Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: Gyp3mblxcxTK91ARm2+e1MGzc+6G3xaAbB0WqxyOSNI=
Subject key identifier: D5:F7:43:FA:DC:85:53:69:39:46:5D:B6:99:FB:E5:6C:C6:9B:7F:87
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019767E0498306641AA5C5029FE6592F2D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 151F
Signing time: Fri 13 Jun 2025 06:00:41 +0000
Manifest this update: Fri 13 Jun 2025 06:00:41 +0000
Manifest next update: Sat 14 Jun 2025 06:00:41 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: 4cMyD4dBUiiAvAuQZ86cEfINHIOYaCA3/pCDSr3O/m8=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:49:83:06:64:1a:a5:c5:02:9f:e6:59:2f:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 13 06:00:41 2025 GMT
Not After : Jun 14 06:00:41 2025 GMT
Subject: CN=d5f743fadc85536939465db699fbe56cc69b7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:0d:f0:58:4d:93:09:3f:da:c1:99:1d:91:
aa:f9:63:79:89:74:48:b0:9e:fd:2d:55:3d:bf:f5:
af:8a:37:04:04:c8:e4:0d:a9:25:1b:98:fd:38:b7:
ad:7d:bb:7a:5d:f3:2a:0e:3e:51:83:d9:88:e5:16:
08:db:f1:4d:05:4a:d6:c3:a8:d7:f4:ab:b2:99:9d:
cc:0d:64:14:16:f4:51:86:8a:3f:b7:46:be:93:44:
3a:04:e4:a5:65:b7:b8:72:48:e1:af:3b:67:13:06:
1e:78:02:fb:d4:1a:64:a2:14:97:34:2c:64:62:02:
fe:0e:f9:a6:a6:43:ca:bb:22:a7:16:69:c3:b8:b1:
4c:b1:01:ef:0a:68:75:67:c4:1e:3f:c6:38:14:10:
6e:47:5e:dd:57:2b:d1:0e:80:36:62:51:5a:19:93:
75:55:35:45:98:e7:40:5d:73:d2:df:4f:2d:c4:66:
b0:a8:44:45:65:f8:b6:df:fd:9d:ec:e5:1a:df:a0:
be:4c:2d:22:38:8f:7b:b4:4b:a6:7a:f1:b9:78:e8:
22:51:29:64:54:36:bf:ed:75:0a:95:60:c6:c6:71:
53:52:09:1d:f2:2d:de:b7:2c:01:69:94:4d:d9:b2:
cf:f3:b7:fc:68:72:83:ab:3b:e2:d1:30:82:d2:f8:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:43:FA:DC:85:53:69:39:46:5D:B6:99:FB:E5:6C:C6:9B:7F:87
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:7b:21:88:81:27:35:2b:f6:a8:2b:df:8b:2b:5c:3a:73:
07:1c:99:bc:97:a1:fd:d4:36:87:a0:41:9b:e0:d4:26:4c:50:
30:59:5a:75:5c:43:75:93:32:ff:f5:8b:33:d9:27:5c:31:b1:
2d:8b:af:a9:ef:f1:e4:7e:a8:9a:93:51:77:9a:4c:0d:b9:29:
8e:09:72:b8:36:02:81:fa:4c:16:65:ac:c0:77:98:eb:f5:1f:
5b:88:e7:b8:e9:41:6e:97:34:64:6a:40:b3:4e:4f:d2:13:b8:
67:2d:9f:b9:fd:e0:9a:1e:b5:bf:53:bd:63:c2:97:71:c3:84:
42:84:f3:fb:f1:32:e6:c7:98:6a:7a:12:f3:6f:c3:5e:15:02:
34:1c:fb:7b:c9:99:2d:eb:f8:4a:a4:f8:e1:d2:6e:ad:35:d4:
fc:43:42:a5:45:72:be:0c:68:76:38:22:39:11:5a:cc:32:2b:
f8:94:60:b4:b9:bf:f4:da:5e:fe:85:ef:6d:25:cb:7f:a5:86:
16:a0:ec:88:35:59:a1:60:c7:3a:bd:93:dd:5c:2c:98:bf:55:
b0:3b:1c:a9:ab:fd:ec:42:a8:25:7f:54:d6:85:f0:2c:45:48:
6b:c3:42:4d:b9:87:f2:53:46:d0:5e:c6:ca:45:c2:84:70:d0:
6c:e2:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:09:26 2025 by rpki-client