Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: L15MTCpvwiz3ZkgGmqM7be3y1WAvmP8AqYjJhQpJnkE=
Subject key identifier: C7:A3:34:B1:B4:94:4A:81:B6:B3:D2:1D:4A:34:5B:F0:22:F0:43:64
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019873E1EF8C5F4E21B852A5C7AD511FEFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0CF5
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: M6hSCz+QhubHyPHM3wsMq1cjmYUL9Jg3maYiRmwPOyQ=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:ef:8c:5f:4e:21:b8:52:a5:c7:ad:51:1f:ef:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=c7a334b1b4944a81b6b3d21d4a345bf022f04364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:4f:9c:71:3a:f6:31:1a:58:76:58:d0:e2:
0d:42:15:c9:fa:92:da:ad:fe:5a:9d:72:3c:df:d1:
41:2a:09:19:47:2b:9f:ec:dc:96:6d:88:06:28:45:
25:57:1a:73:b1:47:85:85:4a:36:55:dd:3a:2a:89:
a8:49:23:3a:b5:19:81:85:22:fa:68:33:96:2a:9f:
c6:ff:ba:79:4f:0e:51:da:27:ca:44:f2:73:95:0f:
ee:0d:dc:4f:1a:dc:88:a6:77:68:ac:b0:1b:56:26:
b6:d9:fd:40:ba:d5:52:cb:92:a1:fb:6d:33:e6:55:
8e:97:7b:a8:2c:36:54:49:08:36:c6:02:c8:13:88:
ea:ba:c1:92:c1:aa:0f:c7:91:bc:1e:82:5d:dd:cd:
e6:c0:31:ee:8b:e3:68:e5:64:e8:6d:0c:a2:bf:18:
2d:c9:a5:60:96:f7:1b:5c:69:b7:0b:74:93:f8:fe:
63:0a:22:af:fd:06:41:5c:c9:24:a4:9d:d2:f9:d0:
c6:e7:73:ad:b9:32:eb:93:8e:cf:69:45:d3:f4:a2:
e5:6a:8b:bf:ff:10:1b:ae:a6:d4:73:35:7c:ee:7c:
b5:04:fc:15:e6:85:4d:01:32:24:cb:60:07:c5:05:
c1:f1:31:79:8a:d7:81:6b:e0:b2:df:a5:4f:e0:23:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:34:B1:B4:94:4A:81:B6:B3:D2:1D:4A:34:5B:F0:22:F0:43:64
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:61:d1:75:62:6e:df:95:98:9b:9c:aa:0f:5c:82:90:80:
94:36:d8:69:a5:48:01:ed:ba:bf:aa:51:aa:2f:b2:46:1c:34:
8c:31:91:cf:fc:b7:ac:99:c2:47:1b:7e:f5:9a:5f:93:d3:17:
0d:e2:17:97:34:0e:9d:c3:36:d4:f8:4b:e9:67:1d:46:6b:ca:
90:57:c6:cb:8a:43:b8:23:24:50:ef:f9:3d:4e:bf:de:e2:07:
91:c6:97:57:6d:31:e9:91:f1:44:92:3e:02:a2:4a:46:a1:f1:
5e:7a:ac:8b:66:b8:81:c2:35:40:a1:1b:f1:97:78:d0:51:12:
05:3c:ea:bf:da:e3:ab:e9:ef:13:80:10:25:cc:e3:41:ea:87:
f0:4d:81:81:49:d1:4a:3b:f9:0c:76:4c:ea:ff:0e:f0:73:ee:
8b:f8:fc:00:43:36:1e:c5:ed:74:f4:06:78:71:09:af:47:ff:
e6:18:ac:17:6b:35:f2:09:19:76:b2:a3:ed:43:15:22:ac:cb:
ec:f2:1c:85:50:1f:f3:ce:f2:9a:cf:38:aa:b8:ba:b1:32:25:
d6:62:1a:92:e6:b8:74:2c:60:47:83:8c:68:eb:0f:f4:dd:da:
9a:8d:cc:23:48:41:e0:a6:d2:ab:ed:f0:52:5a:2a:80:2b:64:
76:e8:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:04 2025 by rpki-client