Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: Dvk3WbwrgO3P+2NEWE4OBK8zXUL3RYO0J5gYKeMdNrY=
Subject key identifier: A3:39:70:D9:0D:01:3C:5A:AD:AA:35:08:D2:3F:29:1B:AC:91:54:DD
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0197C493806D6BBDC0FA760EE1E9136E685D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 06:01:30 +0000
Manifest this update: Tue 01 Jul 2025 06:01:30 +0000
Manifest next update: Wed 02 Jul 2025 06:01:30 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: Px/r06HZZXWpy4hWrtDy/XqFr4gd81QgdVtIS+fj8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:80:6d:6b:bd:c0:fa:76:0e:e1:e9:13:6e:68:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jul 1 06:01:30 2025 GMT
Not After : Jul 2 06:01:30 2025 GMT
Subject: CN=a33970d90d013c5aadaa3508d23f291bac9154dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:00:23:89:0c:32:a4:c8:8e:8d:58:74:f7:
6e:ef:50:ca:67:99:4f:8d:91:52:3e:29:81:5b:ba:
43:03:36:7a:15:0d:c7:87:25:82:38:4a:8c:79:49:
d0:50:0e:c3:d6:67:e2:b4:96:39:36:0e:9c:1d:f8:
d2:78:81:d9:6b:a4:8e:b4:53:89:d3:18:1f:dd:d9:
5f:e1:cd:2c:b1:6c:b5:cc:e9:18:b4:cd:01:73:dc:
d3:00:e6:6f:b7:e5:8d:19:9d:53:33:06:f4:14:be:
54:94:f4:63:aa:1b:51:9b:17:cb:31:49:5f:c9:87:
66:2e:33:b3:8a:89:9d:d6:ac:a8:62:02:bf:60:37:
52:04:c3:c0:32:e5:63:6d:70:64:b6:bb:a2:91:e7:
66:91:a1:ce:0f:71:cf:8b:3c:ce:82:37:0a:8f:d3:
26:76:86:ad:91:fc:0d:b9:a0:fc:03:57:67:75:71:
6c:40:8c:72:d9:bf:c2:6a:de:80:ee:e7:08:3b:07:
b9:46:cc:d5:38:f2:91:b7:30:43:85:47:c2:a6:53:
87:dc:24:c8:e8:36:61:09:04:10:fb:6d:4e:c3:46:
56:04:bf:be:80:c1:58:c0:3f:94:b5:89:88:13:e1:
fc:6a:7a:f0:80:b7:e8:6d:37:10:6a:59:95:18:c1:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:70:D9:0D:01:3C:5A:AD:AA:35:08:D2:3F:29:1B:AC:91:54:DD
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:f2:72:1d:da:f8:05:ea:39:c3:42:b8:ce:f0:24:46:06:
a1:e8:5b:57:22:3f:a3:46:22:56:13:fa:12:92:90:1b:1b:92:
8e:e7:25:59:b7:d3:8d:e9:68:20:23:ae:63:d0:a6:19:63:89:
50:ca:b4:5b:2a:9c:08:40:ab:a9:d4:de:3e:ca:fb:ea:16:cc:
58:49:1c:48:27:23:f7:3f:58:e7:96:f6:6c:c4:08:80:97:00:
89:50:f2:ed:95:9b:ff:34:29:8b:01:0d:50:09:7a:d4:0f:40:
c3:1a:f0:1d:2d:c1:34:ea:e8:85:da:a2:76:74:4a:f0:60:ce:
52:13:e7:66:1b:f9:52:a9:f8:8a:e7:dd:8b:ff:be:1f:80:49:
53:8e:da:df:13:f9:67:4f:0e:b8:af:ed:c3:a6:fb:24:c3:0d:
6b:89:0d:aa:5c:f5:ba:9e:04:57:22:03:0c:d9:2a:15:8d:f3:
8b:c4:0a:a1:30:0f:db:69:a0:33:dd:70:4a:b8:18:d4:33:e3:
ca:3b:89:85:2c:f6:c5:4a:9d:99:d9:a1:7a:5c:44:45:d9:76:
58:e9:fc:40:19:0a:ad:fb:c0:e0:6f:93:9c:73:94:8a:15:06:
b2:31:52:97:22:e4:eb:b8:45:b7:cb:ee:35:ac:3d:72:d4:6d:
76:84:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:06:44 2025 by rpki-client