Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: aBg+sy5eBRVprxKtAsPFrRj04vQy93yDS4INokrDlnE=
Subject key identifier: 99:F5:60:D5:F4:6C:DF:72:CE:42:C9:ED:DF:CB:A9:27:3A:B1:1D:09
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 0199345BEA7841D33118A0372568508280F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 01D1
Signing time: Wed 10 Sep 2025 16:01:02 +0000
Manifest this update: Wed 10 Sep 2025 16:01:02 +0000
Manifest next update: Thu 11 Sep 2025 16:01:02 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: 8nj9CSaz2Hv7Co4El7fAAQfBEEy8B1AogFjsTCVM3P4=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:ea:78:41:d3:31:18:a0:37:25:68:50:82:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Sep 10 16:01:02 2025 GMT
Not After : Sep 11 16:01:02 2025 GMT
Subject: CN=99f560d5f46cdf72ce42c9eddfcba9273ab11d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:e7:8b:6a:5e:77:fb:c8:c7:1c:ac:fc:0d:
a0:ac:f9:b5:fa:f4:69:97:4f:2b:43:1f:79:35:47:
89:22:ff:af:17:ca:6d:b4:5c:06:f1:7a:23:68:5f:
81:67:c0:94:7b:0e:43:47:48:de:8a:92:38:9a:96:
3d:dc:19:09:6b:fe:53:76:b1:6c:7c:a7:64:46:cb:
0c:b2:6a:28:b4:a9:f2:2f:db:5f:44:90:41:c8:6b:
81:2e:5e:a0:be:2b:1b:17:cc:6b:b6:85:44:96:75:
e4:6f:47:10:4a:60:9e:94:2b:86:50:ba:21:5b:85:
bf:bb:40:70:2e:c2:63:81:d9:d8:df:d6:b4:65:5d:
a1:00:e0:0c:e4:ad:18:7e:b4:20:32:cf:5e:7c:28:
55:49:2b:bf:f8:29:42:f8:63:79:cc:a7:72:21:80:
42:2a:ac:46:03:32:70:5f:c0:13:1d:44:35:df:a2:
1b:a8:1b:ec:31:e5:d2:af:94:1a:fc:03:09:4a:8a:
c1:da:fa:43:73:43:41:3b:83:fb:9f:d3:2d:a8:b1:
bc:bb:cc:95:42:e3:c8:e9:c9:08:d1:02:87:9c:54:
74:b6:25:e3:7f:98:59:c8:71:f1:d0:27:27:e8:81:
54:b4:90:ab:bc:80:ce:37:02:4d:55:45:46:21:bb:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:60:D5:F4:6C:DF:72:CE:42:C9:ED:DF:CB:A9:27:3A:B1:1D:09
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fc:b7:8f:da:ce:98:34:96:9d:fb:a3:fb:6c:82:ff:e0:e6:
ba:7f:f6:51:db:fe:1b:0b:05:55:b7:f6:ff:19:f3:0a:e8:1a:
74:a1:e2:66:26:5c:97:b6:51:47:81:9f:11:d0:4d:ea:bc:40:
22:69:45:ed:37:1c:a0:e5:06:c1:c9:c9:3d:f3:06:c5:7a:61:
a3:f2:12:a0:43:3f:ea:b9:60:5e:2a:dc:24:40:b1:80:3b:52:
bc:f7:1f:63:13:fc:f2:02:3b:9e:39:4d:38:9f:3d:cb:55:80:
8a:da:12:19:d5:c5:f6:f2:ae:90:d8:74:3a:3f:5e:20:79:46:
39:f2:aa:9b:f6:a2:54:70:9e:9f:12:36:9b:44:b9:8c:8d:c3:
26:2b:c5:9b:4a:29:96:1f:76:82:ac:20:ff:a6:2b:88:3d:39:
5d:0b:79:02:2f:1e:82:b7:62:42:a4:0e:f8:74:c4:06:84:ad:
a8:1d:fc:74:8a:89:77:e8:fc:f7:b1:8c:27:04:ca:3e:51:6f:
52:95:fe:43:a2:36:41:50:85:ae:80:9a:cc:3e:1f:49:04:39:
a4:b5:6b:f4:99:9a:5a:42:97:14:b9:d6:0d:4d:dc:df:69:50:
32:3d:3f:83:a1:45:04:ce:d4:1a:21:e5:19:ad:ad:f6:8a:87:
b5:34:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:34:23 2025 by rpki-client