Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: prHnH8sVUF6uWvaYFzuLOh2NOrZgOMAJEEUI3y+zppU=
Subject key identifier: C0:D4:80:4E:5B:AA:BE:8D:9B:C3:EE:11:C3:C9:2E:F6:2C:38:8E:5D
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 01974C9FECDC19079E9C14ADE09C992C729D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 0C5F
Signing time: Sat 07 Jun 2025 23:00:38 +0000
Manifest this update: Sat 07 Jun 2025 23:00:38 +0000
Manifest next update: Sun 08 Jun 2025 23:00:38 +0000
Files and hashes: 1: DUeztC_9OSU5_baS7RpA8PIrChA.roa (hash: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=)
2: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: WdC8DhQ7mCgUjSRaTqz0P6/wOJ03GkzXmh5GN2jByXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ec:dc:19:07:9e:9c:14:ad:e0:9c:99:2c:72:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Jun 7 23:00:38 2025 GMT
Not After : Jun 8 23:00:38 2025 GMT
Subject: CN=c0d4804e5baabe8d9bc3ee11c3c92ef62c388e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:80:94:be:bf:75:d0:33:34:40:8d:66:fd:
47:36:73:71:20:a5:b9:0f:58:aa:d0:4e:34:c4:ea:
cb:5b:a4:a3:e7:33:4d:15:0b:3a:7e:c5:5b:67:d5:
90:d0:8e:43:62:33:b1:52:ef:6e:65:26:50:58:09:
93:18:e8:5e:b0:6d:60:b5:1f:54:cb:58:bd:c0:e3:
00:86:73:f5:df:0b:f8:c0:59:7d:4f:af:e2:82:c3:
1c:14:de:35:28:30:7c:42:9f:22:b2:9c:da:33:ba:
d3:6b:c2:ff:ad:ca:7b:4f:a5:b9:61:64:40:b3:e0:
11:79:7e:86:34:4b:ae:2e:c2:a6:4c:1c:8d:d0:d0:
3e:8a:8b:3d:40:db:57:86:60:3a:fe:82:e0:28:ba:
19:dd:40:8d:84:e4:70:93:de:69:75:a3:d3:5a:6c:
a7:5e:7a:cc:21:58:8f:ed:46:93:f0:25:02:59:1b:
8d:95:fe:be:fd:bb:9a:cc:a0:3e:f1:35:2f:85:f0:
21:06:1a:f2:58:9a:b4:7d:05:8f:c2:6b:c7:60:66:
31:ba:d8:98:2c:86:ba:e0:b9:cb:ae:c9:f3:18:70:
7a:92:a4:70:b6:43:57:a2:7a:be:45:3b:55:14:1c:
d4:16:f5:d8:55:5e:1c:d9:74:ca:90:2f:32:15:48:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:80:4E:5B:AA:BE:8D:9B:C3:EE:11:C3:C9:2E:F6:2C:38:8E:5D
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:01:59:3e:40:52:01:a8:4c:04:f0:95:00:f5:cc:0b:cd:
b6:78:17:9a:4b:64:13:9f:f3:b0:71:91:ef:49:41:60:44:c0:
74:3c:4b:16:eb:06:93:be:dd:80:b2:81:08:0c:25:a6:3f:65:
5b:70:5e:4f:e6:88:a7:80:7b:23:22:19:01:9c:99:c0:23:e4:
aa:ef:1c:d2:0e:8f:9b:00:7b:40:4b:41:d6:c4:7d:73:61:c7:
90:b4:56:01:e7:f7:03:ed:ce:09:6a:cc:50:f5:1c:b6:e3:31:
3d:23:66:9d:7a:54:96:f1:73:d0:bd:c8:fd:af:26:5d:78:fa:
2d:89:58:55:9f:42:08:45:eb:8e:26:01:6d:74:65:d8:99:e0:
e1:84:f3:1d:c6:34:16:ab:02:e9:4f:7f:84:d8:4e:00:b0:ae:
30:25:1d:94:db:be:66:04:3c:d4:4d:38:3c:a8:92:e4:d9:55:
91:c1:3f:c7:35:c2:a9:fd:82:fe:3b:17:b3:6d:36:30:93:7c:
6b:00:87:c8:1a:de:68:a5:1f:0d:4d:e2:18:0e:c2:72:ae:bf:
73:67:61:66:07:39:0e:80:2f:eb:8c:f1:03:2f:b9:5b:4a:7a:
49:dc:32:75:2e:12:cc:7d:0d:9f:52:9d:12:8e:b7:41:f1:d9:
a6:84:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:38:35 2025 by rpki-client