Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: +I70P7mDVDOtnvmFeTqLxomDK7uuruj/SSlGVCsKGJk=
Subject key identifier: 2A:38:2C:A8:8E:90:AA:C3:3D:46:3B:C4:B3:3B:9C:87:DF:88:63:38
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 0197B77C5D8BC8F248FAD648D7971C2CECF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 14AF
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa (hash: 0oaVoHp1lfPB8j/dx+/RSOuNiG+gm/WhxI6jUsMwbjg=)
2: coXrhUL-UR2XiaXIQUyJNYk5wfw.roa (hash: fVVY4ZVUYIXnBSvc/7AhdMXyEXPtFjAoKMuhQm3m+gQ=)
3: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: Bcj5DmLteJu5bkBnepffX7S5dHMW0UJ8T7oQo5Xklsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5d:8b:c8:f2:48:fa:d6:48:d7:97:1c:2c:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=2a382ca88e90aac33d463bc4b33b9c87df886338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:47:2d:b1:d6:9c:10:f4:3a:2b:8a:7e:e7:
0b:3c:cf:18:4b:ae:95:f1:a7:47:8c:6c:fb:54:26:
16:dc:da:89:29:52:02:3a:2e:ca:9f:72:77:8d:8a:
4e:18:2e:40:51:37:26:26:41:a4:bc:41:b9:c3:bc:
4a:66:17:10:69:41:c2:76:1b:35:e2:19:54:ad:dc:
ee:33:b9:70:26:08:f3:d1:d9:e1:10:74:27:69:85:
cd:0f:6f:a6:58:62:b9:82:8a:ae:6e:f2:79:6c:39:
36:2e:8f:80:0f:36:f3:ed:36:35:2a:e3:f6:8e:71:
f4:fb:ae:3b:91:af:e4:52:73:66:b3:57:11:7b:be:
d8:6c:76:38:cd:c4:28:b0:46:8f:7b:4b:fa:66:1d:
e9:96:b6:47:8c:a3:30:15:44:e7:d6:02:8f:a8:fd:
1a:d6:33:01:5f:69:31:02:6c:d3:25:e1:76:a5:c3:
74:48:9f:88:2e:61:cd:09:ff:50:90:31:9e:c6:ca:
be:5b:e3:77:46:a6:40:d1:0d:0c:8b:c1:1e:4d:06:
d1:84:0e:a8:07:12:1c:ba:30:93:38:03:f1:06:33:
18:c8:06:f5:0c:ae:e1:7c:ae:7d:64:c6:bd:5d:af:
83:16:c7:dd:19:24:e1:a9:a2:be:b1:e5:ac:ab:ee:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:2C:A8:8E:90:AA:C3:3D:46:3B:C4:B3:3B:9C:87:DF:88:63:38
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:fe:c2:a8:c5:5c:dd:44:4f:24:1b:25:68:8d:13:4e:bc:
e0:ca:01:f7:ee:da:6d:84:2d:17:92:22:d6:5e:cc:e3:d8:20:
7a:4a:f6:37:7c:bc:06:28:44:63:8f:3c:b5:a7:61:32:6b:00:
2f:d4:57:94:21:c9:1f:0f:c5:dc:01:ce:8f:f2:fa:a8:17:60:
f3:06:c2:92:9e:35:02:e9:1b:9d:30:76:a5:de:80:fb:26:2f:
4a:21:14:80:00:88:67:10:06:24:76:1b:e9:cc:5a:80:60:1e:
3c:39:54:56:7b:50:c1:47:78:38:99:22:88:35:e8:18:a5:a9:
3a:32:d5:66:89:75:2b:f5:19:cc:09:90:92:0a:90:e0:43:3a:
92:fc:91:71:63:33:ee:4c:7a:b0:e9:67:2d:b8:5b:3e:db:52:
a3:ba:d4:d3:ac:81:ae:32:c5:ab:a9:15:63:6c:07:5d:63:1a:
7d:35:33:6f:77:9a:72:0d:18:7c:96:c5:ee:8f:e6:22:57:36:
18:64:1f:9a:6f:ae:d4:e0:ee:c1:e8:c2:72:21:ce:60:0a:e3:
81:9e:93:22:61:25:e1:a0:53:5c:4c:d1:71:92:8e:da:b7:a5:
c7:d2:81:d0:08:5d:f9:11:bb:ba:f5:be:2b:f8:13:d5:a6:47:
a9:26:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:12 2025 by rpki-client