Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: y0c8qKDoIklg63y14ND/+RWe7TlilqeMP43RXCVv9Tg=
Subject key identifier: 02:FF:95:15:4D:FF:6F:F3:0F:FF:58:A2:EB:25:4E:5E:CC:1E:3A:71
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 0199221F31E17549BB0C5DDD16B1A5FB8D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0B2E
Signing time: Sun 07 Sep 2025 03:01:33 +0000
Manifest this update: Sun 07 Sep 2025 03:01:33 +0000
Manifest next update: Mon 08 Sep 2025 03:01:33 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: kDvx1GOk/pqbp6/Pqu8T+gDszyuJLza/8Uoy0dPD2to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:31:e1:75:49:bb:0c:5d:dd:16:b1:a5:fb:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Sep 7 03:01:33 2025 GMT
Not After : Sep 8 03:01:33 2025 GMT
Subject: CN=02ff95154dff6ff30fff58a2eb254e5ecc1e3a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:1a:05:52:70:f3:d6:dc:b0:99:98:f4:a0:
6e:a6:84:fa:41:c9:ab:f0:37:09:5e:eb:0b:f4:5c:
d9:31:06:e3:64:c6:d5:e2:c9:cc:b8:e3:3f:a2:d1:
9c:4b:1a:3b:23:53:09:9b:91:54:e4:e5:68:00:83:
29:17:5f:77:47:c1:f1:c7:cc:35:fa:0d:cf:b0:61:
0f:0c:bf:24:89:3a:82:22:e7:2c:fa:d8:4f:7d:44:
a9:6c:72:52:b0:cc:98:93:d3:5b:57:6a:97:de:9e:
12:66:71:78:f5:fc:ec:6e:e7:fe:2d:5c:1e:64:3e:
de:0b:17:b8:56:6a:55:a3:88:c0:fe:43:97:f8:c2:
ef:0e:ba:29:55:f4:65:03:bb:6c:ac:9f:15:21:4b:
9f:3e:bf:d6:85:7a:4d:5d:a9:d1:c0:80:f6:c2:44:
e3:d5:4e:b5:6a:6a:91:ea:0a:13:04:72:52:64:de:
86:ee:d0:47:89:eb:7a:48:a3:95:d9:37:27:79:4f:
68:49:14:bf:7a:1b:36:91:a9:cd:c3:4f:73:26:32:
11:b1:4f:6e:13:72:42:a9:92:7c:70:b9:74:3d:ec:
63:3c:35:f4:14:8d:63:28:ea:42:ab:5f:5d:5a:69:
a3:9a:17:69:37:7a:79:aa:0b:51:62:3e:2b:1d:9b:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:95:15:4D:FF:6F:F3:0F:FF:58:A2:EB:25:4E:5E:CC:1E:3A:71
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:9e:e1:d6:20:e0:12:8b:92:b6:e6:48:47:65:70:2a:db:
2f:db:04:25:cc:bb:52:8c:e2:d6:cf:b8:49:00:3f:7f:01:64:
62:42:d6:9c:9f:e4:2a:21:41:05:fd:ee:11:b4:20:b4:dc:b1:
46:0e:e3:5b:03:fc:1b:3b:5f:3c:85:6f:93:e2:73:03:fc:9c:
62:bc:9c:9f:12:37:e6:10:37:d6:e2:62:b0:0d:8b:48:a8:3f:
c6:50:fb:eb:38:d6:b4:c5:70:20:23:1c:42:b8:09:70:03:23:
bb:7f:12:7e:e3:0e:c2:01:2f:d2:3d:7c:e2:87:b0:c0:55:23:
0e:90:ee:ef:4d:35:f9:6e:cd:fe:05:c0:76:04:3a:eb:64:1e:
32:fc:99:75:19:e4:ff:de:40:5c:4d:1e:36:f9:67:54:76:57:
d0:9e:58:1e:b4:e7:6b:ec:07:ff:e5:19:27:bf:a7:4a:26:55:
5d:30:b8:71:c6:83:13:16:13:6a:e9:56:89:70:bd:cc:7a:4e:
4d:70:6f:f7:d9:3c:98:08:d0:ad:d0:5b:56:b6:1d:02:c9:60:
88:df:3b:41:8f:6e:ba:ab:90:36:13:6f:a5:cd:ee:e8:84:2d:
86:b3:1d:93:51:25:39:12:6e:0d:f3:3f:61:d8:17:ca:17:19:
57:5d:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:41 2025 by rpki-client