Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: UlmqqPtHjX0yU6IHIP/TRuXQIQHn9ImWQD0cSff6gRo=
Subject key identifier: DE:B7:E2:23:60:29:9A:42:44:B9:BE:EF:F5:56:97:28:9E:07:CF:6D
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 0197C80259D9085A1C268DEF404613B8DDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 0105
Signing time: Tue 01 Jul 2025 22:01:26 +0000
Manifest this update: Tue 01 Jul 2025 22:01:26 +0000
Manifest next update: Wed 02 Jul 2025 22:01:26 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: r9bYurpTRjiH/dg++EK5C8GR8ohGcyLP1oCz1iOrDm4=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:59:d9:08:5a:1c:26:8d:ef:40:46:13:b8:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Jul 1 22:01:26 2025 GMT
Not After : Jul 2 22:01:26 2025 GMT
Subject: CN=deb7e22360299a4244b9beeff55697289e07cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:37:af:c1:2b:1a:f4:37:f1:99:c5:8d:4a:
28:7c:f4:fa:19:cc:f3:70:52:1d:99:d8:24:3c:09:
b8:a6:4d:45:1c:34:ce:d2:85:0a:f0:4e:5b:17:51:
34:36:31:35:67:d0:8b:2c:6d:a1:dd:35:77:7c:27:
9f:0a:68:75:6e:a7:21:b6:a5:04:9f:3d:96:aa:f1:
26:f4:71:13:f5:7a:b9:dc:6b:6e:6d:2c:bb:fd:50:
13:a2:75:37:96:60:ab:18:f4:56:18:60:7a:c4:0f:
61:bb:6e:99:50:5d:e5:c5:8d:b2:e3:03:bd:d9:95:
c9:2c:f2:7d:f4:b4:1d:2e:2d:65:79:6f:5f:90:72:
dd:1a:b3:09:12:1b:33:54:1f:25:1f:4f:40:93:34:
c2:6a:4f:7a:73:27:28:ac:2a:9e:fa:8d:56:2e:00:
cd:6c:01:5f:05:c0:a3:01:50:4f:5f:04:21:3f:5e:
41:c7:6f:3a:e6:66:e2:bf:c9:89:10:6b:0b:7a:41:
ae:fc:06:df:ac:dc:b7:ee:b6:40:20:68:6b:83:9f:
99:f4:d1:2d:69:b8:06:33:df:3d:24:4e:b6:36:2c:
07:d9:e5:3b:15:77:0b:7d:70:44:05:2f:aa:82:1c:
04:27:5d:97:17:1b:95:71:5d:5b:21:5f:8c:ea:f3:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:E2:23:60:29:9A:42:44:B9:BE:EF:F5:56:97:28:9E:07:CF:6D
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:46:bc:3b:73:af:ce:b3:b9:2d:74:48:20:f9:1a:66:1a:
23:5d:e8:df:f1:9b:26:14:4f:20:53:2d:a7:04:d3:9d:7a:ff:
ad:e7:4f:20:27:fc:54:08:e6:56:68:14:47:2a:40:88:04:0b:
4f:42:bb:d5:50:42:5a:7b:ce:8d:f2:1d:7c:93:66:52:a2:a1:
32:7d:ec:1a:6d:32:49:02:0e:e2:49:b5:a2:d5:9d:46:e0:64:
e9:7e:9c:b2:cf:71:13:76:5b:ff:45:be:b6:21:01:d8:08:18:
19:dd:64:95:66:c3:16:d7:35:7d:b5:60:fc:27:53:80:d8:a9:
82:1a:8d:ff:22:1d:79:c2:6f:d8:36:44:b4:7f:80:55:29:1e:
b9:89:f2:b5:2c:48:ec:fa:ea:b1:43:a6:f6:8e:3c:41:65:7f:
c3:84:f6:57:18:90:b4:98:cb:41:81:27:d9:fb:71:11:da:92:
4d:72:41:d7:18:2d:00:d4:2f:cc:6a:a9:4f:92:48:92:ac:f8:
2f:33:08:2f:00:10:e1:14:06:b0:6b:33:41:87:2a:bf:69:ec:
ed:f8:10:c7:8c:7f:0d:92:2d:5d:6e:cc:9c:3b:c8:00:74:4d:
1d:b4:28:13:09:e6:5b:e6:08:be:43:de:4f:8f:9c:da:3f:d8:
c7:69:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:18:10 2025 by rpki-client