Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 2wKgAzMMh5ghyIBLnm0YZ9nB+jwUcTfnKAV85aXCsJU=
Subject key identifier: 35:37:2E:EF:14:4D:23:2E:6D:83:40:99:41:DC:DC:6C:6D:E7:54:74
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01976F99F18D236450828E0952D508179EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 18:00:49 +0000
Manifest this update: Sat 14 Jun 2025 18:00:49 +0000
Manifest next update: Sun 15 Jun 2025 18:00:49 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: pyw/YjP0dCz/EHL2bfK9vsFNioZ/UTAi1Q+zSolxXag=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f1:8d:23:64:50:82:8e:09:52:d5:08:17:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 14 18:00:49 2025 GMT
Not After : Jun 15 18:00:49 2025 GMT
Subject: CN=35372eef144d232e6d83409941dcdc6c6de75474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:9c:88:a6:68:2c:a0:ef:40:a8:22:3a:11:
d0:fb:a1:2a:3d:d0:bb:0c:66:9a:a8:ce:3e:8a:2d:
47:92:80:4f:03:2e:b8:38:3a:db:5b:49:f4:56:2e:
2d:d2:ab:ff:1f:3a:c5:e6:65:28:e6:b0:7a:d6:87:
f2:84:f0:0b:cc:a8:87:7c:66:f3:c6:28:b2:f5:e8:
53:72:f1:6b:df:27:c4:67:90:d0:a5:c7:f9:c0:1e:
2c:17:6e:4c:28:b0:40:ae:c8:68:69:4a:39:c1:cf:
e8:05:96:60:ec:4b:5b:90:cb:63:36:84:b1:02:dc:
cf:4f:ae:11:ed:0b:b7:20:37:bc:aa:7c:fb:68:b4:
9c:7a:1c:f8:8a:f6:5c:5c:38:ef:d1:8c:6f:34:24:
fe:db:e2:74:95:ff:94:29:ae:db:08:58:15:a8:ce:
72:ff:02:a9:62:45:18:48:bf:03:a4:f7:35:29:8c:
d5:03:fe:fd:0e:9c:e6:a3:c1:f5:66:69:9b:fd:79:
8c:e5:61:18:7d:5f:39:e0:dd:51:ca:c8:ae:fd:cc:
66:c3:8b:2e:7f:18:ef:e0:79:63:8c:8b:17:b1:31:
d2:bd:0d:0a:a2:27:09:32:f1:c5:05:fa:a4:d1:66:
6c:62:df:d2:b7:85:33:ce:71:62:02:01:d4:93:74:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:2E:EF:14:4D:23:2E:6D:83:40:99:41:DC:DC:6C:6D:E7:54:74
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:71:bd:41:ba:ac:68:1a:c2:09:f5:48:5f:d4:7a:91:06:
23:5a:86:84:bf:98:62:a1:71:86:54:08:bb:41:f3:fb:ce:ae:
8a:cc:7a:d5:36:19:b5:f8:90:ed:69:9a:83:77:48:a3:c2:b6:
d1:09:70:df:50:80:e1:40:ce:e3:73:bc:cd:4c:82:2d:5f:41:
9d:6f:58:4b:ae:f7:7b:de:b5:2a:1a:55:93:a9:cc:d8:19:a8:
b4:ad:55:4d:36:34:ee:82:7a:d0:da:1b:90:cb:8d:e6:b6:ae:
35:1d:9f:6c:34:71:53:43:93:e7:5f:82:3f:ff:73:f0:75:bb:
bc:30:a3:e5:6b:fa:72:1a:ef:08:0f:0d:87:3a:76:96:b0:c1:
f2:3a:af:d6:aa:eb:bd:54:a7:ad:c3:02:8b:f3:6d:a1:bb:c7:
0b:04:c8:a5:20:63:29:f7:53:f8:ba:d7:60:64:35:6f:f6:32:
ec:10:69:66:db:73:87:e9:97:70:f8:58:e7:09:dd:c3:c5:41:
76:9b:9f:80:d9:c8:1c:71:60:79:8e:87:c2:29:3f:9b:34:0b:
a8:17:88:38:eb:51:b9:fc:b9:2e:71:33:3d:10:de:f3:2d:e6:
43:17:96:7f:8f:e9:5e:c4:e3:c9:94:24:83:19:9d:59:e6:f1:
cf:a8:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:03 2025 by rpki-client