
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: eavzDbihXtxoOEsFG9BqX0/X3+2n7yoWQxi23Z6XbQU=
Subject key identifier: 67:C4:85:0B:72:98:3A:D0:9E:CA:9D:CE:72:10:41:7C:E1:B4:C2:D3
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 01984964F4A6A21815BD24F46A45EFAE82BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 0148
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: W0Dx4VhkD49O8/tEOuTKxxD4cGKrygjEIJHa6DMASrE=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f4:a6:a2:18:15:bd:24:f4:6a:45:ef:ae:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=67c4850b72983ad09eca9dce7210417ce1b4c2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:7d:77:b9:fd:77:8e:e5:a1:d6:dd:72:1c:
2b:4b:52:bc:a2:a6:b6:1a:48:bd:26:49:95:a2:ce:
a8:2e:ef:9e:93:c6:34:8e:1c:af:ac:49:84:25:fc:
a0:e5:e1:41:a0:6b:02:e2:81:44:f8:af:d1:90:cf:
be:8e:a1:3f:24:d6:00:cd:ff:e9:03:8e:35:e3:70:
85:6b:7b:ec:47:32:3d:b2:fc:b0:d7:99:64:e9:71:
61:68:e2:52:42:5e:66:b3:59:cd:35:90:61:90:37:
8e:32:41:bf:c6:7d:10:a4:eb:04:52:00:4a:b9:a8:
c6:d6:69:17:f4:e7:8f:b7:bb:18:88:0b:58:50:57:
5e:e5:dc:6a:74:92:6f:4b:13:eb:67:63:2d:48:c6:
1c:40:9f:2f:c7:db:1b:03:3a:3b:9f:72:e9:15:d5:
bb:2f:00:1c:a6:65:99:12:45:0f:78:da:70:52:6b:
bd:c1:ff:b5:27:07:7d:55:2b:27:96:7c:19:77:c0:
03:c1:8e:eb:78:9a:e9:62:3b:c3:85:77:70:f9:e2:
f8:31:03:94:ee:35:da:f2:d9:35:4b:0a:a3:a7:11:
20:a8:22:15:9a:b3:c9:2e:4b:5b:f6:a7:24:91:0a:
47:bd:a2:b2:4d:d6:41:ca:b0:38:3e:d0:57:28:c3:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:85:0B:72:98:3A:D0:9E:CA:9D:CE:72:10:41:7C:E1:B4:C2:D3
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:7d:89:8a:c1:c8:c8:5c:f4:cd:e3:11:6e:67:0b:0d:25:
13:5d:2b:9b:26:6d:03:ee:3e:6b:3b:89:97:a8:9d:49:bc:ab:
ac:c6:82:77:82:1f:ac:cf:d6:9c:28:cd:9a:73:b9:05:b1:3a:
1e:b4:71:03:6b:f4:cd:eb:b6:cd:3a:e5:e6:2e:ee:26:ae:54:
11:0a:f1:5c:ef:a3:49:d9:73:1a:fd:81:dc:80:aa:08:e7:0a:
02:09:69:7f:37:10:bc:21:57:ef:2a:8f:ab:cf:1e:bb:dd:a5:
22:7f:4e:9c:69:6d:00:84:4c:1a:77:e2:42:69:b3:19:31:19:
63:ac:29:a2:65:b7:a2:46:de:24:61:fe:2b:f6:a0:17:ef:bc:
76:2b:0c:6e:b8:30:73:b8:b5:18:2b:27:3d:4f:b5:08:1a:fa:
74:63:99:78:d5:b7:05:69:29:18:84:bb:ea:7e:87:1f:42:d2:
4e:0b:82:07:f4:53:d7:78:53:cb:7a:c4:a2:f8:ca:a0:87:69:
1e:7a:99:4a:ef:94:62:bf:bf:93:38:dd:d3:9c:ae:40:11:14:
df:9f:3d:02:64:b8:72:a7:30:0b:3a:e1:90:1c:09:61:f0:e2:
e0:96:02:82:23:3b:21:bf:9c:5d:c6:e7:5c:b4:92:92:c2:81:
81:10:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:47 2025 by rpki-client