Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 1gYhaf6//uxMcFoDoL5ad0GJZNHJkdVNghMkG0mj0J0=
Subject key identifier: 08:44:3A:88:6E:7F:5F:45:9A:8F:67:ED:20:5B:F5:D3:2F:B2:67:27
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01975A5BA129A0B3682AA0FED5A00C31560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1518
Signing time: Tue 10 Jun 2025 15:00:43 +0000
Manifest this update: Tue 10 Jun 2025 15:00:43 +0000
Manifest next update: Wed 11 Jun 2025 15:00:43 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: cqgSeEpHUixN8y+LztdyUXlOzC3pkBeMjERXfY0XsOw=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:a1:29:a0:b3:68:2a:a0:fe:d5:a0:0c:31:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 10 15:00:43 2025 GMT
Not After : Jun 11 15:00:43 2025 GMT
Subject: CN=08443a886e7f5f459a8f67ed205bf5d32fb26727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:bb:3f:d8:8e:2a:d1:99:b2:a1:35:5a:3c:
1e:41:a5:47:11:d6:12:c1:0e:be:a4:8a:2a:ec:35:
af:e3:28:13:df:97:37:92:31:6c:e9:f7:5a:bd:68:
3e:4d:9f:9e:e0:c1:2f:d0:9b:9b:b8:6d:5b:90:9e:
50:7b:3f:92:01:dd:89:1e:f4:73:c8:18:e3:f8:5a:
00:25:71:66:be:0b:23:e7:4f:57:41:c6:3e:47:28:
1a:88:70:53:96:a3:05:63:16:e5:1b:45:5d:e8:00:
1e:e9:3f:18:be:31:fb:bc:fb:b2:71:00:be:08:f0:
de:5c:f4:63:7c:4a:dd:0c:fd:c1:ce:7a:80:5f:27:
d8:c0:1c:fd:f6:c7:09:ea:b3:5d:fc:48:6c:ff:c3:
43:93:85:9e:85:21:69:21:e8:35:3d:dd:7a:74:4e:
56:0a:80:93:92:df:6d:c8:b0:7b:86:b4:d5:07:c5:
0b:1b:b3:9a:91:9d:da:37:20:4a:ee:a4:28:24:c7:
61:94:c6:f3:a3:47:59:33:45:8f:f6:44:22:8a:fe:
05:d1:db:14:96:fe:e9:96:7b:8d:23:37:6a:4f:c2:
c9:e7:0d:d5:ae:bb:36:93:c8:44:9d:ef:b0:cb:31:
de:51:50:35:9f:b6:17:91:5a:65:fc:0d:e9:b7:a6:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:3A:88:6E:7F:5F:45:9A:8F:67:ED:20:5B:F5:D3:2F:B2:67:27
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c2:b4:0d:85:26:a0:c3:d8:ea:ac:14:f6:98:96:ad:9f:b2:
f0:06:c3:77:d0:86:5b:54:84:cf:bc:26:52:2a:44:c4:40:24:
4c:ac:2c:21:52:5f:5e:89:d3:14:3a:ce:cf:2e:8c:88:e7:d7:
36:c4:ab:45:36:8c:3b:86:97:5d:b2:09:17:da:dc:a3:9d:6b:
b1:20:6e:0d:13:0e:b9:bf:ea:95:21:80:a4:1c:e0:d9:85:3d:
51:1e:89:4a:af:5b:54:d2:29:36:09:60:61:17:c4:83:bf:76:
f7:17:87:5c:bd:cc:c7:12:1a:ac:aa:00:c3:ec:f0:06:53:a7:
ce:52:e4:c8:d0:a1:64:52:71:e2:49:76:fa:74:38:bb:8e:ab:
31:c2:2c:de:54:7a:fa:d0:9c:85:66:cb:5d:47:e7:61:28:4f:
a4:a0:4b:4c:c9:ba:9d:3e:14:76:a1:00:d6:1f:d1:54:56:be:
d3:88:21:8f:a5:78:89:7d:a1:14:7e:8e:67:c2:3c:8c:b7:c8:
70:79:2d:de:ac:7a:89:69:2c:f9:83:a5:25:1c:af:08:21:58:
01:1e:a4:81:ec:28:6d:6a:c2:21:e7:a4:51:ff:11:9f:89:8e:
24:67:3b:f8:2d:65:5b:03:0b:fd:2e:e4:ed:a8:38:bb:78:45:
61:50:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:38:33 2025 by rpki-client