Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: gPA/eZRmUVxjO3LZ6GmGFJy4jMCYCCCtrsgBFI65E0M=
Subject key identifier: 11:2E:5D:36:86:57:5C:80:D2:C6:BB:FE:54:4B:4A:BC:E1:6D:55:9E
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0198D54E2F1E17DEF8B9D75B841D4A08E67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0EFB
Signing time: Sat 23 Aug 2025 05:02:07 +0000
Manifest this update: Sat 23 Aug 2025 05:02:07 +0000
Manifest next update: Sun 24 Aug 2025 05:02:07 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 1owLKJxlSqU4FK3BoNnd65oe92TRsVtAsHdtUTlTEr0=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2f:1e:17:de:f8:b9:d7:5b:84:1d:4a:08:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Aug 23 05:02:07 2025 GMT
Not After : Aug 24 05:02:07 2025 GMT
Subject: CN=112e5d3686575c80d2c6bbfe544b4abce16d559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:5f:22:e2:79:8e:8c:46:c1:fa:2d:29:81:
2a:2a:57:8d:0c:cc:77:d9:54:dd:84:91:5c:ce:90:
16:59:7e:d0:0f:82:98:e6:64:99:71:ac:f9:09:1c:
9b:46:4e:7c:fe:de:de:56:d1:ec:09:ff:52:ea:34:
c4:95:da:87:76:39:e7:08:70:b7:57:fc:20:5d:03:
1f:27:f3:b4:b6:c5:45:61:8f:01:82:08:53:15:94:
8c:72:1e:43:c4:42:fe:8d:2a:5d:54:a0:a0:b4:10:
ce:13:f5:3c:d6:fd:c1:1c:d1:c8:e7:5a:1d:13:ec:
82:68:a2:71:27:9c:e7:98:36:06:73:65:fa:6f:c1:
46:5b:aa:3c:2e:6f:04:2d:55:c4:a7:a6:13:7f:c3:
fe:70:26:50:5d:38:d9:49:21:bc:4d:88:73:7b:ed:
65:69:33:50:39:ae:6f:f4:67:26:79:ae:c0:90:32:
67:3c:e8:ce:1a:9f:ba:81:8c:1d:4d:18:af:f8:97:
91:c4:e3:56:7a:1e:36:77:4c:8c:08:ee:bb:fd:ed:
90:2b:87:10:bc:ee:84:7c:30:0d:0e:82:71:ad:5b:
e0:b7:13:46:96:16:a1:6d:0e:27:96:1f:1b:94:c2:
35:f9:09:e2:95:93:f4:47:3d:74:19:a8:a3:d5:a5:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:5D:36:86:57:5C:80:D2:C6:BB:FE:54:4B:4A:BC:E1:6D:55:9E
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:f5:27:e2:50:2a:31:02:58:9e:42:35:84:ee:7b:54:dd:
38:52:5c:48:18:03:72:93:a2:88:30:20:d4:45:ae:9c:95:43:
22:2b:07:44:30:46:d9:9a:90:e6:55:ca:38:d9:63:5d:0c:70:
e4:1b:79:57:a9:b3:a3:e6:c6:58:8c:5a:7e:d7:a7:fd:f8:d1:
93:bc:79:38:3b:34:02:7e:9f:fc:ca:c5:22:f2:41:25:a4:3b:
6c:31:53:e6:0c:1f:95:0d:a4:fb:b5:27:e1:a1:a7:94:7a:3c:
f7:46:39:9d:d1:07:41:b0:5e:4b:2b:c0:df:67:82:b9:cf:5e:
59:52:cc:65:c2:77:c9:90:32:46:66:fc:f8:d7:95:11:93:e4:
49:60:50:66:49:65:c7:a7:07:d0:1c:62:fa:23:fc:cf:fb:2e:
85:95:f0:60:82:e9:92:0d:a2:9b:30:5e:d6:bf:19:d1:d8:9b:
b0:2c:c4:23:d9:e2:96:4b:c1:fb:09:c5:01:b8:f2:0a:48:2c:
e4:17:93:e8:62:b9:eb:42:c8:d7:88:72:8b:44:6c:60:a1:51:
be:85:aa:9f:32:49:69:1d:d0:76:17:90:10:90:67:20:0b:5b:
c6:9e:2a:4a:bd:a6:f7:1c:cf:1a:1e:54:28:08:d5:05:40:0b:
7c:7f:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:29 2025 by rpki-client