Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: qSv+ToryW8zBPFlp017rHNuUecUBnGRSILtf/VnS5mc=
Subject key identifier: D0:B7:18:43:76:42:54:46:E0:06:01:EC:59:B6:77:52:E1:39:22:6A
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 0197B6D7C0F09E322954A8D109297C661E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1275
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: Io2X5zgnvK1l057NvKvWfs16ettj0rZP8fi/y1a+epY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:f0:9e:32:29:54:a8:d1:09:29:7c:66:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=d0b7184376425446e00601ec59b67752e139226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:af:2f:5a:24:f2:d6:28:52:10:7d:a9:53:
0a:1b:6d:15:90:30:40:8c:89:d1:e8:f4:82:8c:02:
17:69:c5:13:3e:e1:5c:fb:20:1f:d3:5f:98:23:44:
d0:be:0c:ec:93:a9:2d:f4:d0:9c:9d:56:98:a4:14:
a1:04:8e:62:a4:5c:8f:c0:67:ef:c6:90:db:8f:8c:
00:0a:6c:10:e0:cc:c7:47:33:5a:b2:07:4b:a8:73:
7a:90:f2:4f:fd:26:b4:9c:97:20:4a:38:14:57:2f:
55:f5:c3:3f:e0:12:6a:44:7f:d1:7b:1c:df:80:38:
ba:6c:d4:2c:00:8d:6c:90:f9:18:b9:38:f8:2b:8b:
85:0b:69:e1:d1:ab:7a:ad:31:b5:47:8c:e1:82:69:
55:fc:15:1c:6b:ea:73:10:3a:0f:90:47:4f:ed:b4:
c9:c3:86:d4:ab:f7:00:d9:db:b8:8e:f0:44:f6:89:
31:6f:9e:95:bd:8a:90:17:eb:32:7c:0f:6c:14:73:
e5:27:4c:54:1f:2c:49:36:63:de:ae:37:d3:a6:af:
4c:b9:86:57:99:64:dd:c9:7d:e5:48:26:49:e2:bc:
5a:6e:56:4f:df:0f:51:93:78:3d:f4:38:3b:cc:cf:
e4:40:1d:5d:18:13:fd:d9:9a:16:a8:78:57:57:75:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:18:43:76:42:54:46:E0:06:01:EC:59:B6:77:52:E1:39:22:6A
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:15:5d:9a:65:e0:29:64:e3:71:d7:5b:3b:e1:01:70:4e:
31:a9:6e:f8:8d:45:7b:94:79:41:27:f6:06:2c:be:5d:4b:86:
1a:72:00:3e:2a:a0:d4:8b:12:11:8f:29:07:c1:2f:63:77:3b:
82:98:33:6c:ed:1f:f8:fe:51:d9:de:39:88:7e:c7:d5:7f:56:
1c:4e:5a:2a:7b:52:8d:33:30:1a:01:b8:38:eb:3c:a5:a4:89:
de:d9:ac:38:e7:b6:e8:e5:f7:37:96:1c:68:9d:a7:d2:10:a6:
7d:42:d2:cb:10:8e:f1:78:17:ed:0e:f5:d1:72:1d:ae:ad:ca:
f7:03:2d:04:dc:e3:9b:c9:06:45:fd:66:32:d8:c6:d9:7b:35:
31:63:9a:3d:91:fe:35:d6:fd:aa:fb:8c:21:de:9c:27:62:b0:
ec:2f:63:b2:91:ad:13:6c:4e:e1:61:4b:64:c0:70:6f:43:8b:
7d:b2:06:96:0d:d8:95:78:5b:64:d6:e6:7b:38:83:2a:6e:11:
96:26:bc:15:f3:80:09:9c:19:3d:02:69:26:db:5c:cc:72:90:
e2:14:7c:fe:e1:84:79:a4:51:1c:11:da:bd:71:d3:73:6e:92:
4b:c9:e0:4d:88:c4:23:28:0f:3f:18:f1:fe:61:f9:33:36:cf:
31:5a:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client