Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: JAHl7TO5bLqJWXKPyAoK1fGS15DbKEay4MxfNPyy/m8=
Subject key identifier: 39:A5:2A:E9:FE:AE:29:3C:A4:62:14:FB:16:E5:21:D5:71:37:2E:70
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0197B6A17F9E50E04397CD387491831BC7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 12BE
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: dbG3K48HiVRJKCyEFeuBnggTn25O2y7R6Ooh1HMRIRs=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7f:9e:50:e0:43:97:cd:38:74:91:83:1b:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=39a52ae9feae293ca46214fb16e521d571372e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:33:3d:59:70:c2:ab:af:8f:bf:3b:6f:f9:
05:4d:ef:ff:33:1e:90:8d:e2:92:0e:22:1d:0e:37:
76:52:22:46:9b:bc:bf:79:83:c3:77:1f:55:5c:b5:
72:ce:a6:20:9a:86:68:8a:de:00:34:88:9a:e3:0d:
d3:f4:2c:77:66:ef:4d:ff:34:76:5e:ba:83:53:e7:
5a:9f:76:5f:72:19:03:ea:59:26:30:aa:18:7f:2e:
e3:dc:c5:2c:4c:57:04:1b:3d:be:f9:90:18:0e:66:
c3:f7:3b:20:85:57:01:67:5c:ad:69:16:c8:04:a2:
59:f8:5a:4c:27:90:4b:14:9f:34:8f:6e:a5:15:bc:
f0:32:e2:51:f1:d1:70:42:03:d6:d7:70:ba:79:32:
c3:44:22:f7:2a:bf:e8:f8:43:2a:bd:3e:ed:26:f2:
e4:7c:cb:3c:e4:26:be:ee:a1:59:9c:95:7b:94:c9:
ca:57:26:26:df:46:b0:2b:dc:9d:89:29:0c:5f:7c:
c6:33:e4:58:55:48:6e:eb:6e:9a:83:33:c5:34:76:
4c:9c:d9:d5:66:9e:56:6d:76:a2:67:3d:77:eb:7b:
2d:0f:cc:2b:9d:1a:13:72:b0:3a:82:a2:52:9c:4e:
02:8e:28:f8:96:39:6d:bb:6d:0b:fa:d0:fc:74:09:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:2A:E9:FE:AE:29:3C:A4:62:14:FB:16:E5:21:D5:71:37:2E:70
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cd:b9:f2:81:bb:37:68:a6:ad:e3:0e:0d:f7:c1:68:25:69:
9f:3b:84:fa:45:af:3a:29:5c:88:b3:d8:9f:88:01:1b:c4:87:
d4:83:63:34:05:a2:1e:75:c8:6e:dd:82:57:30:b8:b6:00:e1:
21:90:61:f7:ac:5c:45:7b:f0:81:18:f6:3c:29:a1:99:08:50:
cf:d6:b2:8f:e6:1e:29:87:85:c2:cd:9f:54:8b:58:44:bf:39:
c5:ba:a5:8d:49:1a:ec:3f:d4:06:5f:06:52:95:b8:63:ba:57:
62:1f:53:af:1f:b3:df:cd:a6:cb:eb:52:d9:a7:31:f1:3c:32:
81:4b:56:c4:eb:9f:36:a7:c5:b3:e6:ef:24:b9:ac:df:b2:13:
0e:d7:b9:48:a0:c5:14:83:55:1d:ff:13:ba:a5:a6:9f:55:9f:
11:e3:45:db:73:62:00:57:f8:46:51:d3:6d:52:3f:03:39:74:
51:ad:85:e6:f3:05:fb:03:77:de:5a:63:f6:37:19:5c:97:34:
ce:83:81:fb:ba:6f:71:64:1e:ba:ef:ea:bd:e9:c8:e3:53:22:
70:32:46:8e:ae:2f:d8:3e:ed:ee:4d:b1:a4:7a:1f:f1:03:e4:
69:e5:73:a1:e1:ba:2e:7b:48:47:9f:ca:1c:26:67:86:73:15:
b0:d6:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:31 2025 by rpki-client