Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: 8swEHCBRyDFwcDbhECrf4F5am+KX1UiPKITnwoI81PU=
Subject key identifier: FA:01:17:E2:4E:C9:4E:37:C2:D5:C5:5F:C3:7A:B4:D8:A1:91:E1:1A
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019844E360DD0B9D825E89CC88BA090F70DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 04:00:08 +0000
Manifest this update: Sat 26 Jul 2025 04:00:08 +0000
Manifest next update: Sun 27 Jul 2025 04:00:08 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: rYIFTTtmu4FKolo+tRYQqs9K1R2lPYoFxXeD5P43uAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:60:dd:0b:9d:82:5e:89:cc:88:ba:09:0f:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jul 26 04:00:08 2025 GMT
Not After : Jul 27 04:00:08 2025 GMT
Subject: CN=fa0117e24ec94e37c2d5c55fc37ab4d8a191e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:fd:d3:af:ee:f0:77:ae:bb:77:8a:aa:06:
89:3f:b1:39:45:c0:a6:56:22:64:ef:bd:86:a6:3a:
8a:7c:81:1f:1b:60:75:d1:79:77:c2:47:fd:94:9a:
e6:aa:af:72:cc:09:7b:e8:41:ac:68:6d:38:61:f2:
b0:05:80:21:76:c7:b5:31:3d:28:7d:7d:fb:46:34:
52:c4:68:de:56:71:86:ae:70:c6:b0:ee:e3:bd:16:
82:65:17:36:ef:b8:ef:16:10:80:0d:7b:82:59:49:
25:05:a9:51:2c:51:01:a2:96:8d:75:59:1a:80:e0:
18:65:0f:71:c0:3c:fe:72:c5:e3:b6:e9:67:51:7d:
2b:45:18:7e:cf:4b:02:c0:8d:5c:41:11:2e:f6:2b:
87:28:16:a8:92:ec:7a:10:d8:ea:95:0e:be:c8:a7:
36:5e:33:40:1c:06:92:ac:87:60:b8:b3:4d:68:c7:
e4:36:bc:84:f6:f1:c4:1d:64:25:92:eb:ec:16:34:
2d:76:c3:a2:3b:9d:4a:e9:4a:a7:7e:b6:cb:7b:85:
cd:55:8d:92:99:3f:8c:7b:14:98:09:08:ef:47:fb:
44:70:56:41:ba:f2:61:82:b9:79:27:fa:34:cb:04:
ff:c7:fe:5d:77:a7:c5:99:a0:c2:eb:d3:bc:80:f2:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:17:E2:4E:C9:4E:37:C2:D5:C5:5F:C3:7A:B4:D8:A1:91:E1:1A
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:35:03:53:f8:55:d0:24:bc:66:a5:43:94:32:16:a6:e9:ef:
d5:a9:91:05:9f:6b:41:4a:b8:d1:d7:8b:8b:f7:14:09:84:a8:
17:52:14:cf:74:46:39:15:61:30:05:d3:d4:69:c3:3b:1c:8b:
bd:93:a9:6f:18:15:ab:d4:5f:f5:46:79:e3:11:44:46:80:ec:
6b:d3:f2:f4:af:67:ea:6a:82:c8:10:87:e9:99:03:f1:80:bd:
41:cf:c8:f3:02:e6:6d:d7:4b:67:46:8c:5d:0b:8d:64:c2:c4:
91:a1:75:f7:5d:05:9f:59:c8:69:35:81:80:0d:e9:86:f1:60:
38:6b:81:16:a6:c6:57:25:41:75:4b:6f:e1:58:cd:5d:b4:cf:
81:2c:4e:17:44:62:18:4c:0a:ac:e8:6e:cd:48:11:91:90:6d:
e1:fc:2b:3f:c1:e2:4b:da:0d:eb:bc:18:2e:ec:03:20:50:ce:
19:90:76:d0:9f:f5:14:0c:69:b4:db:34:c1:d3:9d:0a:ac:0e:
81:b7:6c:3e:21:4c:f9:db:38:fe:5b:99:30:8e:ab:7a:c5:a1:
0b:76:be:64:b4:b1:1e:bd:4c:58:83:5a:96:b5:99:b8:e3:d1:
fc:6a:54:89:68:01:16:c3:85:d9:9d:df:0b:c6:a0:f6:3c:fb:
39:c9:5d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:39 2025 by rpki-client