Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: zCeEZJRcgoqlYbFU5X/nUYmaPWtS/EehnCwxgx4fits=
Subject key identifier: 00:89:A9:62:E1:D7:48:F1:93:24:6A:7E:52:21:C5:29:23:04:88:1D
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01982710D4DFB0A7B830E3149A8064EDF5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 15F6
Signing time: Sun 20 Jul 2025 09:01:11 +0000
Manifest this update: Sun 20 Jul 2025 09:01:11 +0000
Manifest next update: Mon 21 Jul 2025 09:01:11 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: MhmWa58mc0AEdLVdu6lXyLnESb//DJwwrvmI1TCjG+A=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:d4:df:b0:a7:b8:30:e3:14:9a:80:64:ed:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jul 20 09:01:11 2025 GMT
Not After : Jul 21 09:01:11 2025 GMT
Subject: CN=0089a962e1d748f193246a7e5221c5292304881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:ea:24:2b:df:a4:dc:52:44:f4:2c:94:c9:
92:c1:bf:77:6b:81:2c:12:5e:8e:64:54:bf:09:aa:
05:a2:84:ab:49:ef:14:78:26:29:89:38:9f:5c:1c:
5c:16:0d:8f:f3:c1:07:ae:8a:af:6e:4e:8a:84:55:
dd:01:5a:f0:76:71:c5:6a:17:59:0c:dc:3e:19:1c:
1f:81:3d:f8:91:8d:6a:41:56:bc:c0:f2:72:c1:0c:
10:b2:6c:79:a4:e9:f3:ee:9b:b1:61:62:4f:39:78:
2f:3e:be:77:9f:11:6c:c6:df:42:14:73:0d:e0:f5:
cb:e2:d4:a4:2a:16:8a:8b:ab:c1:55:0e:3d:50:c1:
1c:91:79:10:ba:6c:5c:42:eb:61:00:ec:82:a6:00:
59:ff:b4:fd:17:b1:56:76:01:2d:91:27:b5:17:ae:
65:4a:d4:e0:6a:6c:0a:d9:a4:68:80:ad:be:a9:66:
e7:c0:b0:18:ca:29:82:4c:9b:96:8c:b6:46:5c:4e:
e3:62:18:9c:71:3d:a7:3a:bb:41:54:be:f5:cd:cd:
66:86:2d:c1:be:08:54:02:8a:6f:51:42:cc:51:80:
85:22:c8:7c:c4:d2:ef:62:51:7f:19:d6:90:39:dc:
49:9c:f8:2d:4f:3c:a5:db:b1:42:4a:24:f4:68:50:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:A9:62:E1:D7:48:F1:93:24:6A:7E:52:21:C5:29:23:04:88:1D
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:d7:ec:b6:a9:58:0e:d5:6c:a2:b5:cd:83:da:71:d5:52:
9e:44:8c:32:a0:55:13:35:e7:06:cb:1f:9c:06:97:ae:00:a3:
ff:c7:83:09:cc:97:bb:f2:cd:26:ea:80:04:b4:29:32:76:59:
d0:7d:f8:a5:01:d9:8b:b0:a5:0d:30:33:41:1c:e2:dc:95:0a:
9e:dc:55:ab:56:6f:8b:73:83:57:4e:da:f1:91:55:2f:4e:37:
1a:8b:69:70:cf:f9:73:31:b9:f3:ab:56:a2:a6:fe:f2:02:72:
c8:a7:af:60:86:b5:e3:7d:28:60:2c:8b:f9:2f:e8:86:20:06:
b5:b1:d2:fa:f9:42:7a:2a:6a:cc:08:20:64:ef:fd:50:49:f3:
bc:b5:a8:5a:94:8f:1a:44:f5:df:f1:88:de:4b:6d:0d:c0:a1:
91:e7:34:12:cc:52:a3:e8:ec:18:52:f7:1e:15:0e:cd:d4:3a:
48:37:f1:4a:f2:32:3f:2b:e0:28:12:a2:f9:db:2e:a9:96:c7:
da:c3:d6:ee:d0:32:ed:11:e4:d2:38:f3:ba:11:0a:56:b0:c0:
47:23:95:3f:3e:e6:39:d9:fb:ef:d5:31:59:cb:85:3d:ff:b2:
ff:94:8d:dd:61:c1:80:d2:e9:2b:29:f0:cb:c8:6f:18:48:d9:
91:e4:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:52 2025 by rpki-client