Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: bGSMvFOFdC9RJZNOBO3XmtDgK0fIZauyMXeSB8FRgDE=
Subject key identifier: 13:01:59:35:14:33:BB:D4:6A:CC:66:01:F8:8C:CF:F7:BE:FC:3A:48
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 019849D2CFA3B6C3CE079BBB7FDAC5F23E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 03:00:09 +0000
Manifest this update: Sun 27 Jul 2025 03:00:09 +0000
Manifest next update: Mon 28 Jul 2025 03:00:09 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: RvVX9d9JpYW2+PvyzqReg+xeEj0G8tEMc2x2J1+B01E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:cf:a3:b6:c3:ce:07:9b:bb:7f:da:c5:f2:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jul 27 03:00:09 2025 GMT
Not After : Jul 28 03:00:09 2025 GMT
Subject: CN=130159351433bbd46acc6601f88ccff7befc3a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:2f:f1:6b:18:70:0a:d1:69:22:0a:b7:37:
af:8e:75:80:19:ac:08:78:63:97:f2:b7:ba:e5:5a:
a0:34:b0:de:bc:de:64:45:bf:45:82:bd:3c:b1:2a:
65:8a:55:25:fb:01:dd:c3:12:15:46:a7:8f:1b:f1:
42:4b:ed:70:44:6c:03:ab:bd:52:2f:3f:ed:3f:d9:
e8:0f:6c:04:86:9a:c1:e3:86:7c:1f:7f:a0:64:31:
c5:d4:9f:e1:dc:60:94:40:53:9f:7c:6b:f8:26:fc:
7f:ab:d8:1b:59:2f:5f:b4:c3:e3:da:6b:2d:37:5c:
fa:96:8c:3f:77:b8:0f:30:25:81:7d:f3:65:b5:00:
69:d9:fc:6b:15:fd:88:3f:95:a2:63:25:80:a0:38:
8c:20:3b:c8:d5:cf:2d:ff:6a:65:56:54:2d:94:47:
63:c3:8c:af:ad:5e:74:0a:b1:e0:1f:44:d1:35:66:
f8:b4:66:94:a4:a8:65:b3:ca:b2:d1:63:da:3d:6d:
66:c2:2c:37:8f:5d:4f:9f:13:44:4c:2a:27:98:a0:
f1:60:cf:8e:b2:4f:f8:a3:85:c3:98:b2:d6:61:75:
c3:92:f6:74:f6:ee:1a:2b:0d:ad:06:03:6d:63:29:
7f:37:d5:46:8d:59:da:ed:98:06:bb:4b:cc:8c:56:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:59:35:14:33:BB:D4:6A:CC:66:01:F8:8C:CF:F7:BE:FC:3A:48
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:9c:fa:d2:8e:04:65:83:07:2d:0c:a6:b1:bc:d3:8a:3d:
46:5d:b7:fe:49:74:89:68:9d:ea:e1:62:4a:66:13:b5:eb:c7:
18:59:ca:23:c8:a5:fd:74:5b:66:32:7c:bd:7f:94:ec:80:27:
3f:61:71:65:2d:96:a7:de:41:d5:72:bc:3c:cc:45:77:4a:36:
09:b1:0b:74:56:f1:ca:4b:52:a2:f8:a3:75:77:ec:c9:80:b2:
39:fc:94:75:41:84:18:c2:b1:76:ce:f6:e4:dc:2f:9a:9a:af:
c5:6d:af:cc:b2:02:9a:6b:1b:42:05:e4:f1:d9:be:a8:0f:2f:
4f:ca:73:35:16:59:58:a6:96:d2:e5:0a:31:b8:da:4d:5e:0d:
20:7a:f9:32:6c:8f:cf:7f:ad:26:35:f9:ba:df:36:4e:83:21:
ba:6e:56:bd:e4:73:9d:b0:1b:e9:51:30:a9:97:41:99:ff:75:
de:8c:f6:08:dd:54:38:b9:4a:92:f8:a4:db:79:10:6d:a7:80:
06:58:34:44:52:c5:ce:60:c4:43:ca:4d:d8:32:72:32:34:7d:
38:20:cf:1f:7f:10:04:9c:38:bc:69:e5:2d:32:69:10:58:52:
e0:73:56:fa:ec:58:49:40:b5:95:af:2c:46:31:72:e0:75:a0:
9f:a9:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:14:34 2025 by rpki-client