDh8lxMLRwUzn6erP/Dp0Dg8hM24FGmFKN3WZO/XNf2z/4Hd9ZbXr2ohgko
F3I3aC/T+kFjLJffkocrsY8Cw1S2ne13W67OQgRcA+bV++HwLQWnbgyFA160fGgl
mJKVHxSh9sp06mjOxuiD8bDkVZcORYp/RQE4UDyKmdE4Te0EFPKrgUZxeD28/C+K
jiInBMO3F+ngfKlugKdmqIKJmQv33b3m1n3BqmYcYPebJ3boce7dGwNNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt+B4m/0pmh8pZjbfZVhISZsI4iMB8GA1UdIwQY
MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt
Y2IzZmE0MDdlMGY0LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0
LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLUTgduc
zIG8XtSVZqZkJ6jGAcauRaGEvqVUs2NYBlnoTjwbwkI/nUtSls8wdrucs3SH1iDo
ryjxFSaO5f8nh7L6OBiJwrINW8hZ68n38YIceI4BkLTyYKsMLcWGAqp5s0xVR+rA
yniQKLcEN1kxPRcvYRJp+zKd3HBns4su5k1rC1df0Qn9exqY4odSfIKsivz3Qo+1
IdcfdXLnEL+XkMvDSx5FcYUKDGqkx4IysoguqoKJolDPDpZzCkWt5ORvSbTrasMd
ZmARQ/WyBQFdk8T/fLN9UVaDLySCbvEnmFJkIJ2LKy8oJlF8ClUpjD9vDLb0b5iM
Fl1U7E7wALZlwg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:30 2025 by rpki-client