Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File: E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier: f3j86z1FoeF3GBl/ZnB7ILJ0C6W3Ihzmc6w/Q1LuE+0=
Subject key identifier: 8F:0B:24:9B:F8:24:2C:D5:49:A0:3F:4A:C7:49:E0:78:40:F0:C6:6C
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 0199375CAA413A4829B544D40D4773D3A320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number: 125A
Signing time: Thu 11 Sep 2025 06:00:43 +0000
Manifest this update: Thu 11 Sep 2025 06:00:43 +0000
Manifest next update: Fri 12 Sep 2025 06:00:43 +0000
Files and hashes: 1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: FYe1fQHAEEKv31U6xiGB+VQrHqP7H8r9xMzd9n4evzI=)
2: RAwW8IE1n9sVekuiCyEikAL5HtE.roa (hash: R2iI0k0l7koAhrOpg0u96qvpaz2J9avElrVz1cFdebo=)
3: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (hash: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:aa:41:3a:48:29:b5:44:d4:0d:47:73:d3:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Sep 11 06:00:43 2025 GMT
Not After : Sep 12 06:00:43 2025 GMT
Subject: CN=8f0b249bf8242cd549a03f4ac749e07840f0c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:f5:ce:7f:89:24:ea:1e:7c:c6:63:98:63:
9f:21:2c:2c:e6:73:ea:7c:4c:0f:c9:14:45:8f:2d:
86:db:93:58:81:8e:10:57:98:90:b6:7e:23:0e:e3:
12:bf:e0:50:cb:5e:78:5b:40:e9:52:8d:b0:1e:6f:
d6:df:0a:63:84:66:13:4b:73:63:2c:3e:00:4f:e9:
f4:fb:57:ef:eb:fd:8a:b1:02:bf:ca:5f:e1:6d:25:
b1:91:67:8b:8a:4b:f4:ae:be:6e:46:da:f5:53:60:
aa:a2:ed:73:20:30:48:4c:8f:47:7d:d2:93:c3:dc:
67:42:14:61:1f:5a:6c:f0:53:00:89:58:29:6a:b9:
74:5a:2c:58:32:2d:74:94:43:8b:3a:d8:4c:cd:cd:
20:7b:29:57:3c:d4:b7:cd:34:99:90:d8:09:d6:b7:
35:07:72:85:b2:f6:2f:96:d2:77:24:f1:8c:42:3f:
0e:d5:b3:be:94:8a:d9:74:dc:fb:db:07:3e:10:b1:
74:d4:c0:6c:5d:a2:af:5f:b9:4d:0e:d7:ac:84:06:
30:67:43:05:c2:54:1c:f5:87:50:90:fb:c9:a3:9e:
a0:f4:3d:f2:ee:59:7f:9f:17:9c:1b:cd:ba:81:90:
ee:16:65:da:9e:6f:d8:00:fb:bf:44:87:d2:0d:2e:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0B:24:9B:F8:24:2C:D5:49:A0:3F:4A:C7:49:E0:78:40:F0:C6:6C
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:53:86:c9:0a:34:8b:82:23:dc:6a:65:d1:36:bd:67:bf:
af:ca:af:f6:e6:a6:8a:ca:52:18:46:09:32:7c:ce:75:b5:61:
a2:f7:74:22:9f:91:94:77:f5:f9:b0:80:a7:3f:57:30:e3:42:
7c:27:86:6f:f7:0c:dd:ce:b1:2e:b7:56:40:de:31:dc:5c:46:
a9:2c:34:e0:30:cd:e2:e9:ac:56:cf:5c:73:c3:fd:63:86:cf:
c5:48:41:ac:b5:bb:22:53:e4:fe:f3:54:71:33:e1:c9:19:8e:
29:f7:82:c0:33:9e:c7:bf:e1:78:d0:ca:6d:18:7c:7c:49:9c:
e1:68:7c:52:dd:88:4d:cf:bc:02:ba:47:fa:df:e3:20:62:22:
34:1a:55:6c:f1:e3:e6:45:9f:ff:b1:85:e1:1c:f5:12:76:0b:
38:7d:9e:28:0d:84:cf:42:aa:90:e5:21:e2:c7:80:df:b7:fd:
76:2d:9b:dd:f5:d5:04:da:22:70:72:a5:ac:c5:67:53:35:d6:
6a:ce:22:4a:49:42:37:76:e1:c0:a9:6f:29:46:9e:84:35:94:
09:b9:71:14:cf:a8:71:d5:19:dc:f5:37:86:d8:89:6e:5c:e6:
83:0a:45:05:2b:5d:4f:7e:7e:b2:4f:3e:55:2d:f5:97:81:d6:
dc:f0:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:25:04 2025 by rpki-client