Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: CjbUy2YmZzDrpHeBYwLGCPrNiWk5/jBKeyghKx0wJJQ=
Subject key identifier: 5D:79:C7:3A:82:60:03:AB:1C:CE:FF:FE:8B:7A:6C:A9:A4:9F:F4:F0
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 0198499BF238A471768084AA398A0C6EE24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: DUeztC_9OSU5_baS7RpA8PIrChA.roa (hash: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=)
2: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: pUX/H4mgqGquNUtpFRwy2eHk1PUKI9Hek2j/nYHIAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f2:38:a4:71:76:80:84:aa:39:8a:0c:6e:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=5d79c73a826003ab1ccefffe8b7a6ca9a49ff4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1b:bd:51:7d:a9:68:fb:21:25:0e:1f:f0:98:
79:66:a4:58:e1:75:d6:4a:26:ff:4f:61:a9:4d:bf:
88:30:e7:04:c4:af:16:11:dc:c4:f3:ee:21:a5:ef:
cc:e7:32:95:71:0c:a9:33:d3:27:b1:f2:4e:a5:5a:
b6:ea:98:b9:86:fc:60:f3:27:b7:0e:cb:06:26:75:
a5:2c:2d:2e:cd:5d:3e:92:54:55:66:4f:dc:d7:ae:
8b:7f:29:ed:5f:a6:a9:31:f4:2b:34:6a:60:08:78:
34:26:c1:36:0a:bb:b5:7d:b9:09:12:80:00:03:6c:
5e:fb:df:3d:02:8d:8f:39:2e:99:72:9c:f2:b9:1f:
0b:d9:71:8f:f6:03:c4:6c:07:3e:4d:a1:32:e3:2c:
1d:9e:1b:52:dc:cb:d1:98:fc:4b:10:96:3d:92:a9:
ff:ce:15:ad:f6:fa:07:57:7a:32:bc:41:45:0b:70:
cb:0f:38:16:43:94:2c:18:6d:a1:2f:db:00:18:55:
4a:8c:ad:96:a6:ef:1a:7e:6f:77:1f:a9:47:12:a8:
69:2e:5e:2f:eb:c2:db:ad:9a:00:6a:bf:ae:71:fa:
3a:a7:ae:e2:fd:ce:d5:95:17:29:d9:02:d5:ab:12:
03:69:14:60:ea:87:93:18:64:67:0d:2a:69:61:74:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:C7:3A:82:60:03:AB:1C:CE:FF:FE:8B:7A:6C:A9:A4:9F:F4:F0
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:74:a7:e6:61:61:eb:46:29:1a:ee:ba:63:c8:09:1b:34:
d5:4c:0a:74:34:25:a8:42:08:15:85:ff:6f:7d:75:e3:e4:e8:
c6:de:37:84:af:9d:9c:88:d6:0f:1f:93:79:2b:32:50:7e:ab:
8f:85:e0:5e:98:7f:a0:9d:62:7c:11:07:fa:ad:d6:d1:3e:91:
ff:95:b3:73:8b:1e:6b:a5:90:c5:12:9d:f9:38:33:50:e5:5d:
33:4d:5a:cb:8d:12:40:da:6c:80:7a:df:2f:9a:bb:98:bf:03:
8d:1b:94:bf:f3:ec:61:8d:62:a8:73:c8:cc:b2:fe:9d:df:1b:
91:2d:c5:06:52:9a:ad:b7:dd:88:dc:ff:01:d4:75:63:8a:27:
5a:9f:1a:d7:ef:3e:2e:b0:e7:cd:88:8f:5d:be:1b:29:7b:4f:
83:b9:37:e6:6a:0e:6f:09:66:ab:b4:81:b9:ed:0d:d7:b0:52:
6d:e6:06:fc:af:db:4c:46:d1:4b:86:84:c3:8c:ca:1a:2b:a8:
f2:27:b2:c4:e1:02:d5:eb:c6:96:a2:92:69:9c:03:40:fc:ab:
eb:66:52:eb:1d:15:cc:b3:0d:78:ca:d8:32:d3:6d:02:58:40:
a7:9b:11:4c:31:2b:e3:c2:7d:47:4f:c9:d9:42:df:b4:42:23:
bc:48:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:17 2025 by rpki-client