Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: Hty5YKLQ8qUZKESmuagXfcOG8+h8KEmubN18uOXRC04=
Subject key identifier: 11:9F:C7:0F:9B:00:AD:2D:26:AE:E4:82:79:9C:73:6E:2A:1F:C3:2A
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0198D473E8A50AE44D7932EEE128180DEBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1352
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: n5G+a/SBEVPseBs1kUdeZJagAyb2kxxsIS8oR9gsC0Y=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e8:a5:0a:e4:4d:79:32:ee:e1:28:18:0d:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=119fc70f9b00ad2d26aee482799c736e2a1fc32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:9a:fb:d6:9c:7b:52:d6:81:f3:a8:25:7f:
85:eb:ae:a3:b6:40:fb:35:3b:c1:74:f4:60:1c:b5:
f4:ec:f8:d7:70:15:50:3f:29:96:c7:b7:9c:d3:b6:
69:6b:f7:8f:40:e6:2b:79:af:87:a0:82:b8:75:db:
73:44:60:bf:69:5e:a8:42:d5:ce:92:2d:d4:b3:60:
b8:45:5d:8f:18:0a:37:9e:05:11:70:14:73:e9:15:
7d:c6:ad:62:fc:cd:9c:77:00:6f:61:98:5c:96:60:
6f:fa:02:02:59:b0:95:7a:cc:e7:01:66:bf:db:0f:
5b:14:0e:d5:5c:ee:8b:d0:b6:cd:83:d3:46:a6:03:
dc:2b:5c:f2:74:13:e1:b2:c5:10:62:fd:3d:02:1e:
58:e7:16:cb:d7:f0:2d:22:8d:af:54:fd:95:0c:b0:
94:9b:f9:d3:bc:cc:74:c2:da:1f:b0:9d:a6:36:c8:
5a:ac:d7:69:0c:67:75:73:af:c6:30:53:52:2e:b5:
37:cb:9a:57:d1:22:ad:36:e4:1f:51:d7:d1:78:dc:
af:ff:0e:ea:ef:71:ab:2a:21:7e:73:c0:87:b4:71:
c0:d2:7c:a9:ee:3a:de:3a:74:b0:11:f4:8c:a1:75:
59:bb:65:69:1c:66:db:fa:18:b4:29:a3:ce:c8:4d:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:C7:0F:9B:00:AD:2D:26:AE:E4:82:79:9C:73:6E:2A:1F:C3:2A
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:10:e5:10:8d:ff:c0:84:f7:6f:47:bc:85:dd:0b:1e:03:
8a:e9:52:29:6d:83:4c:c5:15:24:c4:cf:d4:6f:41:e7:78:f6:
94:eb:91:07:93:09:ed:cc:f8:d5:b0:79:63:c7:93:dc:90:36:
fb:47:7c:c8:fd:b8:94:22:c6:6c:17:5b:ac:29:1e:ed:98:c0:
a3:f7:a9:ca:63:39:3e:8d:48:54:12:d4:e4:37:cf:05:3c:ae:
03:a6:11:ad:48:83:0a:7e:d7:0a:30:52:09:f1:eb:2d:01:a8:
0b:14:60:f1:20:ba:98:a4:25:22:fd:b3:81:1d:e0:47:2b:ad:
db:bc:52:3a:70:76:f7:e4:17:6a:21:3c:68:1b:7b:c3:b9:eb:
ac:89:0d:32:25:78:8c:55:c4:fa:80:71:c1:7a:b8:72:f4:3f:
87:f5:bc:34:c4:9a:57:72:e6:c2:cb:a5:52:38:44:0b:84:ff:
5b:30:d1:53:b1:bb:84:2c:fe:58:62:43:0e:9b:05:b3:97:dd:
36:17:da:e4:ba:4a:07:b6:cc:3f:cc:f9:bb:ab:66:c5:9c:67:
e9:6e:2a:89:95:7f:0f:f3:09:ab:24:00:08:db:f2:c4:f3:a3:
f6:39:0e:8e:ba:10:2a:e1:8d:18:10:31:79:a2:5e:58:5b:53:
79:87:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:02 2025 by rpki-client