Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: /ELmyTFj9OjnFVm7G/A+TGo2yb2DT51asdrw50DCVWk=
Subject key identifier: 97:70:19:A1:A7:9D:01:78:8B:54:FC:8F:51:A4:AE:DD:C0:D1:4A:D0
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 01974F33009E91795D85ABE945E1ACE1B649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0D12
Signing time: Sun 08 Jun 2025 11:00:31 +0000
Manifest this update: Sun 08 Jun 2025 11:00:31 +0000
Manifest next update: Mon 09 Jun 2025 11:00:31 +0000
Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: HBAdUV5k97rvV37V820IbgYf/m9/uptAXSU8iuI+qdc=)
3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:00:9e:91:79:5d:85:ab:e9:45:e1:ac:e1:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Jun 8 11:00:31 2025 GMT
Not After : Jun 9 11:00:31 2025 GMT
Subject: CN=977019a1a79d01788b54fc8f51a4aeddc0d14ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:3b:f9:3c:3c:e5:8f:4e:1f:4b:36:ff:10:
e8:b0:bd:ed:cf:e6:d1:a5:3a:4e:d9:21:4c:a1:6f:
74:be:dd:38:3f:c3:18:39:d8:a3:95:bd:f9:b2:7b:
e2:60:64:ef:3a:af:88:0d:d1:6f:93:8c:2f:f8:16:
bd:89:5a:58:cb:2d:82:a8:fe:17:02:95:fe:70:a0:
5c:41:3d:c9:f7:b4:b9:f8:5f:18:f4:d3:6b:bb:45:
5c:2b:f2:10:f3:e9:f7:33:47:6f:56:c1:da:47:6e:
fe:b4:b2:aa:a8:2a:4b:22:7a:b5:a7:30:48:e8:97:
b3:7a:eb:a4:2f:39:be:f2:95:6d:71:a1:6d:65:d4:
f6:d5:70:2c:6d:bb:ea:c7:90:b1:08:15:8d:1b:0f:
ec:bf:b9:28:f0:5d:1f:f8:f2:47:87:9c:4d:97:6b:
48:50:c3:39:4e:c3:bc:87:54:e3:d4:75:f2:ce:5c:
ab:e4:9d:cb:e6:ac:88:ea:07:18:48:ae:b2:f6:2f:
f1:7b:80:62:33:5c:65:ed:38:f6:67:54:25:e5:07:
e6:af:53:79:df:f0:de:9e:66:00:1f:ef:c1:89:c1:
07:13:6c:6a:73:60:b7:1c:03:7f:dc:4f:f7:3d:79:
16:e4:62:5d:20:f1:82:68:72:50:8c:f2:7c:73:a7:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:19:A1:A7:9D:01:78:8B:54:FC:8F:51:A4:AE:DD:C0:D1:4A:D0
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:fd:a6:f4:c1:5f:61:ad:20:b4:0e:39:91:ef:e7:1a:86:
71:5c:d7:1b:0c:c8:92:68:9e:3e:5c:5f:d3:10:3d:49:b7:e2:
29:ec:6f:8b:1f:21:cf:f3:3d:b6:2f:3a:07:f7:b8:1a:10:fc:
86:de:9b:e7:b0:42:45:7e:69:71:39:2d:e2:f0:1a:78:fe:7d:
cd:e2:3c:99:4c:77:7a:ef:d5:6d:01:e5:8e:dc:d3:54:63:fb:
58:9e:a2:4c:0b:92:85:3a:a2:f4:9d:c1:4b:49:e7:c8:19:09:
a0:48:c6:69:c7:63:81:75:a6:9c:08:33:05:a7:06:d0:0c:30:
a0:25:00:94:37:88:f0:9c:d3:46:2c:91:86:6e:aa:04:57:5a:
c2:94:34:5e:4e:0b:8b:56:82:0b:2f:c0:3d:55:b0:a4:5f:5a:
40:1e:31:d5:77:c2:4f:2e:d8:75:28:22:82:10:46:f0:a7:73:
d6:d5:25:38:38:ba:b8:fb:f9:9f:66:68:3a:a4:53:7f:4f:4b:
38:7e:93:07:4d:30:8c:00:bb:ae:28:53:2f:34:33:e6:98:91:
4e:19:d0:98:e9:ea:c7:2e:b2:eb:fe:3a:52:87:49:bd:90:99:
a4:1d:9e:1b:31:4e:d1:88:fb:96:e1:9b:16:c6:50:8c:64:94:
de:ba:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:24 2025 by rpki-client