Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: mvy8lN73rgALo3lYPei0YD+00tEFKDkh3u1WCrr6Ric=
Subject key identifier: B5:1B:A3:3A:35:59:E6:20:6F:9E:03:C7:EB:54:19:3A:44:97:5B:0C
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0197B70E56194B3BB368DFE739889FA064F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: IfR9U/d8eZTxXpCRuMWce+70eMNzWl5HZ4lfnWBPWGs=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:56:19:4b:3b:b3:68:df:e7:39:88:9f:a0:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=b51ba33a3559e6206f9e03c7eb54193a44975b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:20:91:65:e3:b5:6b:0f:9c:96:e6:82:f5:
50:c8:c2:83:83:7b:45:62:b1:93:50:51:17:ba:d8:
f2:42:17:d2:9d:d8:60:3d:9c:6a:a3:d1:23:e1:d0:
78:2a:d7:51:72:59:b1:3d:a4:e6:77:87:17:4d:eb:
e1:93:39:06:5b:b7:b0:6c:cb:3f:1f:45:8f:c6:5d:
9a:48:e9:e2:24:8a:d6:6a:c2:d1:d4:39:d4:05:a1:
3a:67:8a:ef:e5:d1:ac:7f:3d:89:38:e7:6c:4c:1a:
06:98:f6:6a:24:d4:53:bb:97:2e:b6:f6:4c:c5:1c:
cc:b4:96:ab:2b:06:68:1a:19:d5:73:40:ff:73:aa:
df:a0:43:5e:9b:d9:fa:7a:4a:41:6b:a8:67:07:11:
ce:1e:5c:fd:81:fb:26:bc:c1:45:7d:9d:38:de:00:
58:00:0a:84:34:b1:b2:67:bc:4e:21:d2:77:86:75:
0d:ce:4b:59:c8:3d:80:d4:93:c4:ab:50:c7:fb:66:
1d:c7:7a:42:9f:ce:c0:6b:71:d5:7a:8d:b4:76:f4:
d8:6a:a3:ea:4a:af:d9:5f:73:87:4f:31:2d:2d:9c:
9e:a0:d8:46:75:c6:cd:52:67:0b:79:26:79:65:42:
42:27:3b:e0:94:4c:e8:be:c2:7a:68:a9:3f:1c:f7:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1B:A3:3A:35:59:E6:20:6F:9E:03:C7:EB:54:19:3A:44:97:5B:0C
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:0b:1f:a2:7f:b0:c9:5d:2c:a7:7c:ed:e2:45:27:63:b0:
0c:94:85:85:be:18:99:69:8a:44:63:6a:5d:a5:19:9e:de:c0:
7b:bb:12:9e:60:ce:66:8d:6c:ba:72:ab:22:5e:48:49:24:4b:
a8:42:b4:ff:23:b0:22:ba:36:6f:3f:d1:d2:59:c5:c9:a0:5b:
44:a6:cb:ad:df:6b:9a:d5:6e:c6:bd:3f:15:e0:a6:37:6e:e6:
99:5c:cc:c9:b0:7c:05:f5:ed:32:8f:4e:42:b5:eb:99:67:2a:
c0:10:3a:96:fd:0c:fe:60:e8:b0:1d:f7:e0:a0:fb:04:4c:76:
2b:b1:bd:8d:c7:3c:02:a4:87:fb:de:8f:2d:fa:2d:fe:3c:99:
73:15:75:e5:40:07:fb:2d:de:1c:15:1c:ad:06:9f:71:29:5e:
d2:77:17:81:f2:2a:f1:8b:62:4a:08:bb:6a:73:01:50:b1:f2:
22:59:8e:15:3c:27:dd:5d:da:db:f9:9e:6e:22:af:21:0e:f8:
85:17:ca:41:1b:70:d3:cd:58:10:57:d6:33:69:69:99:cc:2b:
ea:65:75:76:a8:c4:22:b1:df:79:49:5e:7f:70:42:98:91:e4:
7e:11:d0:6c:0f:7e:56:fc:ab:21:7d:04:ad:90:24:c4:d1:f8:
3f:88:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:39 2025 by rpki-client