Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: JKHMYPfcfvJ6ys1hvIEV+qeUCNjI4h6vcLa7KrfJ35k=
Subject key identifier: 29:64:81:E4:77:64:0A:F7:F9:0C:1E:E8:88:F9:C2:09:B7:F3:5C:2A
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0197586DBB703D88931ACDFFF7E48D435CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1517
Signing time: Tue 10 Jun 2025 06:01:15 +0000
Manifest this update: Tue 10 Jun 2025 06:01:15 +0000
Manifest next update: Wed 11 Jun 2025 06:01:15 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: jx8ZSuRRlqR2GZXXrIVlRzY/kHGLbD9stsGJEpRoFRo=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:bb:70:3d:88:93:1a:cd:ff:f7:e4:8d:43:5c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 10 06:01:15 2025 GMT
Not After : Jun 11 06:01:15 2025 GMT
Subject: CN=296481e477640af7f90c1ee888f9c209b7f35c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:d7:8d:09:3a:67:d5:f8:c3:59:30:af:7d:
81:1a:bd:b8:15:b1:7c:27:f7:cd:83:d4:fb:0c:78:
24:a3:90:e7:9f:46:b3:dd:e3:b9:de:77:47:1f:ac:
8a:86:1e:9d:17:9a:68:91:17:bc:d2:44:15:f7:44:
9f:44:10:1a:b4:5c:98:4e:ef:c7:10:f4:ad:48:df:
37:cb:f3:82:0d:92:a0:d1:13:83:21:99:59:86:e1:
1c:7d:0d:94:0c:6f:17:24:66:bf:28:c0:2c:03:ad:
3e:d7:d2:90:d9:2a:28:b3:9a:e3:f9:34:7d:6a:47:
de:49:70:7a:15:0f:5b:ec:33:91:8a:07:84:50:b9:
94:36:de:0f:c0:52:a1:8c:4a:dd:89:3b:a3:2d:2e:
d7:9a:79:69:ab:b4:eb:25:fb:78:94:ba:d4:a6:32:
c0:c7:13:97:a0:4e:93:bb:36:47:2c:4b:db:c3:88:
db:1c:2e:f6:d1:90:6d:44:15:ec:52:a3:60:76:82:
0b:a7:78:17:87:3b:ab:08:a1:08:05:bc:4a:58:3f:
4f:81:80:26:e3:c6:bb:c1:00:93:38:27:7c:56:66:
30:1c:39:ea:46:88:6a:3b:70:83:24:8b:a4:50:81:
83:d8:0d:48:a0:32:87:8d:e7:b3:53:54:7f:19:d8:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:81:E4:77:64:0A:F7:F9:0C:1E:E8:88:F9:C2:09:B7:F3:5C:2A
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:2c:fb:f7:67:bc:c5:1d:68:e4:8d:cf:cf:95:59:b9:5f:
8f:c1:2d:c2:a4:e0:bd:61:6e:f9:55:00:45:68:c2:7e:9e:dd:
66:69:c1:11:be:d4:de:dd:c0:e6:68:b3:d9:05:08:a9:b0:57:
53:24:b9:4f:c2:06:ea:85:03:5f:1d:34:42:50:88:9c:df:08:
f7:af:f5:5b:2d:ce:69:e2:49:53:5c:af:c7:fb:90:32:19:a0:
65:a9:a9:49:e4:dd:73:b6:07:7f:78:88:80:a9:70:f2:cc:85:
eb:b3:2f:5c:8a:e9:03:cd:49:0f:cf:10:e5:9c:12:35:26:04:
0f:e2:87:69:5f:e4:32:53:b0:bd:05:75:5d:d5:88:06:5c:ae:
32:8c:69:ea:49:71:8c:5f:96:27:dc:b3:c9:e7:c6:e6:8d:28:
63:3f:e5:67:e5:04:56:6f:5a:9a:f2:f8:20:68:7f:bf:63:a8:
c3:69:4d:be:87:d0:aa:bd:ec:d3:72:0d:27:b2:0f:9b:76:24:
74:81:c9:ad:b5:42:d9:ff:18:61:18:b4:63:de:22:eb:4f:7c:
02:b3:80:17:52:fc:3a:fb:c0:09:aa:47:34:36:a6:f8:cc:35:
5d:9b:88:1a:70:8a:1f:e7:27:1f:a8:e9:e6:54:72:b1:a4:cd:
3c:1f:e0:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbbtwPYiTGs3/9+SNQ1yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjUwNjEwMDYwMTE1WhcNMjUwNjExMDYwMTE1WjAzMTEwLwYDVQQD
EygyOTY0ODFlNDc3NjQwYWY3ZjkwYzFlZTg4OGY5YzIwOWI3ZjM1YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcPXjQk6Z9X4w1kwr32BGr24FbF8
J/fNg9T7DHgko5Dnn0az3eO53ndHH6yKhh6dF5pokRe80kQV90SfRBAatFyYTu/H
EPStSN83y/OCDZKg0RODIZlZhuEcfQ2UDG8XJGa/KMAsA60+19KQ2Soos5rj+TR9
akfeSXB6FQ9b7DORigeEULmUNt4PwFKhjErdiTujLS7Xmnlpq7TrJft4lLrUpjLA
xxOXoE6TuzZHLEvbw4jbHC720ZBtRBXsUqNgdoILp3gXhzurCKEIBbxKWD9PgYAm
48a7wQCTOCd8VmYwHDnqRohqO3CDJIukUIGD2A1IoDKHjeezU1R/GdiakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClkgeR3ZAr3+Qwe6Ij5wgm381wqMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV0s+/dn
vMUdaOSNz8+VWblfj8EtwqTgvWFu+VUARWjCfp7dZmnBEb7U3t3A5miz2QUIqbBX
UyS5T8IG6oUDXx00QlCInN8I96/1Wy3OaeJJU1yvx/uQMhmgZampSeTdc7YHf3iI
gKlw8syF67MvXIrpA81JD88Q5ZwSNSYED+KHaV/kMlOwvQV1XdWIBlyuMoxp6klx
jF+WJ9yzyefG5o0oYz/lZ+UEVm9amvL4IGh/v2Oow2lNvofQqr3s03INJ7IPm3Yk
dIHJrbVC2f8YYRi0Y94i6098ArOAF1L8OvvACapHNDam+Mw1XZuIGnCKH+cnH6jp
5lRysaTNPB/g5g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:05:19 2025 by rpki-client