Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: 9G+iodEr03W3/bOviOs88GmqJYcwxf53OvP9+n3GQt4=
Subject key identifier: AB:0A:32:5D:30:74:7C:30:ED:F9:64:94:B2:FC:49:E2:3E:9F:37:5B
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0198D81675D50756DAFF26F48B32FE011812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 18:00:07 +0000
Manifest this update: Sat 23 Aug 2025 18:00:07 +0000
Manifest next update: Sun 24 Aug 2025 18:00:07 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: mt3jvM566N4AEIKuU593hCLU+DYnoJ0kLiA/z0J93FA=)
4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:16:75:d5:07:56:da:ff:26:f4:8b:32:fe:01:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Aug 23 18:00:07 2025 GMT
Not After : Aug 24 18:00:07 2025 GMT
Subject: CN=ab0a325d30747c30edf96494b2fc49e23e9f375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:c7:ca:01:46:0b:73:d1:91:7e:66:32:89:
eb:18:29:5e:4d:42:eb:f4:96:f8:b2:01:6c:7b:de:
93:00:b6:9c:d1:d6:0e:4b:9f:3c:56:78:db:bc:c5:
7f:60:24:02:46:78:35:6f:b1:62:ac:6e:5d:5b:f5:
eb:ea:83:42:a9:f8:ac:a6:00:18:7e:9f:64:87:a1:
55:43:a0:22:01:46:09:46:b8:6c:59:94:d6:48:f0:
4d:a3:20:e5:e6:75:ac:11:eb:77:f3:e6:69:d7:a3:
c0:ca:af:b4:94:9f:aa:0d:ee:46:d2:a9:6c:a4:6a:
7f:b7:35:5b:08:cc:93:38:e8:d5:14:b9:cc:6f:c0:
26:54:cf:1e:79:c2:22:57:d7:46:64:12:e0:c2:f7:
90:60:52:2a:6c:0b:73:6e:e0:a8:e0:e0:c1:9a:3f:
53:7d:9c:14:0c:77:4c:62:87:93:03:74:18:25:32:
34:5f:a5:9b:bd:04:af:5e:13:d5:3c:e9:9d:5e:6b:
b3:43:47:c5:41:ee:b6:2d:25:7c:56:3b:bc:3a:66:
c2:01:f1:56:55:4b:eb:43:ee:ac:85:eb:06:44:90:
4d:a9:93:49:41:58:10:c0:d0:35:b0:98:c7:57:56:
ea:86:61:ad:74:86:07:1e:8d:7a:17:c5:ed:da:63:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:32:5D:30:74:7C:30:ED:F9:64:94:B2:FC:49:E2:3E:9F:37:5B
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:b9:00:41:53:ca:0c:c0:d6:0a:92:95:f9:16:0b:82:f9:
c1:73:df:5a:b8:89:e3:d0:5d:6a:97:9c:ab:00:00:a4:eb:29:
cf:24:3c:59:df:c5:ab:48:d9:f3:10:55:55:38:4e:75:1a:b8:
84:ea:92:1f:ee:c1:a8:84:75:56:9b:32:d0:2f:fa:da:bc:c7:
83:bb:80:89:33:d0:71:82:13:8c:ed:51:5f:53:f6:81:2b:e7:
a6:a8:8a:83:0d:58:14:06:e4:3b:4b:58:cc:4c:b3:ea:c4:0d:
9a:4d:c6:20:25:0c:bd:d9:7e:ea:a5:6b:8b:ea:fb:47:c9:59:
54:33:3e:eb:b0:a0:2c:16:2e:18:0e:0d:30:de:2b:77:57:c0:
62:6c:f1:2a:d9:37:6d:24:8b:a4:a1:73:4e:56:f6:e1:14:88:
51:65:a6:f7:6e:3f:8b:6e:5f:d9:7d:f8:d1:82:fe:4a:64:5e:
b5:4f:1f:b3:4c:b3:b3:43:03:a9:ea:dd:94:53:fe:b6:4b:02:
e1:1d:d1:44:a2:eb:6a:da:aa:a8:b1:b7:56:a7:97:90:23:74:
a5:c1:62:c6:bc:7d:82:5b:a9:7b:87:78:13:63:e2:70:17:4a:
b5:19:ab:b2:73:d6:e6:d0:88:5e:65:03:6a:a9:da:01:f7:75:
86:b0:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:07 2025 by rpki-client