Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: t5Mi75Vu5i7Zegtd4DE5vOwAgpUKMhJ7JxraKHMIKGg=
Subject key identifier: DE:E5:03:FB:E3:60:9E:BE:F6:EA:14:4C:20:F9:C9:BC:4C:7E:84:2B
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01984588B5373E151F166EBD1A62B94639B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1308
Signing time: Sat 26 Jul 2025 07:00:43 +0000
Manifest this update: Sat 26 Jul 2025 07:00:43 +0000
Manifest next update: Sun 27 Jul 2025 07:00:43 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: zY8YdcdVmK7yZZlmaYUUej6W2kRl+EeGIiuBrvwzXO8=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:b5:37:3e:15:1f:16:6e:bd:1a:62:b9:46:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jul 26 07:00:43 2025 GMT
Not After : Jul 27 07:00:43 2025 GMT
Subject: CN=dee503fbe3609ebef6ea144c20f9c9bc4c7e842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:e0:7c:2c:15:d0:c0:00:ba:6f:92:4e:e4:
a5:39:28:14:f9:32:aa:0d:43:dd:57:e7:7b:b2:53:
04:d2:24:99:5d:89:c4:48:15:73:ee:1f:ce:b5:ac:
48:13:ee:94:67:28:b0:92:dd:2c:4b:49:01:e6:b5:
9e:60:71:6f:c0:59:f8:54:dd:dd:62:34:98:72:25:
03:6e:d4:9a:86:44:5f:42:67:f2:08:79:d5:b2:68:
7c:42:70:78:81:17:dc:5c:25:e2:7e:d8:9b:33:92:
63:c9:b8:b5:42:fe:9c:8a:02:c2:7d:44:7c:82:0e:
7c:5b:d5:2e:e6:27:4c:ea:a1:3f:da:2e:a7:42:4a:
99:9d:9d:cb:90:b8:ad:ff:4b:70:a9:7f:0a:34:1d:
03:70:14:44:4e:85:5e:79:93:38:7c:b9:c1:65:d2:
2f:fd:c3:e5:98:8a:20:ca:3e:28:c6:e8:a3:04:c3:
2a:14:33:45:bb:f4:27:e4:6c:cf:82:0a:2e:ee:46:
94:04:bd:03:5e:77:69:0a:d0:23:07:9e:e2:db:8c:
0c:e2:73:4a:6b:d2:0b:8a:4d:ec:da:69:af:c1:9f:
12:a3:13:8b:74:d2:04:a4:18:66:cf:0f:f1:eb:ec:
d7:f7:51:db:33:a3:67:73:db:b5:61:9e:64:7b:1f:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:03:FB:E3:60:9E:BE:F6:EA:14:4C:20:F9:C9:BC:4C:7E:84:2B
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:44:35:6e:1a:8c:f7:2c:75:18:e4:3e:b7:3f:8c:fe:66:c0:
2a:33:78:54:e9:84:c0:19:7c:8b:d9:38:3a:2d:d1:6a:b6:4b:
d6:f8:1c:64:c2:66:eb:b4:a5:ce:a8:77:6a:f7:a8:40:3a:6f:
b7:15:f3:5c:8d:9b:41:50:c5:78:e5:44:ce:46:14:85:55:ca:
86:ec:eb:8c:ab:1b:f9:f7:5a:66:90:42:a3:4e:92:c9:1b:47:
a3:00:29:d2:1c:ba:70:a6:6e:e1:0c:6c:90:42:bc:f1:ef:55:
df:76:8e:72:18:c4:8c:1e:32:78:37:c6:49:1f:14:a0:18:19:
c0:42:fd:b9:69:32:f8:8f:bb:39:3d:71:93:ef:c5:a0:45:19:
b0:76:37:22:19:af:17:a5:b0:24:28:f4:34:7a:98:dd:7a:ee:
62:6e:b3:4d:63:f8:27:6c:6a:c5:ed:48:d9:3c:62:f7:b0:2e:
4e:04:64:35:a7:fd:57:2e:9c:13:10:87:d1:65:7c:7f:27:35:
c0:a0:ed:b5:91:ea:b6:09:66:df:ad:73:56:1a:54:61:37:c1:
04:40:37:22:5c:14:58:67:b1:e1:0b:43:13:99:0e:2e:be:13:
0e:ec:db:71:74:3f:60:f1:44:2a:f6:fb:95:1b:3e:ff:3b:4c:
95:a3:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:24 2025 by rpki-client