Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: R0wlf7JTl19fI+eJ4ZtbVyNeAcSRuYTAYGYuTxMBI94=
Subject key identifier: 85:B3:3D:C9:FC:93:E2:4C:52:9C:7C:38:33:74:B0:BB:E2:7A:AA:B3
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 0197B7EA3E3F0C2A074E58A318B5EA5E5428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: Sr49p4/UaKmM3GzOnTBHdIIScod+49qLtqAjMxRUHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3e:3f:0c:2a:07:4e:58:a3:18:b5:ea:5e:54:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=85b33dc9fc93e24c529c7c383374b0bbe27aaab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:1d:c2:ba:60:22:2b:00:21:8f:47:5c:f5:
27:39:38:ca:60:de:01:d6:b5:a0:c1:3d:7e:1e:9f:
a2:e1:2b:e1:5c:f6:71:1a:16:8a:53:cb:9b:08:85:
9e:af:dc:20:a7:d5:ba:11:66:cd:11:ac:56:ab:59:
4d:d9:de:9e:83:54:6c:78:5b:ab:82:bb:50:c5:f9:
d2:ac:8c:25:f1:c7:29:cf:e3:39:46:a0:a4:37:c2:
1e:61:95:86:ba:ce:31:42:f8:dc:ee:2c:e6:3f:8f:
5b:dd:95:13:39:07:33:63:70:d9:b6:de:c3:68:1e:
ab:61:c6:ea:e2:e8:9b:20:a1:51:3b:fe:19:84:d5:
04:6e:4d:6d:38:20:06:46:2b:c0:2d:6d:d7:e7:d3:
0a:84:0c:cd:bf:0e:0a:80:45:d9:60:34:37:b4:87:
b4:30:da:3d:c9:d0:16:47:d0:80:9a:0c:23:3b:37:
64:e1:99:90:7f:88:4e:af:d4:ca:d4:3d:7e:b4:5c:
36:64:8c:50:af:67:f1:34:37:3b:5d:fc:bd:6a:97:
6f:4f:b1:d3:70:8f:2c:f7:6a:95:34:42:4d:9e:de:
0b:07:e0:58:a5:1e:2a:db:f8:2d:a9:48:59:87:16:
d8:b9:c4:94:46:7f:c3:bd:f6:02:d7:68:17:11:dc:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:3D:C9:FC:93:E2:4C:52:9C:7C:38:33:74:B0:BB:E2:7A:AA:B3
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1f:c4:f1:1f:5f:a8:10:7c:c8:86:88:5e:58:f5:05:69:ec:
3e:76:aa:79:1c:28:b2:2c:40:d8:eb:f9:de:69:c5:0e:a9:5f:
b3:89:b4:99:47:91:d9:39:b7:33:0e:62:db:4f:51:09:63:0a:
e9:78:0f:3b:a7:0b:3f:5a:e2:b2:b3:47:c0:34:57:5b:e8:5e:
19:eb:47:a0:80:57:6f:44:c6:08:a4:e5:4c:09:61:0f:6e:24:
6a:15:ae:57:f1:9f:f6:40:da:be:84:44:72:29:3d:9c:44:f1:
b0:89:12:ca:c2:11:f3:b2:57:54:55:bd:6f:48:95:3d:03:91:
3c:13:fc:24:35:8d:57:10:ec:7f:b4:27:36:17:99:4d:da:34:
b4:c1:df:eb:f6:06:5a:22:30:cd:72:06:d4:5e:2e:ef:9b:66:
a0:48:3a:cf:fa:f1:ce:72:7f:8a:5b:03:5f:57:4e:08:89:36:
a1:2e:c1:84:3e:8c:22:16:ec:e6:db:c7:37:36:b4:4a:d2:b2:
32:4b:35:6d:7b:d5:22:eb:f6:19:09:e0:eb:0f:33:ab:f9:31:
73:4d:1e:67:bf:4e:3f:bb:59:d9:cf:e6:e6:f8:0a:63:11:9d:
ad:92:1d:7b:72:0c:c0:ba:ac:53:fc:bd:75:25:cc:06:0d:d7:
50:c6:08:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36j4/DCoHTlijGLXqXlQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl
OWMzZmYwHhcNMjUwNjI4MTkwMTExWhcNMjUwNjI5MTkwMTExWjAzMTEwLwYDVQQD
Eyg4NWIzM2RjOWZjOTNlMjRjNTI5YzdjMzgzMzc0YjBiYmUyN2FhYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5IdwrpgIisAIY9HXPUnOTjKYN4B
1rWgwT1+Hp+i4SvhXPZxGhaKU8ubCIWer9wgp9W6EWbNEaxWq1lN2d6eg1RseFur
grtQxfnSrIwl8ccpz+M5RqCkN8IeYZWGus4xQvjc7izmP49b3ZUTOQczY3DZtt7D
aB6rYcbq4uibIKFRO/4ZhNUEbk1tOCAGRivALW3X59MKhAzNvw4KgEXZYDQ3tIe0
MNo9ydAWR9CAmgwjOzdk4ZmQf4hOr9TK1D1+tFw2ZIxQr2fxNDc7Xfy9apdvT7HT
cI8s92qVNEJNnt4LB+BYpR4q2/gtqUhZhxbYucSURn/DvfYC12gXEdxkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWzPcn8k+JMUpx8ODN0sLvieqqzMB8GA1UdIwQY
MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt
YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1
LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx/E8R9f
qBB8yIaIXlj1BWnsPnaqeRwosixA2Ov53mnFDqlfs4m0mUeR2Tm3Mw5i209RCWMK
6XgPO6cLP1risrNHwDRXW+heGetHoIBXb0TGCKTlTAlhD24kahWuV/Gf9kDavoRE
cik9nETxsIkSysIR87JXVFW9b0iVPQORPBP8JDWNVxDsf7QnNheZTdo0tMHf6/YG
WiIwzXIG1F4u75tmoEg6z/rxznJ/ilsDX1dOCIk2oS7BhD6MIhbs5tvHNza0StKy
Mks1bXvVIuv2GQng6w8zq/kxc00eZ79OP7tZ2c/m5vgKYxGdrZIde3IMwLqsU/y9
dSXMBg3XUMYIvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:46 2025 by rpki-client