Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: REZJvKKAWBpas+KbipDV/ofLPKQGIIuf8D1gB5Cwd6s=
Subject key identifier: C9:5F:48:66:00:C7:20:87:A5:EA:72:CE:A2:9D:26:58:ED:FB:9E:B5
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 01974F6A1C74C30C2EFE95E8C07447DD419A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 12:00:43 +0000
Manifest this update: Sun 08 Jun 2025 12:00:43 +0000
Manifest next update: Mon 09 Jun 2025 12:00:43 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: H72YyJ/YbWTPhe7X/t6PQ225TOYZtobjrXVAvNWYO9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:1c:74:c3:0c:2e:fe:95:e8:c0:74:47:dd:41:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Jun 8 12:00:43 2025 GMT
Not After : Jun 9 12:00:43 2025 GMT
Subject: CN=c95f486600c72087a5ea72cea29d2658edfb9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:3c:de:55:88:90:c5:3f:92:60:f4:4d:c3:
52:3b:e1:45:c3:3e:72:cc:ee:be:c0:69:5a:d1:9c:
d9:f1:ef:87:ab:16:7b:1a:cf:17:d3:6b:e0:05:c9:
59:60:3b:0b:e6:b2:a0:6a:9c:48:b7:99:b8:d7:b5:
8b:f3:68:fa:d5:da:ee:2a:27:38:ab:27:78:83:14:
1c:14:b6:ad:5b:70:1b:f6:83:84:63:01:71:d6:e0:
31:25:2c:79:21:a3:c6:ba:ae:38:fb:d2:53:5b:91:
c8:6f:45:4f:1d:fe:86:a4:80:2c:09:a7:e8:1f:9a:
d4:8d:a9:ec:46:8f:a9:10:37:66:00:10:d3:d9:ed:
4c:12:f4:9a:e8:11:40:ab:1f:83:f8:a2:c8:29:91:
51:93:72:19:f4:52:b7:a6:f0:f3:8d:14:01:bb:08:
dc:b9:a2:34:07:b1:6d:97:92:1a:a2:80:18:2d:29:
fd:4a:fb:0d:18:5f:4f:cc:32:3d:13:50:d6:80:2e:
40:29:47:c8:fe:63:3e:33:a7:73:3b:1b:67:62:7b:
10:e7:97:dd:10:a6:82:8c:a4:de:68:53:07:dd:a3:
61:ad:da:ee:a9:9a:36:3d:f5:df:e7:4e:cd:1c:d1:
2c:32:21:b8:23:87:87:15:05:d9:af:1c:17:fc:ae:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:48:66:00:C7:20:87:A5:EA:72:CE:A2:9D:26:58:ED:FB:9E:B5
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a4:d2:07:3d:6e:b7:5c:24:ee:4b:69:14:43:8e:c3:32:f8:
33:df:90:c2:5a:e4:d7:c7:a4:52:ae:b8:30:69:f5:1e:2e:f6:
46:93:e4:b8:ac:77:dd:a0:98:28:12:7e:fc:0d:b8:6c:d8:5c:
61:72:1a:81:ad:75:51:56:68:59:01:10:7a:a6:56:55:5c:f1:
5b:88:09:5f:ac:b8:42:72:ed:0a:fa:f4:b1:30:33:42:3e:43:
ea:a2:34:14:cd:ba:4a:f0:06:ae:e7:d5:c4:7e:30:9b:85:ae:
ff:80:fa:76:39:8a:a9:b2:fe:28:64:29:f3:e0:36:99:11:ae:
d2:00:1f:54:f5:48:d5:54:82:1f:3f:2b:61:c8:f2:82:4c:b1:
1e:f8:c2:d0:d9:5b:3f:58:73:82:9f:22:5e:8e:c4:58:a9:c6:
18:e8:82:5b:05:01:44:ec:9f:1a:d7:ee:e1:a5:6c:6a:6a:a9:
86:15:96:24:cb:59:30:ae:a2:ae:47:52:18:98:b6:1c:b2:e9:
af:0f:03:d2:fc:2b:3b:a3:38:d6:2a:24:b3:b8:93:e0:7d:bc:
27:5c:f8:a0:b6:f1:02:54:a1:3b:4b:9a:c8:c3:10:b2:ef:35:
a5:f5:fe:ea:54:fe:8c:81:d7:33:5a:53:42:a8:56:88:fe:fd:
22:c8:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:04 2025 by rpki-client