Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: 5DHxyQAH2g2+eDIBPzTg7xgxFoBS1Pk1P28XULtg7y0=
Subject key identifier: C8:1C:22:AF:06:BE:F2:3C:CF:8B:34:9E:D8:25:2A:96:6F:70:F2:A5
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 0197BAEAFC11E68030E0FCDE83F97E40260D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 09:00:51 +0000
Manifest this update: Sun 29 Jun 2025 09:00:51 +0000
Manifest next update: Mon 30 Jun 2025 09:00:51 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: 7S4x8w7gezvqGaJcEqlQCzo37zpKSb9iFFmFVjfJ6Z4=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ea:fc:11:e6:80:30:e0:fc:de:83:f9:7e:40:26:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Jun 29 09:00:51 2025 GMT
Not After : Jun 30 09:00:51 2025 GMT
Subject: CN=c81c22af06bef23ccf8b349ed8252a966f70f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:1f:e8:68:fb:a1:c7:6c:dd:c8:74:76:0e:
ef:04:86:0b:44:d2:8d:6b:b6:15:70:07:02:f8:d3:
f8:f6:01:ea:84:ba:11:88:c2:39:b7:89:c9:37:60:
4c:a6:9f:8b:1e:ba:6b:14:d8:17:90:1d:64:a7:1c:
b0:34:95:f2:90:84:e2:82:95:7e:91:cb:21:dd:9f:
99:ba:90:44:aa:77:7a:48:dc:1f:7e:22:51:4b:6e:
9a:20:0f:51:21:39:61:87:3f:71:16:55:6e:c2:88:
99:49:af:f9:9e:df:da:98:60:6b:2a:74:f2:3b:89:
10:61:bf:25:9b:bd:71:8c:f7:da:0b:51:09:69:ef:
c5:94:b1:ec:a3:6b:27:0c:b4:ba:74:89:1a:a7:b5:
80:a8:ef:38:75:62:a3:d3:b4:d7:b1:4f:93:70:6a:
9a:2c:57:97:78:6e:e0:bd:13:c1:e7:5f:16:07:ec:
92:03:34:97:92:eb:f5:e6:2f:6b:55:0b:bb:7c:1b:
55:31:ec:4e:42:a5:8d:1e:74:99:23:4c:fb:5e:70:
1a:f1:d1:7a:cf:f2:7f:c0:2d:6e:ce:c4:8b:0f:f6:
e2:77:c2:99:86:da:d3:54:1d:95:30:23:5b:36:d7:
f6:be:46:7c:4a:ab:c9:a5:8a:ba:56:41:1f:5a:fe:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:22:AF:06:BE:F2:3C:CF:8B:34:9E:D8:25:2A:96:6F:70:F2:A5
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:e2:bc:4b:dc:97:20:b0:9c:bd:ac:4e:2c:b5:a0:5e:57:
7e:82:75:54:3e:ce:45:c4:87:22:da:c4:f5:a6:06:bb:af:b0:
5e:07:fc:a1:12:89:3b:2d:6d:9e:36:3a:86:46:8d:3e:62:f5:
c9:2e:47:df:f7:ef:f2:e3:49:17:db:7b:c3:fa:e9:f6:38:22:
9e:33:f7:61:62:7d:88:02:4e:52:61:6f:43:82:51:d0:74:f9:
e3:10:6a:a6:63:94:27:53:3b:87:d1:0c:3a:e2:82:d9:4e:bb:
bb:23:16:7f:f7:92:ba:b1:c9:18:2f:8d:5c:12:d5:5c:c3:64:
b8:f3:d6:f0:41:60:1d:41:5a:9b:6e:b6:76:17:e2:b3:5e:ff:
7a:c4:38:99:d9:1e:64:2d:55:fe:b5:33:39:fc:74:59:c5:50:
1a:80:e9:6c:16:c4:d0:82:36:60:c8:e0:d1:ca:99:44:90:46:
71:74:0e:3d:3b:ab:4f:3a:02:80:dd:c6:37:d0:32:e8:fa:6d:
ab:ce:f9:63:a5:3d:3e:14:14:9e:ed:70:2d:03:f1:dc:ae:86:
ad:1d:5a:ac:2d:82:df:9a:72:5e:63:83:d1:7c:e6:3f:12:94:
ef:97:bf:b4:32:7a:91:46:04:f8:27:4d:bc:ec:71:d7:14:c5:
e9:34:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:34 2025 by rpki-client