Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: 8I9Gx1HFTH6Hr79dqw1Ds91gsM19YMtbPNsat7Fu5/o=
Subject key identifier: 9C:4B:7F:CE:61:83:89:00:0F:01:62:4B:D7:3B:2C:AE:A7:C4:48:57
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0197684E69B7F7561302A1F02C7ECEEF741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 12CD
Signing time: Fri 13 Jun 2025 08:00:58 +0000
Manifest this update: Fri 13 Jun 2025 08:00:58 +0000
Manifest next update: Sat 14 Jun 2025 08:00:58 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: 2TtBUCavmC6V22WSFTK20XLZp1oD7IFIoFWwNGSS22M=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:69:b7:f7:56:13:02:a1:f0:2c:7e:ce:ef:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Jun 13 08:00:58 2025 GMT
Not After : Jun 14 08:00:58 2025 GMT
Subject: CN=9c4b7fce618389000f01624bd73b2caea7c44857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:18:d4:eb:e3:08:35:b8:ff:c5:5a:7b:7d:
75:b9:e3:be:dd:97:14:cb:b4:c9:b7:99:8b:df:3f:
1b:42:cc:6d:c6:be:ec:da:22:a3:ca:66:45:a2:e0:
0f:bf:9a:35:3d:ff:1e:37:97:18:29:e6:73:d3:bc:
70:b1:a4:b6:34:b4:c1:f7:44:af:2a:c8:ad:fb:7c:
05:d7:6f:d8:e5:9f:e4:fb:72:ae:23:e2:52:ad:b6:
8a:4f:68:6f:11:3f:fc:88:71:bb:52:24:bc:37:51:
c3:4e:92:81:28:14:57:1a:6e:57:e9:73:ae:e0:ec:
74:44:d8:60:80:f2:b9:d6:52:5f:f3:24:87:11:ab:
42:38:93:16:22:8d:67:5c:d9:c8:af:c2:52:4d:a8:
df:e1:9e:c4:b6:01:81:8e:39:db:cf:e7:f1:27:4b:
72:c5:5e:4a:72:08:4b:69:d0:9b:e0:6b:49:62:29:
90:b3:c9:65:ec:ba:7f:80:03:9b:94:ae:67:e9:ca:
fd:97:07:34:98:c1:1e:c1:2d:61:0d:6b:2f:d3:98:
dd:82:ca:ee:20:0a:90:66:fa:75:1e:ec:93:6b:b2:
8a:03:90:bb:48:48:55:0b:71:b8:bf:71:6b:c9:8f:
6e:44:88:ba:f9:b7:3e:3c:8b:b6:2b:d3:67:86:2e:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:7F:CE:61:83:89:00:0F:01:62:4B:D7:3B:2C:AE:A7:C4:48:57
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2b:07:e8:08:94:13:f1:c4:e3:7d:6f:2a:9d:aa:7d:c8:74:
f5:d2:8e:16:13:6d:b5:d5:28:49:56:0a:7c:12:36:5b:61:e4:
0b:fd:30:58:7a:50:9b:7e:c4:29:05:cb:11:23:4b:dc:61:a1:
7b:69:33:8d:6e:b1:a8:a9:ef:86:3b:55:61:23:da:e8:df:09:
0e:ca:90:5a:94:98:e8:78:e5:a7:fa:a3:cd:87:9e:b3:2d:15:
bb:ae:30:e8:80:b1:0d:29:ce:b0:70:89:a7:4e:f2:13:15:d3:
2c:7a:76:7c:77:ed:7d:2f:86:78:b6:f6:9d:2a:d3:75:11:8a:
5f:ba:50:35:ff:0b:12:1c:67:a0:e5:9a:04:fb:84:68:a6:3f:
c0:03:35:5b:93:6c:19:ad:e6:11:1d:8f:78:76:a7:a8:fd:08:
0b:d8:d1:f1:15:7b:0a:39:90:a4:8d:d1:6f:04:c3:68:db:53:
6c:b1:ad:bd:9e:ec:68:7b:75:79:93:ea:f8:2b:08:93:4b:0d:
bd:8b:9e:bc:92:e3:cb:89:0b:ac:0d:f9:09:fd:7b:c3:f3:07:
43:e2:54:9c:06:94:21:01:16:10:de:1a:b5:6b:f1:74:8e:63:
b5:ef:81:7b:2b:25:81:75:6a:80:53:fe:32:06:29:95:0a:be:
d1:1d:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:43:26 2025 by rpki-client