Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: i/gYZGB1PxrVfEjb+N+cAiIeHHJiSDxnZZPV2HE6cOY=
Subject key identifier: E6:F4:F2:C1:23:E3:C4:9E:D0:CE:D7:C5:0E:31:99:62:36:C6:50:6A
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0197B70E7E7DF36675D9EDF88A3D21A3F6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: ACINTniCwgp77LwAQbAUE1Z/HMrPd/KR5V5eNBpEJWM=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7e:7d:f3:66:75:d9:ed:f8:8a:3d:21:a3:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=e6f4f2c123e3c49ed0ced7c50e31996236c6506a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:be:00:2d:46:0b:63:e3:4a:2a:48:86:6b:
ec:e0:e8:d7:01:10:13:65:08:db:cf:48:92:4a:37:
21:79:76:e7:b0:4e:67:7d:13:78:fb:63:33:08:e1:
48:53:60:79:bd:d6:b1:81:71:68:cb:82:d0:b0:d1:
57:e1:06:22:a2:e4:44:74:11:7f:ac:0c:d1:d8:6d:
49:b6:44:04:9f:d1:97:d5:5c:96:45:12:76:2e:4e:
a0:5f:db:39:bf:5d:56:f0:9f:84:b8:22:ec:e3:05:
99:b2:8a:26:af:9c:1b:ab:36:a7:4e:09:c7:85:b6:
0a:03:eb:a9:cf:86:3c:c5:36:ef:78:f2:cb:d2:8a:
96:3e:bf:6b:c9:7e:30:70:91:96:d1:db:1e:2b:e7:
cd:6b:d5:94:17:e2:39:f6:78:70:bf:60:05:14:a6:
bd:c7:3c:f5:be:9e:46:40:a0:ef:a8:94:d5:79:b6:
83:02:11:92:58:47:b1:ba:7d:1b:ff:bb:a6:aa:b1:
9b:b1:0c:3d:ce:d8:86:54:5b:44:b4:5d:24:d4:18:
4c:fc:48:3d:02:24:d3:4b:33:7b:29:1b:e1:57:1e:
95:7a:1d:ee:3e:88:37:ae:c7:7f:56:b2:8d:f9:a4:
58:46:ba:c2:8f:76:fe:ec:3b:07:b6:1b:ae:e5:10:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:F2:C1:23:E3:C4:9E:D0:CE:D7:C5:0E:31:99:62:36:C6:50:6A
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7d:10:44:66:aa:96:2d:e0:0c:87:d1:9f:ed:95:dd:ab:b5:
66:e1:23:e7:1d:66:72:94:bf:ee:10:4c:70:1c:04:52:76:d0:
5a:db:d4:66:2e:8f:6d:18:b6:a1:6b:e5:41:30:06:c7:9c:cf:
3c:f0:d0:65:76:b9:03:7b:6d:52:a9:16:4b:3e:8e:96:12:54:
75:7f:50:81:af:83:e7:68:ed:a6:93:39:92:31:54:0f:9b:74:
30:9c:92:53:db:26:2d:cf:66:55:35:e7:c3:66:f3:bb:a0:c4:
11:90:14:a2:59:2c:80:d0:8d:72:e7:c4:6d:a6:80:be:a3:f2:
c5:a8:ff:01:c4:2a:28:28:6f:e3:1b:ed:73:83:71:3f:0c:13:
35:7d:ff:f8:68:93:c3:6c:00:91:b9:f3:90:79:cf:f1:ff:11:
69:e1:c7:df:80:4c:97:c0:6a:dd:49:0a:f2:4b:aa:0a:98:b6:
e6:40:d0:cc:55:0f:24:a2:fa:43:16:7a:69:24:d8:bf:cc:02:
74:21:f0:0f:81:8f:c2:d6:8c:fa:80:ae:8a:bc:3e:b1:8c:39:
14:ea:e7:38:b8:c5:6a:57:ed:15:c2:fa:4b:94:97:af:b1:82:
f0:14:a8:98:dc:f5:cd:01:0c:41:19:11:9b:03:6f:4a:15:97:
ad:b0:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:59 2025 by rpki-client