Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: knl4BM89WiihEL2BcvOj3su7N4Vk1amnAo+gGj+RsiQ=
Subject key identifier: 4C:BF:B1:13:B8:B7:18:ED:1A:58:3C:8A:C4:5A:12:5A:2D:37:35:B6
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0198D69848D87A67DD79D2E3F0DAFF7366CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0EBE
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: i+/edWGyjg5ftRrA32nXA+YPHMQ8hP+4ZZdTytSHQ8E=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=)
4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:48:d8:7a:67:dd:79:d2:e3:f0:da:ff:73:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=4cbfb113b8b718ed1a583c8ac45a125a2d3735b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:46:13:3a:d9:ae:d4:9c:9d:d3:5f:41:21:
f0:9b:bf:d1:e9:38:89:14:a2:41:b1:bf:6b:63:18:
a4:5d:eb:25:91:c2:f9:96:14:df:04:c0:66:23:5e:
24:c2:38:3e:d0:52:93:0a:5b:a4:89:8b:d4:e2:ac:
42:04:72:65:6c:59:cd:e6:f0:c2:0b:4f:2f:0d:08:
ca:72:73:7c:e3:8c:fc:86:80:a3:2f:8b:47:71:57:
2a:96:d3:50:3e:53:c2:ff:0c:bd:16:4e:70:8a:f4:
a7:74:24:79:3e:32:73:0b:ce:57:7e:9f:9f:57:52:
40:27:82:e3:86:c3:c2:7c:cc:42:8f:ba:dc:41:0b:
0f:fd:75:d6:b3:95:75:ae:f8:24:1e:b5:ec:73:7a:
32:43:21:ad:ca:4f:78:72:ec:a4:5f:a3:4c:1c:03:
90:53:77:69:38:73:57:98:90:a7:42:58:89:7e:28:
88:be:0c:21:af:4d:13:1a:35:6d:88:62:b6:81:41:
66:4e:3a:81:69:8f:51:17:96:53:46:2d:89:26:a6:
be:a1:43:12:5d:29:75:c1:8d:18:f4:fb:69:56:95:
d5:53:44:f3:2f:72:f0:08:f2:bb:b8:99:0b:1b:5c:
ea:b1:f5:71:26:30:5c:60:9e:dd:98:61:ac:9e:46:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:B1:13:B8:B7:18:ED:1A:58:3C:8A:C4:5A:12:5A:2D:37:35:B6
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:54:1f:0b:46:2b:aa:d9:29:02:ba:e3:61:cb:34:d7:95:8a:
37:11:a9:a3:0b:61:e1:ac:34:72:6e:56:3f:29:50:8d:25:70:
bb:30:9f:96:d6:5f:7e:e6:2b:9f:8e:ba:9a:3f:23:11:df:be:
b8:5f:ac:ea:b6:27:0f:df:f8:f5:65:6c:12:56:ac:3a:fb:dc:
e1:64:08:3a:a6:74:cc:61:55:df:8b:a9:67:a0:d8:12:aa:9b:
27:a0:b8:5a:50:f7:42:a9:29:da:9a:46:7c:67:be:e4:c3:ec:
6a:27:6c:eb:36:e6:1c:d7:d2:35:0a:b1:30:c6:c8:4d:00:e4:
36:1c:5d:e0:eb:41:51:d3:ea:10:6e:47:f4:bf:07:ee:dd:80:
da:b3:7b:ee:df:9b:bb:a2:78:fa:29:14:c5:f9:80:7c:e6:ab:
cb:b4:5c:34:6d:1f:71:76:a7:dd:31:a5:f6:32:1a:70:c8:08:
55:ba:f9:c8:52:4c:97:d1:cf:a8:a8:e8:9a:bc:1a:b8:5f:ca:
6a:41:a5:20:c4:b1:59:e2:df:fd:65:4d:54:55:4f:56:f2:a2:
6e:5f:10:53:41:9b:bb:1d:b5:4b:30:ad:e9:31:f6:56:46:62:
1c:ff:70:29:93:4d:c4:cb:a0:4f:5f:5d:97:ed:30:1d:02:74:
0a:6e:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:02 2025 by rpki-client