Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: PIZUh5D3COjO0qzZQ438swoFzhhx6uWj/G7hAhBCoNw=
Subject key identifier: 67:3B:C9:D0:02:13:5F:A7:68:79:8B:27:50:90:6F:F7:76:7B:E9:50
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 019849659BE35DB25A2CA00B211CD836E225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: ZR55LVAFcME3m8cA1qEgHDpoeJOQ/pSdHC8Ph0/cUK8=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9b:e3:5d:b2:5a:2c:a0:0b:21:1c:d8:36:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=673bc9d002135fa768798b2750906ff7767be950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:d1:28:b7:84:89:35:b8:33:50:d0:a0:f9:
1d:d3:e2:ae:8c:cd:39:69:29:dd:5e:f5:03:e7:cc:
ac:14:55:8b:cb:39:3e:58:f5:50:5c:a1:a6:0c:fb:
5f:cd:32:43:55:fe:0a:a2:9f:b0:dd:0e:6f:c7:be:
48:05:fb:e2:35:95:9a:65:b3:35:9b:cd:d4:c4:fb:
fd:78:86:4b:25:8b:97:cf:99:be:da:a2:49:ba:61:
e6:e9:87:57:45:aa:72:b4:ac:41:30:b7:35:e7:4b:
57:05:eb:c4:6b:70:4c:af:12:ef:7f:aa:d8:29:95:
61:cc:9b:8b:2d:a0:46:fa:18:8b:03:5f:b5:f5:44:
e4:b5:cc:9b:5d:f7:a7:07:5a:c8:b2:41:47:90:d2:
a9:fa:4c:de:e4:e4:b2:e5:c8:5b:6c:8f:c6:0b:fd:
ee:73:ad:98:d8:46:f4:a4:a4:3e:a0:ad:b1:f2:84:
87:73:43:3a:e3:ff:eb:1c:a6:50:ed:99:b5:36:92:
74:9d:88:d4:47:d6:f6:6f:82:ae:52:e3:67:b9:be:
05:22:12:b2:9a:d2:3f:ca:a8:c7:2e:fa:f3:42:76:
c8:97:f5:48:4e:a7:82:5e:52:1c:c7:e5:31:f0:36:
53:e2:eb:6f:5b:92:24:a5:b9:1e:1c:42:4b:6f:ad:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:C9:D0:02:13:5F:A7:68:79:8B:27:50:90:6F:F7:76:7B:E9:50
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:3c:ee:ea:59:91:b2:2b:e7:e7:00:f5:36:7d:1e:8a:cc:
0b:d3:57:b1:1b:e4:3b:d7:c1:b3:7e:6c:5f:e6:68:76:d7:d3:
30:54:3a:c6:8c:6f:be:57:87:54:71:d3:11:f9:ad:72:26:08:
e7:4d:2e:cb:a3:b0:45:bf:40:81:ee:0e:75:1a:72:70:12:fd:
b1:b2:b4:ce:6c:f9:cc:35:a4:3f:7b:0f:6a:4f:f9:05:0d:66:
40:b6:e1:f9:50:7a:e1:69:61:ce:d7:2a:db:b4:90:78:5f:ed:
96:48:88:ca:09:88:80:43:49:91:af:3e:f5:a2:8e:5c:1f:de:
ee:5a:10:a3:34:d0:f1:93:e1:1a:1b:2b:17:22:e9:0b:53:05:
82:86:90:46:8a:70:1c:32:db:32:c2:6f:ad:ad:2d:1e:ed:0e:
dc:26:4f:58:5f:ff:21:e8:aa:d4:ca:b0:5c:32:8c:cf:10:3a:
09:ed:28:c5:08:9c:1f:1e:c8:d3:65:1d:39:b3:33:49:7a:90:
53:75:e0:31:7e:0a:1d:69:27:38:f8:34:d9:ed:da:e8:44:ee:
59:c4:34:51:ed:94:ad:20:39:43:b1:59:de:b0:8c:90:b8:74:
81:4f:a5:62:ce:09:9d:c0:dc:db:57:7f:a6:b5:f2:63:5d:67:
c0:7c:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:50 2025 by rpki-client