Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: ScQdNKIEcJZhWQcMO3Anm6rnmJlIbZUxDSuDzcPZpSc=
Subject key identifier: D1:2E:45:D9:8E:64:60:22:06:C4:60:EA:48:03:92:07:69:8F:EE:4A
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 0199221E5B389593C1CF053A1A5AB04490CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 03CB
Signing time: Sun 07 Sep 2025 03:00:38 +0000
Manifest this update: Sun 07 Sep 2025 03:00:38 +0000
Manifest next update: Mon 08 Sep 2025 03:00:38 +0000
Files and hashes: 1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: oPx8sXvUYYWjCexgNVhdTfMa1vz+kUKM/7iBjbD/ZWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:5b:38:95:93:c1:cf:05:3a:1a:5a:b0:44:90:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Sep 7 03:00:38 2025 GMT
Not After : Sep 8 03:00:38 2025 GMT
Subject: CN=d12e45d98e64602206c460ea48039207698fee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:10:9b:80:5c:26:a4:6c:f4:4a:5e:31:6d:
b6:10:2c:20:0a:ea:ff:26:c4:b8:5c:32:5c:5f:92:
ca:ce:60:a2:a2:9e:15:88:fa:67:0f:1f:d7:d5:2f:
38:48:e2:fd:61:8d:46:98:f3:0f:3b:f6:b7:7c:60:
7a:aa:84:70:62:3c:19:9e:eb:ca:80:23:81:e0:1d:
76:3c:c1:b5:43:7d:7d:f8:a0:a6:d2:eb:57:16:9e:
7d:c9:df:1a:f2:00:8b:74:bd:60:5c:b2:4d:a5:f2:
e3:e5:da:ab:b2:50:2b:f2:df:c6:c9:e1:5c:4f:0d:
2c:95:8c:97:39:32:7c:a9:b5:3c:c0:0b:c7:73:e4:
88:82:c7:0e:51:48:f6:61:a4:0c:80:ca:4e:3b:a0:
67:4a:30:bb:a6:ab:d8:83:c9:50:9f:30:58:94:4e:
ad:00:45:b2:c0:2c:f7:b0:31:f0:86:6d:c9:70:02:
2a:dd:35:68:91:b3:9b:f8:f3:e8:84:80:89:28:b6:
f3:5a:09:5b:70:d3:95:e1:db:5e:42:4c:8e:ad:27:
31:61:62:ad:93:6a:9b:ba:dc:f6:fc:9f:c6:17:c3:
a0:ed:49:76:e8:01:7b:8f:7b:c8:ec:b9:e3:61:6f:
08:f7:74:7d:f3:ba:0b:83:e2:d5:5c:2e:14:ec:ef:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:45:D9:8E:64:60:22:06:C4:60:EA:48:03:92:07:69:8F:EE:4A
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:23:46:a3:df:04:8c:c5:63:4f:f7:c6:c6:50:6e:bf:56:
8b:0e:07:2b:eb:fd:a5:8c:a4:2b:0e:bb:c6:4b:f7:48:00:50:
9e:68:9e:56:cf:e0:46:b2:25:db:bd:ac:1a:b7:d8:3f:fd:7f:
4c:27:02:f1:59:f0:ca:5b:ce:83:b9:89:8f:10:bf:29:b7:db:
bf:7a:92:8a:f0:d1:2d:d1:ae:8b:be:18:af:0b:ca:c9:42:47:
82:66:5a:84:7b:a8:1c:b8:a3:fc:80:f8:0e:c4:fd:86:c5:8b:
c7:14:9b:b8:48:7c:81:38:8e:48:8d:0f:ae:cd:80:67:f9:5f:
ed:16:5c:ee:f2:fb:98:58:83:99:53:ac:34:55:7f:91:01:2b:
09:c8:0e:d8:f0:a9:27:9b:ff:91:1b:12:af:c0:a2:55:78:b8:
6c:b7:3e:b7:0c:10:c0:35:7f:e6:62:2c:76:c3:5a:e6:28:00:
28:81:09:37:cc:33:36:b5:a3:51:9b:e9:50:4c:1d:06:e3:19:
37:e9:54:0a:5c:73:d4:24:67:ad:3e:87:fd:6a:45:82:0c:77:
95:23:1e:59:44:4b:a5:fc:2d:9c:68:8f:f5:11:46:9b:f8:68:
b5:d1:2d:55:a8:88:9f:a5:b4:36:76:54:de:26:91:b1:ba:bc:
89:de:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:59 2025 by rpki-client