Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: c8cgkoOn2JdCuhhxUnFSGD50fW615taXLP1hR4vk1HY=
Subject key identifier: 35:84:5F:39:F4:5A:CF:84:DD:03:14:C0:83:61:63:9D:C5:42:7B:31
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0197567ED6E49201A7ED5ED03891B0ECE372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1516
Signing time: Mon 09 Jun 2025 21:00:42 +0000
Manifest this update: Mon 09 Jun 2025 21:00:42 +0000
Manifest next update: Tue 10 Jun 2025 21:00:42 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: eHr388F6oDb5MlaIMBNDesRAvb2iz4bUrjwEver4dPU=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:d6:e4:92:01:a7:ed:5e:d0:38:91:b0:ec:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 9 21:00:42 2025 GMT
Not After : Jun 10 21:00:42 2025 GMT
Subject: CN=35845f39f45acf84dd0314c08361639dc5427b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:f0:bc:68:7a:3f:12:17:5e:ad:72:b9:fe:
85:d5:14:8f:85:38:b6:ab:c2:28:e4:d0:f7:b3:97:
25:ef:79:e6:2a:8e:2b:09:df:1b:ba:0f:0f:50:58:
7e:ed:86:29:18:1f:6d:4c:d1:ac:bc:69:77:36:00:
ce:f6:28:58:f3:8e:6b:63:4d:1d:9b:49:bd:45:19:
fa:55:1a:e6:66:ea:e9:5a:87:24:2a:60:31:d9:07:
82:84:bf:e0:60:98:d1:50:03:7a:fc:80:7f:fd:7c:
15:a8:2f:49:1e:8d:ba:be:ea:a2:25:0d:37:9b:e8:
2c:6b:de:87:31:d0:c7:8a:ed:75:0a:82:9f:d2:94:
fb:5e:1d:7e:78:75:a7:6c:ae:b0:af:4c:c7:b1:03:
31:52:2d:19:47:bc:1e:ff:f1:e8:34:88:63:74:88:
0c:c3:43:1d:13:6f:c0:49:d5:b1:ed:99:a2:c6:34:
c9:59:1f:ee:27:7d:b6:81:41:4e:33:60:bc:38:87:
51:42:77:1a:ce:d0:f9:cb:58:35:ea:69:2e:3e:73:
77:3a:1c:17:23:32:1c:b4:81:cb:b7:15:84:88:d3:
a6:3b:37:f8:8c:4b:4c:3e:09:fd:4a:2d:bc:f5:ed:
3c:8a:6d:e2:4c:dc:12:c3:92:d2:15:1d:7a:71:72:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:5F:39:F4:5A:CF:84:DD:03:14:C0:83:61:63:9D:C5:42:7B:31
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:0c:85:b3:4c:e1:9a:24:37:d8:d3:e2:e5:ca:c9:9f:41:
d7:ce:e6:a8:a7:e4:59:ff:90:f7:48:f5:7b:10:b7:42:1c:2d:
a4:04:18:b4:59:8d:56:06:ec:ac:1a:d9:35:f1:da:95:0a:4c:
0c:18:4f:66:d5:59:22:2b:71:23:1f:eb:d6:85:97:a6:6a:dc:
e7:dc:5a:0c:e3:fa:f6:13:14:42:9e:8f:36:fd:c0:43:2c:88:
88:a2:c0:af:6f:e1:44:10:f9:de:82:f0:1c:03:76:2c:f6:bf:
b7:d6:de:6b:57:d0:81:8b:86:df:9d:3d:9a:eb:02:a4:5a:ff:
5d:d9:fc:4e:5e:e3:ee:a6:91:ce:7e:b8:cf:c9:d1:62:d7:7f:
9a:1f:cc:7e:cb:1b:11:11:b7:43:3c:e5:af:ea:9b:f0:ea:9c:
07:45:36:60:b2:08:5f:6b:8b:f1:d4:00:b0:f4:7f:1b:70:12:
e9:6b:03:7c:f5:e8:b9:6b:07:b4:ef:ff:3d:15:22:96:46:cc:
82:28:16:25:ec:7f:75:2c:b6:97:fb:93:25:55:41:c0:bb:84:
73:ed:c6:7c:0e:78:3b:ad:4d:85:92:76:f8:4e:18:54:5b:b6:
94:2e:53:b0:9f:e6:3b:a4:5e:09:2b:40:d8:6d:9f:d7:13:c1:
5d:99:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:52:17 2025 by rpki-client