Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: Dav5yGzcsdFf29ajzexYcWSkVG1/TI3GxM/h0blR2gA=
Subject key identifier: D7:E3:D3:01:0E:C6:A1:26:71:36:16:B0:EF:2F:70:38:89:EC:E4:88
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01991D9CAEEB4C57FE05235F2CC4021C9C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1677
Signing time: Sat 06 Sep 2025 06:00:31 +0000
Manifest this update: Sat 06 Sep 2025 06:00:31 +0000
Manifest next update: Sun 07 Sep 2025 06:00:31 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: vepNRXVp6fW6iFau1HsXanpbDiAhCmKyyCQqgxhPrd0=)
4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:9c:ae:eb:4c:57:fe:05:23:5f:2c:c4:02:1c:9c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Sep 6 06:00:31 2025 GMT
Not After : Sep 7 06:00:31 2025 GMT
Subject: CN=d7e3d3010ec6a126713616b0ef2f703889ece488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:04:c3:86:aa:22:76:49:b1:06:aa:a1:1d:
ef:a2:59:08:b2:71:03:2c:2f:cd:80:02:4d:d7:ab:
c3:77:d2:8c:7f:fe:fe:f8:31:70:39:bf:46:b3:56:
7a:39:23:ca:aa:a7:f4:71:72:d1:d6:75:16:93:ca:
ed:07:0f:61:ec:74:2b:91:1d:17:42:d1:94:1e:37:
06:63:4c:b8:16:a9:45:02:b5:fa:8c:75:55:1b:73:
70:52:3f:5f:ea:5c:1a:b3:c0:4b:1a:3c:5c:82:89:
47:cf:ac:7a:7b:ac:48:9a:67:f6:b5:dd:6d:d0:cb:
1d:49:30:73:8e:72:f3:78:06:d1:ae:80:1e:6d:8a:
08:17:50:e7:c8:eb:61:43:78:eb:27:65:31:2c:7a:
89:d6:48:0f:c8:e8:fd:88:5e:59:b7:95:0a:76:ea:
7f:08:24:c9:14:60:34:65:2b:13:a7:b3:f5:a9:00:
87:14:96:f1:96:cd:59:e9:43:48:42:dd:99:56:6e:
68:3a:41:07:a2:45:9b:b0:d9:fc:01:6d:e8:51:02:
98:08:66:65:ae:d3:a4:e2:1e:b2:49:cb:dd:28:e4:
17:5e:c6:64:d2:c1:99:19:50:32:53:e9:9e:00:a9:
8a:61:16:1e:0f:f6:81:8d:67:4b:a6:9f:af:cd:5b:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:D3:01:0E:C6:A1:26:71:36:16:B0:EF:2F:70:38:89:EC:E4:88
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:c0:a7:42:cf:bc:3e:92:0d:5d:ca:d3:a0:cf:ad:76:30:
d5:31:5f:69:41:56:e8:67:b5:7f:5b:8d:ab:90:92:be:77:ab:
b2:2e:ba:da:7d:53:64:25:a3:0d:59:c5:8c:c6:5a:43:b1:85:
1c:64:cb:50:96:c0:e2:c1:4b:51:92:49:1f:ee:c3:d2:47:1d:
9f:50:30:3e:ae:cb:3b:a3:47:4a:63:3b:82:57:5f:bc:4e:db:
56:76:92:f2:91:72:3b:c2:bd:bd:31:37:8e:07:ca:55:15:7e:
9f:ef:aa:a2:72:8f:19:0a:a8:6b:95:5e:dd:fa:f6:ed:1c:ae:
33:7c:77:58:09:51:ba:84:0f:45:89:c0:22:0e:3e:6f:95:b0:
ca:6f:ac:9a:7a:40:4d:52:88:18:e8:51:d9:81:df:10:36:c2:
78:69:af:c8:48:97:a9:97:f1:7b:c3:42:31:64:4c:c5:ef:f2:
96:6f:0d:17:a0:d7:04:b9:e2:fc:bd:f2:07:c6:df:a9:28:44:
03:bb:0b:35:13:20:55:df:2e:7f:e6:01:af:95:ce:54:e5:31:
97:36:af:51:2d:97:79:f7:63:e0:57:85:e9:91:6d:49:25:95:
0f:0f:66:43:a6:37:01:f0:81:52:68:4a:74:00:ef:84:ca:a0:
b5:c4:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:20:56 2025 by rpki-client