Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: eITcrX5YgNlaMnj8wCOjq95bYxf3jYWyFzDvJIiy8CY=
Subject key identifier: 2E:65:6D:52:91:F5:39:94:A7:04:5F:DB:DC:B3:43:23:AD:D4:70:28
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0199228C287AF4514021FC179FC5322ACA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 13B2
Signing time: Sun 07 Sep 2025 05:00:34 +0000
Manifest this update: Sun 07 Sep 2025 05:00:34 +0000
Manifest next update: Mon 08 Sep 2025 05:00:34 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: 3DeMjJValve7RRJMH/so9AbPxI1bUBygR0mebP71EJY=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:28:7a:f4:51:40:21:fc:17:9f:c5:32:2a:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Sep 7 05:00:34 2025 GMT
Not After : Sep 8 05:00:34 2025 GMT
Subject: CN=2e656d5291f53994a7045fdbdcb34323add47028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:16:0e:f6:c3:2e:e5:54:66:f2:e8:d0:95:
f8:36:0f:51:3e:fe:23:8e:bf:82:9f:5c:5b:16:a6:
51:1a:ac:a1:6b:51:ef:c5:a2:5d:b9:c1:df:17:b6:
30:c1:43:c6:1f:6f:34:87:4e:79:b6:ef:b2:45:9e:
03:9c:48:b0:2f:38:96:cc:2d:68:66:14:4c:9b:c3:
15:da:cf:93:93:cb:00:77:d6:46:a5:5d:11:d4:ed:
70:4f:f3:2a:78:9b:ed:c8:f7:94:44:87:f0:35:c5:
fb:67:20:23:ca:e7:e5:0a:1f:e7:d1:ba:10:2e:38:
e7:6e:da:55:71:16:31:0c:41:55:8d:85:a2:f8:6d:
fc:1f:5a:9e:26:38:e3:11:1c:99:c0:39:c6:7a:2c:
f8:9e:82:a6:ec:87:a9:cf:e0:1d:5b:a9:aa:54:20:
77:0d:74:c0:83:78:4f:6e:14:2d:59:98:80:a0:b9:
25:80:29:a5:d2:82:2f:60:27:c1:14:9a:04:e3:6e:
06:99:3f:ba:90:f0:04:37:ee:2d:7b:61:91:01:e6:
0d:05:0c:55:f5:83:47:a6:39:ee:b8:32:42:64:66:
7f:f7:b9:30:8b:e4:cd:9a:29:07:6f:3b:da:b7:1a:
c1:4f:ec:c0:02:a7:f2:d7:36:ae:ca:70:c1:59:97:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:6D:52:91:F5:39:94:A7:04:5F:DB:DC:B3:43:23:AD:D4:70:28
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:01:19:50:4d:ec:da:ba:5b:cb:f8:56:d9:8c:6d:4c:10:03:
d3:78:48:e2:3c:f6:12:c2:fa:63:98:98:7a:61:9e:ac:f7:50:
7d:17:5e:e3:83:62:34:c9:0c:75:99:36:41:80:6f:66:7a:cc:
d0:db:2e:55:87:7b:94:f3:fc:d4:6f:ac:7c:fb:0f:d4:fe:d3:
30:3d:e2:60:25:cf:35:20:a4:94:a6:3f:4f:6a:b1:28:67:3e:
4e:91:34:b2:dc:db:81:46:2a:d4:7c:48:95:d5:de:e5:a4:e8:
7d:67:f8:61:68:8e:cf:03:c9:f6:da:bd:55:28:92:3b:74:c6:
d8:f7:b9:13:f6:89:da:77:d2:1f:22:c3:59:b6:0b:d3:94:9f:
99:6e:d1:5f:bc:5a:8e:80:98:09:a9:c6:41:d4:94:ad:b5:46:
c5:af:76:4f:f0:3e:0a:05:ff:7d:69:e4:da:95:06:50:0c:83:
11:86:42:d5:23:69:90:e2:8d:69:3b:8c:83:54:23:ca:6f:17:
37:c3:3a:70:69:26:26:f9:a5:f2:bc:12:c5:df:37:9c:7e:aa:
7d:5c:3e:17:e8:81:cc:f4:5e:a5:6a:ff:77:d0:a0:e1:74:9e:
b0:ac:3d:24:f8:1e:d5:e1:98:eb:a4:63:82:25:5f:c2:58:e6:
0a:32:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:53 2025 by rpki-client