Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: W43GwDXDxw7/I7nFIx7vfRnSVPvrjBBwMggZW3HOczg=
Subject key identifier: 72:94:BB:F9:02:80:E8:BC:C6:48:2A:AB:AE:69:62:02:D0:25:02:68
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019739873EA5EC32A12BEFDF2F9C77B091E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 042E
Signing time: Wed 04 Jun 2025 06:00:54 +0000
Manifest this update: Wed 04 Jun 2025 06:00:54 +0000
Manifest next update: Thu 05 Jun 2025 06:00:54 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: Gcc2A0Q2Lvu1W6sn6iF5Vd9r3iDebTelrnRloiT92ss=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:3e:a5:ec:32:a1:2b:ef:df:2f:9c:77:b0:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jun 4 06:00:54 2025 GMT
Not After : Jun 5 06:00:54 2025 GMT
Subject: CN=7294bbf90280e8bcc6482aabae696202d0250268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:1c:f7:49:93:11:8c:7c:2d:08:ec:36:c4:
a8:60:6a:bc:87:96:57:a9:18:7f:70:e8:9d:9f:cc:
d6:12:23:34:f0:ca:23:8a:9e:54:f3:b0:bd:de:a2:
df:81:fc:b2:36:91:b3:41:b6:98:fb:90:dc:4c:51:
83:53:c8:cd:6a:0e:3f:c1:8a:d6:4f:17:cd:04:ed:
21:3a:e7:1d:ef:0a:53:c9:f4:97:72:4d:a6:c1:61:
67:5b:ca:65:a7:08:50:98:18:fe:cd:a5:63:ef:ec:
0f:9e:95:f7:27:3f:e6:a4:93:52:67:70:26:e3:45:
d2:9a:47:1d:1e:95:b1:76:63:49:da:4f:ee:4c:71:
5b:34:26:fa:96:69:de:da:bd:e5:7a:e5:62:45:0f:
30:d6:db:fd:66:31:63:f9:db:08:27:2c:f8:37:aa:
49:33:d9:ec:fa:dd:7a:df:c6:12:dd:e3:67:9a:8e:
56:4e:13:c5:ed:3c:18:7e:6d:ca:97:50:9f:44:0d:
a0:37:91:70:31:81:2a:d4:23:42:73:5f:30:5e:85:
d4:33:86:bd:a8:8a:1c:af:a9:d6:ab:6f:8f:b6:a3:
e4:1e:7d:7d:d6:65:79:29:fb:b4:35:5a:ae:01:f5:
1f:9b:10:0d:4e:04:3b:89:e7:ed:0f:e0:0b:13:3f:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:BB:F9:02:80:E8:BC:C6:48:2A:AB:AE:69:62:02:D0:25:02:68
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ae:12:5b:38:7d:48:36:cf:e7:82:27:b0:51:b8:38:5e:74:
3c:e1:a6:56:61:cc:2c:53:96:94:65:e4:5c:a4:f5:23:88:5e:
38:43:38:cb:49:d1:83:54:9a:28:2a:4a:90:5e:dc:38:70:90:
04:33:a6:45:c3:7d:d2:2d:d7:1b:95:d6:d7:a7:5f:b1:29:15:
a1:32:8b:b1:30:8b:fa:4a:5b:21:de:6e:ee:9a:a9:96:48:50:
90:a3:5a:ae:b7:99:b8:41:05:41:c4:ff:45:94:2c:03:67:86:
ac:f8:e6:31:9f:4d:2a:7c:10:12:7e:bf:70:c6:d0:6f:39:53:
93:de:62:76:f9:2f:c3:15:13:30:de:83:60:32:30:7e:b0:2c:
6b:1f:94:86:24:32:f5:d9:9c:0d:99:48:5b:08:d5:4a:44:cb:
dc:ed:a2:ee:fa:c8:d5:43:52:95:8d:29:1b:e7:47:59:33:d6:
88:d7:aa:58:56:3f:0c:9a:eb:e1:fc:ce:02:70:db:28:2a:be:
12:80:37:7f:d5:c7:46:c6:72:2c:cd:fe:08:9d:04:d9:3c:e3:
30:6d:e6:d8:d5:f9:88:b1:20:b4:7d:a1:f6:77:64:8f:5b:66:
aa:a8:49:37:ac:fd:a0:c5:ca:ef:57:ff:b2:ed:ad:58:c4:57:
10:39:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:51:17 2025 by rpki-client