Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: UdorXmelG1cjvXdSwwPSf+zWGxaeUOTnXUa5ROpnxx8=
Subject key identifier: 63:21:D7:86:8F:93:D5:53:F6:FF:9F:58:F5:8D:A7:D9:95:2E:B8:44
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019748554A9F1A6A334C7F47CE2C690A9823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 03:00:38 +0000
Manifest this update: Sat 07 Jun 2025 03:00:38 +0000
Manifest next update: Sun 08 Jun 2025 03:00:38 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: xXnEFSFmn5wOhMcNP2H/rWy2yGtHFV76MI3Wcn36U2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:4a:9f:1a:6a:33:4c:7f:47:ce:2c:69:0a:98:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jun 7 03:00:38 2025 GMT
Not After : Jun 8 03:00:38 2025 GMT
Subject: CN=6321d7868f93d553f6ff9f58f58da7d9952eb844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:14:34:a1:f9:f0:97:7a:46:d1:67:eb:cd:
fe:ca:75:a6:2a:42:3f:38:26:2e:61:7c:ef:1e:fb:
24:b4:08:91:f3:e2:6c:41:36:69:b1:b8:34:0a:ae:
16:e8:a1:31:85:7d:51:34:75:4c:9f:5e:53:f2:b5:
b7:6e:bd:d8:00:7c:ca:3c:cc:4f:fe:55:59:ce:50:
1f:4c:ce:6e:33:09:55:40:59:0c:e9:a0:04:52:d9:
ab:54:2a:be:2f:e7:59:70:d0:60:73:c5:bf:99:25:
eb:11:08:38:2d:89:c2:68:64:94:08:27:c7:1d:b3:
fb:03:9b:7b:db:a8:e2:62:68:a8:66:d6:f9:6e:29:
fd:df:3d:d9:3e:2e:ad:6b:db:c1:aa:90:6e:33:5d:
d8:47:0e:06:55:94:09:95:e7:d6:bb:91:39:7b:f2:
c2:de:45:84:67:12:e3:bd:a0:00:4e:ad:e9:a2:b7:
ee:bd:9b:89:26:e5:8f:2f:82:63:a3:b7:dc:08:d6:
62:5a:40:dc:c4:98:be:2c:59:8e:67:ba:08:50:7f:
1a:23:7b:38:f6:7d:9e:57:fa:07:3e:47:03:f6:d2:
67:3e:c2:76:1c:41:23:01:97:d0:54:e2:9b:bf:2e:
c2:10:a2:d6:bd:a9:39:0a:06:36:62:3c:c2:7e:5b:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:D7:86:8F:93:D5:53:F6:FF:9F:58:F5:8D:A7:D9:95:2E:B8:44
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:14:ec:9e:3a:c9:87:75:18:8c:f4:b8:87:bc:03:18:b7:be:
e6:af:f4:c1:e6:ee:e7:06:ee:9c:9d:d2:a4:8f:c0:48:7b:8e:
c0:7d:02:46:2e:28:82:40:2d:3b:d4:6a:fd:fb:ce:ce:ea:b9:
58:2f:18:bc:8e:2b:37:7c:44:3d:56:1a:9a:25:4b:d7:17:ba:
db:3e:b0:3c:c8:ca:75:75:25:28:89:e9:e3:df:8d:95:22:30:
6c:b2:38:12:f2:41:f3:b1:9f:4a:3e:1f:1c:a2:d4:50:60:45:
89:1f:97:10:0a:29:30:ee:21:ae:39:5c:5e:e1:4b:f7:b8:cf:
25:2c:cf:ac:31:02:82:7f:89:10:8a:a2:a0:d5:0f:1b:0f:f6:
d0:b0:0b:1d:c1:d7:9c:fe:2e:31:4d:f2:86:a4:59:31:68:c2:
3f:d7:8b:00:73:d7:f8:09:17:13:e5:97:89:d0:1b:d7:4e:1a:
19:66:3c:9d:f2:1f:98:c5:bd:1d:7b:79:72:7a:9b:ba:a4:9a:
f7:db:67:3d:fd:1c:2a:b1:f3:bb:7d:ef:62:2d:44:f3:02:9a:
cd:6a:55:0b:ee:44:ff:33:b4:de:a0:f4:f0:7e:28:73:8e:f9:
56:c4:6a:9a:30:13:b9:aa:09:22:8f:15:ec:44:70:eb:24:0c:
18:15:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:35 2025 by rpki-client