Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: lbKfUQzfu7A9QjFoCB6Jkyf4jUzP4gRdG+8NlU6e17I=
Subject key identifier: B7:4A:A1:A2:FD:CA:48:FB:E9:68:24:31:F1:84:7F:2B:DB:0F:52:75
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019A232E5023C206D467521CC34063D339AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 07F7
Signing time: Mon 27 Oct 2025 01:00:28 +0000
Manifest this update: Mon 27 Oct 2025 01:00:28 +0000
Manifest next update: Tue 28 Oct 2025 01:00:28 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: J/y0RMAzfuqmrlG/o5caqXJA+oU3L3VZEFu+cH92G1o=)
2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:50:23:c2:06:d4:67:52:1c:c3:40:63:d3:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Oct 27 01:00:28 2025 GMT
Not After : Oct 28 01:00:28 2025 GMT
Subject: CN=b74aa1a2fdca48fbe9682431f1847f2bdb0f5275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:ff:a0:87:52:d3:5e:df:50:be:6e:87:0f:
19:fc:20:20:da:71:39:65:3a:29:ad:75:ad:73:89:
63:f9:54:dc:1d:21:da:1c:21:c9:3e:f1:c9:cf:8e:
c0:9b:09:a4:95:f5:06:97:dc:a8:22:7f:ae:c2:91:
1f:20:f6:2b:48:3e:4a:a6:26:79:18:8e:52:2d:96:
cd:1f:25:99:a9:6b:f9:8b:b4:6f:3b:c9:29:fe:41:
dd:39:04:ec:0b:21:8b:ac:73:31:8f:3b:bc:49:cb:
3c:71:c9:92:8e:6e:d1:a1:24:57:25:13:06:5f:67:
2c:8e:f1:0f:8a:b1:16:2e:d5:bb:f0:4c:38:c3:d5:
36:d4:00:2b:55:32:63:7e:f0:a6:e1:96:6c:35:af:
05:08:e6:a4:f6:39:85:6c:a6:93:7a:92:81:51:70:
f2:0f:9f:89:2a:77:9b:7c:3d:59:84:ba:40:17:d6:
e2:eb:c2:7e:e0:da:d7:1e:4f:d3:7d:f1:25:e9:b1:
cf:8a:b5:c9:6d:0e:6a:7a:3e:e4:19:68:ba:5d:fd:
62:63:29:e1:60:c6:f8:88:e3:c9:07:e1:52:0b:6d:
67:46:02:f6:a1:28:f0:fb:5f:be:b6:32:b0:69:8b:
cc:92:00:d4:f3:87:2c:06:15:21:db:74:58:29:a8:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:A1:A2:FD:CA:48:FB:E9:68:24:31:F1:84:7F:2B:DB:0F:52:75
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:69:d4:24:3c:06:b5:56:3f:70:f4:31:8d:9d:0d:23:c2:
31:a4:a0:5d:91:b5:ff:64:4b:92:81:96:ea:22:f7:2c:2d:20:
cd:2c:6f:2c:ef:9c:88:74:6e:e6:a0:72:26:3a:44:57:f8:16:
aa:9d:e3:a5:e8:fe:7a:49:f4:ca:50:f1:e6:96:a0:9a:ba:7f:
47:aa:df:a9:ac:7d:6d:35:b3:7d:a8:0d:12:f6:8f:d7:1b:2c:
b9:a9:34:2e:51:92:66:f3:15:6f:39:98:33:4e:b6:5b:be:c5:
99:7b:99:7c:ab:3e:e3:1e:36:33:a9:ca:6a:71:a9:29:1d:05:
c2:7c:29:3f:98:2a:c0:76:a4:0a:0f:8f:94:97:d8:ac:3e:24:
4c:16:26:62:18:b4:29:25:44:20:3e:4f:b9:a5:6d:40:68:12:
10:49:f6:d7:30:dc:24:4c:86:dd:59:73:c5:62:10:32:11:7e:
a2:26:5b:f0:eb:d4:dd:bc:63:35:20:ea:b9:5f:2b:81:fd:8b:
ee:e4:52:68:98:2c:0f:e2:ee:9c:21:62:4e:1d:1b:8c:5a:33:
79:f3:27:a5:f4:d6:9d:3f:2b:66:12:5f:92:c4:91:89:e1:54:
d6:4b:e4:bd:da:6e:77:a5:25:c2:46:64:54:16:90:8d:32:19:
d0:cb:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:47 2025 by rpki-client