Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: LAnk2OZa2Ag3E9BjLKza7bdmRp+fvAv54eB8uGQXPpM=
Subject key identifier: 90:3B:91:A8:F3:83:F1:08:DB:11:61:BD:3E:DE:16:72:DB:B5:88:F7
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0198D4E086AB3A9DD37826BF899E29A7BC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: X+VQWJULoD1g54HXg/CXcLw4cgD+739EDV6rcmyhZCM=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:86:ab:3a:9d:d3:78:26:bf:89:9e:29:a7:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=903b91a8f383f108db1161bd3ede1672dbb588f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:0c:36:6d:bf:73:b1:22:ba:b0:7f:09:51:
ce:23:43:42:46:49:81:45:a7:d6:cf:44:a1:4b:a6:
e7:e6:99:ad:77:ce:49:af:11:f2:89:c1:eb:ff:f1:
81:e6:99:9e:91:5c:8a:e1:3e:c2:61:f1:2e:8c:be:
a3:dd:1e:03:b5:92:c2:1d:4c:26:3e:ee:d8:db:88:
ad:0e:52:ec:1b:69:56:d4:e5:90:9f:13:99:cd:6f:
83:23:74:56:43:aa:d9:eb:74:d0:7f:47:a5:44:ce:
0f:d3:18:19:25:29:44:41:e2:21:68:b1:c8:82:94:
e7:88:97:28:d5:df:a0:ab:35:d1:c1:28:3f:74:f7:
ab:73:d1:e2:44:69:47:36:8c:1e:ba:6a:f7:ee:2d:
87:2f:0e:49:18:14:38:dc:9d:15:a9:55:52:b0:b6:
db:20:42:c1:cf:34:78:0a:c8:1a:29:8b:ae:0c:47:
d6:7b:03:12:d7:db:a9:24:77:c3:96:af:0b:ef:ee:
92:80:dd:8f:2b:c4:66:9c:82:67:c2:fb:c9:53:8b:
09:b8:7d:1e:08:3e:11:a9:a8:d6:4f:25:8c:d4:22:
c7:d9:11:f7:c2:f7:66:2b:8c:e9:19:ee:0f:12:bc:
05:e9:38:ca:05:e9:b0:5b:37:79:35:7e:de:26:17:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:91:A8:F3:83:F1:08:DB:11:61:BD:3E:DE:16:72:DB:B5:88:F7
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:10:40:7f:18:b6:5b:8d:6b:22:6b:21:6f:dc:a4:45:14:
60:d0:96:69:c8:b0:ca:95:e3:7a:d3:cf:61:db:2f:ec:6f:ff:
db:55:96:a2:88:07:82:a2:62:68:98:78:d0:a8:7d:c8:d7:4f:
5d:4e:b1:41:77:2b:1d:64:ae:6e:75:08:9b:03:12:c1:02:1e:
8f:cc:89:36:fe:17:5e:38:e6:58:82:b9:72:cf:54:79:20:dd:
f9:8b:57:22:7e:dd:5a:7a:54:f3:2c:d5:74:56:2f:eb:a2:8e:
c6:a6:db:50:5f:61:7c:c9:f6:c6:1e:c5:6c:6a:ba:20:44:3a:
1c:d9:e6:45:a6:11:f1:c8:01:3f:4f:7e:8b:ac:e1:ae:25:45:
3c:9b:f7:55:b0:1b:35:39:a3:4f:20:17:2e:67:74:f5:4a:da:
b5:51:f9:71:03:4f:02:81:30:35:53:4d:ac:e5:94:a8:8b:60:
dc:d0:e9:67:e1:d9:a6:01:92:27:22:3e:9b:60:37:12:4a:3e:
cf:d8:dc:af:20:a6:ab:7d:7a:d3:72:9b:a3:19:4c:f4:22:fb:
20:14:2d:3f:eb:6e:db:38:77:c5:d9:be:44:57:6d:8e:b9:6e:
85:b2:d9:e4:3a:7f:87:88:a2:dc:45:13:2b:eb:40:91:99:a5:
fc:13:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:03 2025 by rpki-client