Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 3pnkwh3c4rTL9aaf+rxPW6T+NVCFCARxJO/eVKBaOVA=
Subject key identifier: 8A:87:5A:A0:7F:97:87:20:01:05:C7:73:4D:63:EB:39:D0:40:7F:D5
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 0197B5C517F32F5C3B0DEF5204B36F06B923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 09:01:22 +0000
Manifest this update: Sat 28 Jun 2025 09:01:22 +0000
Manifest next update: Sun 29 Jun 2025 09:01:22 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: MK7Mk0NITsQZ2fgsnuYVHyvacmoJjolXLL48Hv0PIuQ=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:17:f3:2f:5c:3b:0d:ef:52:04:b3:6f:06:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jun 28 09:01:22 2025 GMT
Not After : Jun 29 09:01:22 2025 GMT
Subject: CN=8a875aa07f9787200105c7734d63eb39d0407fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:21:1f:d4:24:2f:b9:ce:03:cd:c8:e8:1b:
ef:5d:cc:d7:0f:49:5d:9b:6f:76:2e:07:28:d5:d8:
af:ad:6c:d2:5d:14:43:19:72:d3:c3:e1:fc:24:84:
7b:da:e9:d3:2c:4c:5e:cd:65:f2:2d:29:2f:3c:37:
e8:61:5f:82:05:a1:84:11:a9:37:c9:ed:09:38:a6:
0c:a1:01:18:68:8b:f0:43:8c:11:4b:06:14:cc:41:
d5:3c:a3:d3:70:c1:df:d5:8b:bf:61:9e:29:c4:3e:
46:16:06:cc:d1:3f:e0:f2:72:68:53:a5:62:4d:5e:
0c:aa:7c:10:52:d1:2f:f7:a4:5c:f7:fe:c4:6d:8b:
6f:d1:3a:0a:47:23:be:e0:b9:b5:a0:c8:65:8c:ee:
96:00:93:18:11:4d:9d:a8:ac:67:3e:ed:a9:26:ed:
5b:56:5c:d5:04:aa:95:ce:ee:6e:38:9f:41:3e:84:
ca:5c:dd:cc:aa:15:63:01:56:1b:f7:50:b4:ef:85:
73:38:7f:48:db:37:55:1b:97:20:d9:0e:6e:23:c6:
27:4e:a2:b3:fc:0a:13:5e:64:f4:66:29:5e:bf:1a:
dd:69:b7:81:6a:0e:74:41:fa:b3:7e:45:e4:86:84:
50:5b:0f:fd:23:f5:87:37:c4:8c:3d:52:c5:82:50:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:87:5A:A0:7F:97:87:20:01:05:C7:73:4D:63:EB:39:D0:40:7F:D5
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:ef:0b:ba:94:e2:f8:c4:ed:68:22:13:c7:cf:ba:19:2c:
93:19:2f:a1:72:89:02:24:d1:36:53:82:d4:21:14:21:5f:83:
08:de:2a:31:d8:4d:68:f1:5d:19:73:8c:cc:1b:0b:88:74:8c:
0b:8a:58:00:91:fe:61:a1:79:4a:e7:cb:a4:c6:98:ef:8c:92:
a4:49:b3:57:64:ec:6f:05:58:1f:04:0b:b4:ca:47:2d:8d:e6:
26:a2:fc:a3:f1:be:c5:52:37:d3:8e:81:f4:11:84:fc:b2:c7:
69:d8:e2:54:35:1a:d9:88:d7:a2:d1:76:7d:b6:e8:a4:68:66:
d7:2b:a7:de:d2:7f:87:06:6b:e0:59:86:2d:9f:c4:f4:19:b2:
0d:6d:b8:fe:17:35:35:6b:98:08:11:44:b5:61:9e:fb:39:d4:
49:f7:16:b2:4a:9e:00:46:90:22:c2:da:b1:ed:57:6d:08:e9:
82:b7:bd:2d:9b:b6:53:f0:50:f4:96:e2:b7:59:c5:3d:bd:0f:
78:c3:61:93:36:c3:3a:44:44:1b:31:29:d5:dc:42:49:fd:95:
1f:c6:59:18:91:9b:42:64:04:80:e5:7b:cc:35:b6:fe:f8:28:
2c:6a:16:3a:5f:aa:e4:fb:c4:d6:c2:2f:fc:e1:61:c3:cd:0f:
cf:ec:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:25 2025 by rpki-client