Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: pDwWM00VH/w4UAVB/Yrf7JJNrxwUvuV0po9PcDnTk4g=
Subject key identifier: D9:3E:F0:2F:A0:D9:F4:6B:F9:65:7C:31:A8:8D:FE:D1:CB:14:01:C5
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 0197B6A1FC93F3F1739A08BD14AC681E4A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: QEa3yTtPQxdESmSsXFf+BgoHIHPcBrQfPgjk2m5jJcY=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fc:93:f3:f1:73:9a:08:bd:14:ac:68:1e:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=d93ef02fa0d9f46bf9657c31a88dfed1cb1401c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:0a:25:9c:75:ee:97:0c:1e:a8:9a:89:c7:
6b:8b:9e:d0:16:98:78:a2:c0:e5:5b:79:5a:ad:1d:
f8:84:56:1a:6c:bc:4f:e5:fb:3a:65:7f:c8:8b:03:
68:4a:5f:79:9e:ac:0d:51:80:b1:5c:0e:80:82:e6:
25:7e:7a:66:00:df:d5:d6:f9:f8:06:54:b7:05:9f:
e4:cf:c1:8f:44:ab:8e:00:0f:af:de:21:28:eb:09:
c4:38:3e:c9:f6:2e:54:28:a5:f0:9f:de:7b:06:12:
f7:6a:2c:72:7c:f5:83:40:44:59:5b:89:9e:0c:5f:
1b:d4:66:f8:9e:0f:ef:ab:96:60:7e:1f:ab:b1:a0:
60:a9:c3:21:f7:da:ff:b9:20:12:31:0b:ae:38:d2:
80:07:c5:54:60:8c:0a:c9:ff:83:35:70:2e:be:4a:
8b:88:fe:f4:12:84:6b:f2:8c:67:21:50:30:2d:c4:
b9:e6:a7:ce:12:2e:de:6e:bb:8d:39:cb:ad:be:41:
1b:c2:91:08:9d:fb:ce:41:60:c7:05:71:32:d1:c1:
c6:72:f1:b7:c1:6a:a7:a2:5d:25:01:1f:fd:20:f1:
fb:c0:ee:a4:e3:98:b9:7e:c8:6c:1c:c5:f2:62:33:
22:c4:3a:86:12:30:4c:cc:fc:92:d3:22:2f:33:29:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:F0:2F:A0:D9:F4:6B:F9:65:7C:31:A8:8D:FE:D1:CB:14:01:C5
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:f9:c3:1f:96:81:c7:e9:e4:0c:6d:75:04:b1:1f:a0:69:
c4:ab:83:1d:81:0d:ad:fc:97:85:a2:cf:01:ee:76:e1:21:5a:
55:e7:ba:3a:19:17:5c:39:bf:34:2c:25:eb:df:22:fc:8b:59:
01:7c:de:37:46:73:da:5b:6b:a7:3c:05:00:b6:3f:45:ec:91:
ca:d5:fe:75:36:d6:dc:fb:b0:4c:c5:02:88:5d:aa:8f:57:fb:
c3:83:7b:f8:72:41:94:87:88:a1:ac:5e:90:5a:1e:36:88:88:
75:5e:d2:f7:70:b6:bf:55:d0:ed:bc:ea:5c:6f:08:b6:a3:62:
bc:82:35:81:c8:93:cd:b8:5d:11:06:35:b4:38:f7:aa:d4:be:
bc:f0:36:f8:03:8d:28:4f:c0:84:fb:d9:1f:c0:24:46:71:3b:
95:a4:ad:ce:03:bb:c0:eb:6e:94:27:73:96:6b:33:aa:d5:08:
5d:44:17:03:c5:54:9a:23:3b:59:54:0f:bd:5c:68:ca:4f:c9:
27:ea:01:24:42:1b:cd:4d:3f:79:e1:84:85:b4:37:10:c5:1c:
d7:c4:22:fb:b0:76:dc:91:97:4f:1a:e3:99:04:43:58:af:7a:
37:98:bc:a2:be:0e:0d:72:64:f3:d8:ba:73:1d:c8:c4:da:01:
de:d9:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:14 2025 by rpki-client