Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: F8yE4E2Vq+3GXQA2eaN1bdpaoCEJH4e/0GwhskHGccw=
Subject key identifier: DB:B8:81:E6:E8:24:EC:3A:6D:77:5B:50:98:8A:ED:37:C6:EE:F5:CB
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 01984A77A8C56D9DEB9D30B8EB4576A19416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 04C7
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: GOkoSPGhWSDRv1OJ4wMKp127IKKvBEbb41NLOVnPFfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a8:c5:6d:9d:eb:9d:30:b8:eb:45:76:a1:94:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=dbb881e6e824ec3a6d775b50988aed37c6eef5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:88:f0:6d:8b:8d:c4:36:4a:69:0f:2c:db:
dc:be:78:f5:59:7b:23:56:b6:f0:6b:39:21:f6:ca:
40:3f:5f:fa:51:c6:1e:b4:a4:71:70:be:bb:0b:0f:
47:a8:f3:e3:a3:07:1a:ab:22:a6:0b:4d:3c:c1:14:
f6:96:e5:d9:e7:d8:46:34:26:c6:bf:b2:31:93:22:
67:7c:c1:80:22:f8:b7:8d:90:10:65:cf:65:0e:7d:
62:2c:69:e0:1c:58:45:29:89:b0:3b:c7:d9:48:75:
61:ee:9b:a4:29:16:67:84:78:60:1e:56:04:a9:5c:
54:a8:7f:01:17:dd:52:e3:e0:d0:72:9c:53:9b:b1:
7b:03:34:06:91:f2:1a:9a:99:37:b1:d0:40:1b:61:
01:db:7c:e8:09:39:66:8b:ba:2e:41:1b:2c:27:60:
10:d1:f4:c6:5b:fa:cd:13:cd:64:33:25:2f:ed:30:
c2:d0:76:f0:d2:fe:2a:ba:ce:60:e8:3d:67:d4:e2:
f3:3c:84:57:37:c3:67:1f:90:3c:3e:1b:dc:d3:76:
f6:91:c7:3a:4f:f3:b8:de:16:21:cd:4c:8c:b3:9b:
42:df:75:8f:6b:53:e3:4d:10:f3:0c:45:1b:8b:2a:
3e:a5:69:5e:c9:0b:0d:67:06:5a:ce:b4:fb:65:14:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:81:E6:E8:24:EC:3A:6D:77:5B:50:98:8A:ED:37:C6:EE:F5:CB
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:fa:64:59:e6:83:b8:e9:63:9f:b0:47:c2:1b:7a:21:76:
65:07:79:88:14:a4:ca:92:a3:28:5b:d9:4c:88:76:81:18:84:
f0:1a:d7:7e:d4:ed:ad:f2:76:28:64:9d:bf:f0:6a:ea:7a:90:
58:b6:e1:b2:38:e5:9d:a2:b9:e3:7c:ea:e5:0d:73:ba:4c:61:
4a:c8:58:ae:e0:d1:43:5c:37:1b:91:68:07:46:8f:87:1a:d3:
0d:b2:97:dd:ba:3f:40:94:d5:aa:05:0c:15:c0:87:27:77:12:
15:4e:60:b9:0e:14:39:b8:9f:f9:e2:fc:d1:3d:80:e3:9c:4e:
a3:3f:2e:7b:8f:e3:b0:ec:5c:32:a9:82:38:90:e3:aa:82:65:
c5:96:f2:d6:29:19:2e:3b:14:2f:f8:5f:69:bd:d7:82:39:9f:
63:de:41:e3:f3:5f:f2:e2:25:d8:80:ca:ab:92:b8:40:61:f6:
21:9f:0b:c3:16:61:d0:6f:9c:4d:af:d3:b5:9a:9d:a7:02:8c:
75:2d:8c:e0:ab:ec:55:7b:ca:8d:5b:b0:e8:a5:29:bb:45:88:
5b:f6:ce:6c:37:5e:f3:19:d6:d9:63:ac:4f:d2:c3:f8:a8:90:
a7:31:08:ea:26:0f:13:a6:54:5e:43:ab:94:05:e3:17:b8:bf:
4f:4b:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:16 2025 by rpki-client