Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: jU4In9aqmCCwn9gHsoXwvTA6LN+Ip7I9MqHNeywPdUY=
Subject key identifier: D9:2B:E1:00:1B:2B:6B:8F:33:47:67:FE:D6:CE:47:1B:4A:07:45:29
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019846D227A7279A674CC390C7A3F346B244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 0156
Signing time: Sat 26 Jul 2025 13:00:34 +0000
Manifest this update: Sat 26 Jul 2025 13:00:34 +0000
Manifest next update: Sun 27 Jul 2025 13:00:34 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: yhIE8u2I0d+YnXJHsPbWN1Wk4OrRDiIDWZtMx2q7M+M=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:27:a7:27:9a:67:4c:c3:90:c7:a3:f3:46:b2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jul 26 13:00:34 2025 GMT
Not After : Jul 27 13:00:34 2025 GMT
Subject: CN=d92be1001b2b6b8f334767fed6ce471b4a074529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:ba:1f:be:53:ec:8a:dc:5a:f8:3f:c7:7f:
e6:73:82:9b:68:07:60:f4:89:da:5a:2c:db:bc:e5:
b7:30:18:f5:10:54:8c:9a:72:9e:50:0b:d7:08:2b:
8d:19:f6:79:d5:51:f2:9b:d2:6f:83:b6:b0:11:3a:
91:38:3f:b3:66:a4:64:8d:dc:4e:e8:3f:ea:a0:3a:
2e:91:fd:c7:a4:3b:a3:95:bf:b5:70:32:58:82:02:
0d:3e:16:4c:25:a4:7a:e3:a6:6f:b5:8d:2f:20:62:
ba:71:26:67:bf:77:06:d0:e1:82:71:5f:c4:d7:77:
d4:b0:d6:0a:04:f8:77:c9:d2:26:d5:01:3b:d8:0c:
c2:27:53:69:93:6c:45:f5:ae:39:59:6c:8e:e4:cb:
0e:7f:87:6b:48:b9:20:e8:07:7a:73:12:cf:c0:0a:
5f:90:e1:d7:db:e9:65:71:db:15:e4:7a:c4:7c:68:
13:97:9d:87:2c:ed:dd:e5:5d:f9:89:d7:2e:9f:b6:
3e:90:76:6d:36:28:01:fb:23:8a:21:3a:04:53:01:
d8:be:70:c3:10:1f:99:10:df:6a:f2:c1:4f:c2:ca:
7d:52:ac:fd:05:c1:25:25:9c:36:c0:6e:ca:62:be:
79:0e:7b:e3:bd:57:92:6b:e7:7d:dc:2c:c2:57:07:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:E1:00:1B:2B:6B:8F:33:47:67:FE:D6:CE:47:1B:4A:07:45:29
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:87:d3:21:fc:0b:1f:de:ba:f7:79:de:cf:a5:50:29:e3:
4c:c8:dd:a6:44:72:ac:03:60:9d:19:6e:9d:5a:7e:96:fe:17:
52:cc:1b:89:7f:a3:1b:8d:76:92:2a:a8:d1:6e:33:3f:1f:70:
b2:85:d8:b4:bd:fe:01:43:94:f7:3e:bc:78:a2:98:e6:a6:35:
2f:f8:6e:bc:74:98:78:e1:42:32:92:15:05:17:42:5f:46:e3:
23:a9:c4:47:74:c0:ba:2e:7e:b8:e6:a3:8d:aa:38:11:fe:af:
73:78:62:8d:b3:f5:59:5d:a8:7d:56:92:c2:60:b1:53:d9:fd:
cf:0f:51:66:f7:b3:5a:5c:bb:29:32:dd:ea:14:61:a0:65:f2:
f5:33:0a:06:65:69:91:b0:45:c8:ba:56:3d:1e:1b:c9:f0:7d:
e6:c8:85:79:01:08:44:1e:97:fd:dc:77:c4:ce:11:d8:35:c1:
53:40:ab:e6:3f:75:d2:eb:b9:b4:2b:4a:cc:91:c2:3b:d4:73:
1b:59:40:ff:c0:db:11:e1:e0:51:47:75:70:ab:a6:3d:bf:a2:
5f:e8:f4:53:a5:87:6b:a2:51:68:ec:7d:c8:50:a7:32:39:fa:
46:51:8b:33:9f:b5:be:cf:15:fb:c1:4a:65:6b:95:97:22:bf:
59:8f:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:36 2025 by rpki-client