Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: l+k05vfbAD35fhIYnhcv21ME1MUQog52XmbwzyyYt2I=
Subject key identifier: ED:E8:A4:7A:4F:B8:AC:1D:FE:D6:B7:03:B7:D4:77:2E:EB:C6:6E:91
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 01985F7F35A2A30A121D0B0E94072579CF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 1506
Signing time: Thu 31 Jul 2025 08:00:28 +0000
Manifest this update: Thu 31 Jul 2025 08:00:28 +0000
Manifest next update: Fri 01 Aug 2025 08:00:28 +0000
Files and hashes: 1: Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa (hash: 0oaVoHp1lfPB8j/dx+/RSOuNiG+gm/WhxI6jUsMwbjg=)
2: coXrhUL-UR2XiaXIQUyJNYk5wfw.roa (hash: fVVY4ZVUYIXnBSvc/7AhdMXyEXPtFjAoKMuhQm3m+gQ=)
3: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: bi0uIref9c7NFlFCWHLs0gDvV9HjkzELX03NkTUknyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:7f:35:a2:a3:0a:12:1d:0b:0e:94:07:25:79:cf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Jul 31 08:00:28 2025 GMT
Not After : Aug 1 08:00:28 2025 GMT
Subject: CN=ede8a47a4fb8ac1dfed6b703b7d4772eebc66e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:bb:d3:b0:7f:7c:c9:ff:da:86:83:eb:9a:
76:e9:96:e8:9b:a7:b2:39:a1:af:f3:57:4e:7d:59:
1e:0d:7f:6f:f9:09:5f:93:8e:7c:08:03:c9:3b:69:
45:25:d1:ff:0e:62:5f:08:d2:25:f4:91:4e:b3:df:
03:b0:0c:c1:a9:42:d8:dc:64:49:d5:3d:05:22:86:
e4:c2:e4:bc:c7:07:55:df:91:40:33:b2:d0:0a:7f:
c1:2f:22:66:7c:63:42:9b:e6:b2:93:41:34:fe:6b:
0a:34:eb:b7:01:c8:a6:f4:57:f6:92:ef:45:56:28:
19:a4:fa:4d:f9:99:d2:53:d9:5f:cd:8a:0e:d9:25:
40:c9:7a:50:20:93:70:a0:b3:c1:9c:cd:95:71:a9:
ad:f9:72:06:1c:08:0e:53:69:80:18:ca:5f:71:db:
b0:83:f1:a0:30:bf:ee:9d:44:c9:16:ab:42:df:b8:
37:ba:63:19:c9:e7:ad:91:89:f2:63:82:e5:2b:36:
a6:92:0d:0f:7f:86:3a:ea:b7:0c:23:6a:1c:fb:6f:
65:df:9c:68:bd:90:ef:55:b4:56:12:db:59:4f:09:
98:62:0f:69:f9:f8:79:ac:61:90:eb:d8:7f:1b:17:
ab:2d:f6:2e:dd:09:d2:38:16:6e:de:8a:54:7c:b6:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:A4:7A:4F:B8:AC:1D:FE:D6:B7:03:B7:D4:77:2E:EB:C6:6E:91
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e7:8d:3f:1f:28:c7:ca:2a:7f:09:61:12:d5:1f:6b:6e:e5:
8e:ca:b3:83:ad:e7:f8:fa:f4:22:a1:68:5c:36:ba:fd:49:a6:
0f:a3:ba:0e:e6:1f:1a:ee:92:06:d8:91:d7:67:c9:45:3a:73:
60:d0:02:17:e6:bb:f2:c3:92:57:f2:65:14:ce:b8:ab:b5:98:
c2:1c:f3:c5:d4:7c:5d:0b:5d:6c:ae:d8:c4:a2:17:47:cb:58:
de:5a:dc:45:d9:b6:e4:14:01:5e:5d:87:8f:e1:dd:c8:d1:ab:
f8:6b:bf:13:51:b7:6d:73:5e:a9:f5:c6:f9:d9:e6:93:87:26:
14:cf:45:a8:62:2e:25:80:49:89:21:4d:8c:7f:89:c4:87:56:
37:5a:2c:b4:92:fe:00:1e:cb:4c:5c:43:50:36:26:59:86:ad:
c9:15:c8:98:dc:e6:3b:2f:f2:97:41:0f:5b:34:b0:d0:1f:2a:
7a:48:db:e8:25:99:37:d4:a9:31:89:5a:4f:cd:c8:69:c8:80:
72:1e:92:eb:c6:43:f3:72:d0:9f:26:c8:49:74:1f:4b:5a:d2:
cc:84:7a:28:d1:1a:04:8b:62:53:5a:74:40:1a:bd:0e:a3:19:
82:de:cf:6c:01:97:b4:15:68:51:a3:c4:08:96:f2:41:3d:e8:
b0:48:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:54:13 2025 by rpki-client