Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: wbA4VkJuuxg4InDvKfmxWXHeyesb+6YpcyVPiHDzVYU=
Subject key identifier: 50:03:76:92:83:0F:83:5E:A9:3D:D8:F4:57:82:21:20:D8:E9:6D:B2
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01976026F28860E88C114DAEEDAD8349431A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 151B
Signing time: Wed 11 Jun 2025 18:00:54 +0000
Manifest this update: Wed 11 Jun 2025 18:00:54 +0000
Manifest next update: Thu 12 Jun 2025 18:00:54 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: WPNBR7Aw2befhlyYGyVGRBCggCRHMxU+idpyhDFSG+c=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:f2:88:60:e8:8c:11:4d:ae:ed:ad:83:49:43:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 11 18:00:54 2025 GMT
Not After : Jun 12 18:00:54 2025 GMT
Subject: CN=50037692830f835ea93dd8f457822120d8e96db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:24:64:be:8c:74:9f:f6:fe:3e:f0:97:b4:
67:e1:8d:51:57:70:3c:c9:2d:cb:02:2a:3e:5d:dc:
ab:93:d4:23:a5:c9:86:22:60:1f:36:17:81:41:88:
2a:df:87:bb:d0:cf:78:ab:ce:07:94:51:6d:f6:08:
59:67:65:f6:3f:b1:c7:b2:db:01:d5:e3:d5:5d:3f:
d5:78:d3:15:6b:2d:82:88:65:30:e0:c7:39:22:17:
c4:53:03:6b:6b:14:70:0f:4d:00:19:4f:fa:22:88:
9a:2c:1f:cb:d7:a5:b3:23:d1:cc:88:ca:53:55:c1:
bd:b6:1c:90:6f:6a:95:2b:00:d2:74:c5:40:98:c0:
c2:3f:15:7e:a9:ee:6a:96:90:a1:86:35:c6:ff:43:
6f:ad:f5:29:49:86:79:60:c8:5e:6f:b8:e7:66:b7:
3d:71:19:f6:0d:e0:83:4d:b7:de:07:ff:95:c1:b5:
18:ca:aa:aa:41:50:0e:70:98:5e:b7:0b:ac:7f:e1:
a8:82:09:c7:e2:c6:9c:e1:2c:11:01:6d:6c:c2:c6:
d6:a1:b1:78:f9:d8:df:7d:cd:f7:10:fa:7f:ce:df:
41:72:c3:67:e3:4c:76:e6:5b:b8:46:c3:ea:b1:65:
ef:b2:fb:74:ae:61:85:11:8d:bc:4e:69:37:62:d5:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:03:76:92:83:0F:83:5E:A9:3D:D8:F4:57:82:21:20:D8:E9:6D:B2
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:01:a0:5f:d3:cb:9a:65:39:26:a5:42:23:5b:79:d9:5b:ce:
5d:d4:e9:aa:58:40:a7:ca:12:39:38:d4:f0:5b:75:55:4d:f8:
c9:a3:be:29:9a:bd:88:35:48:25:2f:d3:b4:05:ec:3e:3e:60:
cf:fd:f9:61:59:b1:2e:41:fa:56:3b:09:8b:37:77:97:df:ae:
d1:9a:32:4b:05:85:f8:d8:f2:81:9b:e7:1c:9c:ba:6f:81:dc:
e1:30:52:07:0e:b3:ec:f8:30:b7:c1:42:02:8e:df:e6:82:d1:
c3:c7:e6:a7:92:a9:fb:c9:04:72:4f:6a:48:5d:31:0e:10:1d:
1b:4a:9d:05:25:47:ed:fc:c0:21:3e:72:f1:ac:8f:01:f7:49:
28:88:d1:cc:d4:0b:31:3c:d0:d3:e5:d6:a8:3a:44:61:1a:38:
87:6a:c5:f3:e6:8a:11:01:9b:74:54:c9:b5:f9:f5:83:0a:58:
a5:dc:3b:43:eb:c6:07:50:a1:9c:fb:69:95:67:60:96:51:2a:
99:02:09:a0:60:5d:61:fc:e0:11:21:b9:21:db:de:9c:9b:14:
5f:cb:8f:ce:28:e7:db:ce:97:3c:e5:2c:33:4a:28:07:ef:a2:
34:f4:41:12:6c:e0:9b:3b:7c:24:86:45:0c:03:69:49:27:02:
8e:f2:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:11:25 2025 by rpki-client