Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: MNFGHOZEQ2CCFcEB4Qp/IwBNsRiENzRUfyG3O9hn8oc=
Subject key identifier: 23:3C:3D:AA:2E:46:9C:46:51:9A:8D:79:95:9C:27:D9:B9:37:CF:53
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0198D404ABCEDD0BD09F65E27CB835A1F999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0296
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: RmSjmIgTxlO7e2V1a6PHTny/wO2UOkKBF41ibYgJIeI=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ab:ce:dd:0b:d0:9f:65:e2:7c:b8:35:a1:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=233c3daa2e469c46519a8d79959c27d9b937cf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:05:d6:f4:a5:80:9a:6c:98:47:26:8f:42:
18:60:b5:fa:94:96:4c:7b:6b:ec:b2:83:94:3c:18:
48:5e:cf:6f:4b:07:8b:32:d5:ff:32:fb:69:f6:5a:
0c:db:a6:cc:a4:1b:37:30:d3:d0:49:b5:5f:c6:46:
7a:0b:23:4f:40:aa:5f:87:d6:cc:3e:98:61:dc:4c:
32:a0:90:06:06:5e:f2:ef:e4:50:2a:70:87:d0:c9:
99:3a:b4:9c:28:0f:1d:12:14:6e:d6:d9:b7:ef:64:
63:98:77:51:20:a2:96:46:03:ae:ef:91:96:9f:75:
81:d4:4a:2c:ee:20:0c:b1:8d:d1:d2:9c:7c:80:15:
70:83:cd:d1:3e:1c:99:de:c4:d2:ce:20:ef:f8:7c:
6f:0a:b2:c0:16:3a:d6:3d:5c:ec:8d:4a:df:a2:cc:
14:8d:0f:ff:07:ee:bc:4f:98:00:d2:6a:66:8c:2d:
02:c7:f9:dc:0f:b4:87:70:68:59:a2:e3:cc:b3:3a:
57:1f:41:7d:d1:6a:59:69:ee:b1:d5:db:c2:aa:88:
72:0c:55:38:86:ed:94:f3:a0:77:d3:93:29:5d:50:
8a:33:03:ab:12:c2:fa:68:5f:7b:ac:95:86:37:23:
83:cf:d3:2f:95:59:a0:67:76:8e:cb:00:75:38:39:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:3D:AA:2E:46:9C:46:51:9A:8D:79:95:9C:27:D9:B9:37:CF:53
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:76:a0:35:71:25:e2:be:ab:c0:cd:31:07:86:bc:75:f0:
8a:88:da:13:a6:81:2f:89:a2:0b:33:e3:8c:82:a3:cb:c6:c2:
d5:63:32:ee:63:7d:ca:33:5b:8a:44:98:3b:e3:c4:e2:c1:ff:
98:dc:9f:dd:91:5b:71:42:61:39:1c:2f:5c:6b:d5:53:ae:68:
1e:43:49:d7:fb:39:d1:08:af:c1:a0:29:68:68:d3:be:18:ae:
96:55:8e:fc:a0:73:d3:6e:a8:7f:5e:2c:9f:b9:39:14:a5:fc:
48:6a:9b:eb:7f:da:6b:45:ec:f9:b6:fc:be:e7:ee:5c:76:fd:
c4:e7:02:75:63:5b:66:25:a9:77:61:33:fe:cc:f3:77:7c:21:
a9:97:86:3f:a5:83:92:f0:a6:ce:4c:ef:ce:cf:b2:29:23:08:
da:e7:af:7a:e3:24:69:c3:a7:40:23:c1:b3:ab:29:c7:e5:2b:
65:c2:06:ca:74:c1:d1:29:b0:61:95:cc:0f:51:d9:25:8e:c4:
85:f8:56:54:e1:8f:ce:03:6e:35:82:ac:be:2f:9b:f6:96:82:
a2:b2:e0:f9:e2:70:14:2e:70:f5:bf:45:c3:6f:5d:73:de:c0:
39:85:59:8c:70:76:f2:c0:33:05:60:15:79:89:c1:af:0c:ed:
16:5e:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:33 2025 by rpki-client