Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: cwrh6R9luGSwKU40dxAcmW30zlgDRtdQJhV9Uj4yRT4=
Subject key identifier: DE:1B:F8:AA:6E:31:AD:60:DE:62:81:01:52:3C:E5:DA:EE:08:C8:82
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 01974EC53D900AF9DA3454BABB638652CE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:00:38 +0000
Manifest this update: Sun 08 Jun 2025 09:00:38 +0000
Manifest next update: Mon 09 Jun 2025 09:00:38 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: zbcSIiwR88uNF0ePiqzTnRo4X9A7Yas8PQ0WLKGztFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:3d:90:0a:f9:da:34:54:ba:bb:63:86:52:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Jun 8 09:00:38 2025 GMT
Not After : Jun 9 09:00:38 2025 GMT
Subject: CN=de1bf8aa6e31ad60de628101523ce5daee08c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:72:49:2c:eb:0a:e7:1f:4f:73:cc:83:b7:
d8:e1:fa:d3:4a:36:85:c2:fa:d3:1e:e9:c3:fa:08:
fa:ce:df:67:d3:57:40:fc:cf:1c:df:69:b1:e2:92:
28:68:f7:bd:25:6a:3e:f3:2b:f2:ae:8f:73:5d:77:
fb:db:a0:98:a1:f2:ed:5a:cf:39:85:c3:33:7d:5d:
8a:84:a4:2d:1d:6f:14:1e:57:a4:9a:bf:89:41:0d:
f3:9c:e2:c0:62:02:cb:c2:23:72:1d:38:10:e0:40:
16:9b:2c:ea:ed:30:34:1e:98:e5:d9:44:0e:7f:15:
47:cb:65:cd:8e:97:4a:29:f8:0b:59:68:b7:1f:62:
11:34:ea:b8:23:4c:12:08:7a:cf:57:8a:c3:82:3f:
29:e4:1d:a6:e4:b4:82:09:19:0c:09:06:50:e3:5c:
98:77:ff:04:0c:2e:2b:1c:e9:f8:2c:59:45:53:6d:
f7:14:07:5f:73:71:23:ec:d1:71:45:b2:a7:f9:e0:
0e:d8:49:c8:f4:93:13:80:03:a5:2c:19:9b:0d:15:
a4:b7:ce:13:70:09:e9:12:77:56:ff:a9:e8:0a:42:
79:33:67:97:fc:f0:cb:3c:ca:fd:ee:78:6c:99:9c:
74:b4:b0:74:29:45:f4:d9:95:8a:4c:4a:ef:00:42:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:F8:AA:6E:31:AD:60:DE:62:81:01:52:3C:E5:DA:EE:08:C8:82
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:fd:d8:e7:b3:06:6f:bd:00:25:68:57:06:c8:12:49:3c:
80:6a:65:1c:7a:22:d9:84:a7:ee:b0:63:3c:cd:be:72:f7:27:
df:68:f5:b2:bf:2e:9f:79:7c:8e:c5:e4:71:be:00:b8:78:7c:
d3:41:e0:f7:e6:15:6d:c4:d2:ff:9a:43:f2:25:66:f4:84:fb:
6f:ee:95:5b:e3:39:66:09:45:ca:cb:bc:a8:39:8c:ce:bb:91:
bf:84:c6:08:2f:80:51:91:37:04:59:3f:71:8a:73:1b:ea:13:
5d:03:06:45:a2:0c:ae:b5:6a:21:09:6f:f2:f5:16:13:97:30:
23:f5:ae:09:a1:e8:5b:67:56:d0:60:14:99:b2:a6:ab:47:0c:
8e:67:48:3d:00:25:ad:52:11:fd:0c:f3:1a:0c:29:04:6b:16:
01:75:fb:b7:e6:fa:06:c0:df:25:a7:b0:55:8f:2a:22:26:44:
94:8f:e0:4b:5d:67:7d:93:db:72:2d:18:cc:be:f8:f1:73:10:
e7:1c:ff:df:24:56:f6:69:55:d3:0e:84:ee:a6:66:bd:ed:7b:
f6:ec:97:11:8e:2e:28:00:57:de:b9:86:c7:2c:72:f4:e8:76:
ff:c3:85:87:7b:dc:85:6a:80:b4:f3:97:62:f9:eb:7a:98:87:
ab:c9:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:52 2025 by rpki-client