Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: XOhnvrWGlnJRnuEjm4upkXDcwpjxipn6N1ZNyxkDX3c=
Subject key identifier: 52:92:D9:F6:9C:A5:7A:24:0F:BD:98:31:1A:D6:77:39:ED:5C:F0:CD
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0199183FFCF68C647DA5F086C2147E1AE3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0EE0
Signing time: Fri 05 Sep 2025 05:01:10 +0000
Manifest this update: Fri 05 Sep 2025 05:01:10 +0000
Manifest next update: Sat 06 Sep 2025 05:01:10 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: cwrqEt7PJIQlr9s/stTTlFlH+NDNfIs5S83p+8iVRx0=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=)
4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:fc:f6:8c:64:7d:a5:f0:86:c2:14:7e:1a:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Sep 5 05:01:10 2025 GMT
Not After : Sep 6 05:01:10 2025 GMT
Subject: CN=5292d9f69ca57a240fbd98311ad67739ed5cf0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:d8:d1:dc:90:4d:c0:27:9c:3d:59:33:90:
6e:ee:62:4e:fb:c7:2a:61:a6:d5:79:eb:da:1b:42:
c7:44:47:a7:fc:5d:6e:25:91:ec:28:84:36:64:e7:
84:be:9c:e3:9d:f0:aa:9f:20:42:c7:41:fc:34:70:
c9:9e:56:7b:aa:83:dd:6c:2b:d7:51:9d:32:6e:ad:
af:d3:e1:c6:ae:04:26:0f:1a:3f:10:db:78:be:69:
7d:3a:11:a2:45:bd:34:10:73:18:d6:e7:d8:c1:9a:
e9:fd:23:70:f5:73:a0:1d:ed:61:9f:76:0c:10:ba:
ab:6c:c0:c1:a0:5e:bd:7d:da:8c:0c:e4:2a:1f:fd:
12:5a:6a:38:1c:b0:1d:9d:1a:35:ff:27:ae:27:53:
e0:26:1c:0b:83:8d:a3:2a:84:1a:ba:b0:2e:0a:ca:
1c:0f:0b:7e:e3:3a:ce:70:da:04:fd:32:4f:e5:be:
c5:ca:9f:ee:f3:d5:b7:55:6c:f0:ed:37:74:41:6b:
ce:8a:34:99:f8:9d:1b:a9:af:92:8d:88:11:c2:5a:
9f:3c:79:6c:ed:02:d6:17:09:c7:47:e6:ed:47:d9:
2c:36:cd:02:75:87:27:eb:e2:64:ba:e3:62:ee:a8:
8d:14:7c:66:45:a2:04:b1:f7:05:d6:18:a1:80:a1:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:D9:F6:9C:A5:7A:24:0F:BD:98:31:1A:D6:77:39:ED:5C:F0:CD
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0a:02:0f:17:5b:96:d5:7e:1e:37:44:a0:ca:8f:2a:e6:18:
46:6c:fa:d0:56:cf:92:b8:31:84:31:3f:4b:b8:a6:9e:e0:66:
9b:62:a3:7a:d3:e2:b4:d6:06:69:05:75:60:5d:8b:fb:98:66:
ef:b9:c3:eb:bd:bf:d9:46:c0:4a:b9:eb:aa:03:bc:03:e6:b2:
c4:3b:f1:b7:c2:f8:04:29:72:ae:b2:1c:cc:b5:37:4c:0d:90:
2b:2b:4b:78:5d:1a:bb:77:31:d9:30:73:3b:14:83:2a:19:9c:
18:75:b6:a0:4b:d8:26:63:a8:31:09:fc:09:55:a7:9b:b5:10:
fe:e6:ef:59:20:41:95:83:70:8d:c1:fe:ac:f0:f0:31:90:71:
ff:1a:9a:a2:52:17:37:9f:bc:5e:2e:80:c9:f7:b7:47:fc:28:
f9:7c:4a:ba:22:c6:4d:5b:49:a2:84:40:97:7c:31:32:18:9a:
7b:c0:a4:f3:2c:c2:17:49:5a:ac:02:0a:d3:7d:da:f7:ba:73:
b9:46:86:af:82:cf:6a:bb:a1:cc:7e:83:02:ba:34:78:86:4d:
09:5f:04:b8:fe:3b:ef:b7:1f:27:87:36:1f:58:40:c9:fe:16:
ca:c1:27:f5:40:c5:c1:7f:4e:fb:a7:7a:cf:84:ca:2c:4a:b5:
de:be:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:06 2025 by rpki-client