Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: cSgLq3bTV3s+/31C/K+xVZPXbNTfrqF6dfQLKnBiORg=
Subject key identifier: 77:03:9F:F1:08:FC:E3:62:62:87:5C:9D:85:67:47:DE:2E:47:A6:6C
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01976BBDBCC19570B96BC1714F80AEBE53AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 00:01:26 +0000
Manifest this update: Sat 14 Jun 2025 00:01:26 +0000
Manifest next update: Sun 15 Jun 2025 00:01:26 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: Il1Odf2m87NBnDtOgkALRPcEREDk0hFifK0aI4XQMfw=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:bc:c1:95:70:b9:6b:c1:71:4f:80:ae:be:53:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 14 00:01:26 2025 GMT
Not After : Jun 15 00:01:26 2025 GMT
Subject: CN=77039ff108fce36262875c9d856747de2e47a66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:26:8b:e4:c7:35:ad:c7:ed:77:98:45:16:
8d:98:5e:1c:21:fc:07:70:10:f9:de:df:7b:fb:96:
a5:7f:a3:08:52:eb:65:99:7e:3d:f8:e9:e5:40:55:
d1:de:b2:98:27:2f:a9:13:f6:30:fc:83:bf:e5:f9:
30:9f:5b:b3:ab:b8:53:f3:0d:67:b9:78:43:16:04:
1a:f6:dc:62:d1:ea:6d:c7:52:32:47:9f:b1:d7:2f:
ed:0d:71:47:42:11:8c:b7:6c:f0:09:4f:ed:51:1e:
6c:36:eb:09:05:c8:2a:74:68:56:8e:e9:84:8d:5a:
af:96:dc:d0:58:bc:dd:d6:36:62:f6:c1:4c:d5:c1:
3a:62:51:15:6a:f4:f7:de:a2:f4:00:fd:d9:40:87:
c1:a5:64:f1:3e:33:49:75:02:dc:8a:e3:14:bb:11:
47:18:39:66:f7:30:01:ac:79:0c:16:d4:d9:57:d5:
0a:18:ca:f5:46:17:25:db:2c:60:59:96:9c:55:da:
ba:a8:fa:6c:af:e2:a4:f4:7f:93:28:13:c6:d6:4e:
2c:b5:ac:13:dd:e7:d8:f4:c1:75:ba:fb:d5:96:58:
91:65:d3:23:75:40:db:35:26:18:c5:a2:2e:1d:4a:
ee:50:9a:94:fb:e4:78:7f:6a:28:04:e7:b1:eb:dd:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:03:9F:F1:08:FC:E3:62:62:87:5C:9D:85:67:47:DE:2E:47:A6:6C
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c2:bb:8d:7d:d7:57:7c:66:a4:1e:3f:cd:56:2b:77:b0:e3:
b2:cf:d7:1b:c6:2b:a9:da:0b:ab:3b:0b:b6:91:4a:59:0c:08:
a4:06:c3:de:4b:8d:a4:11:64:dc:b3:47:a8:dc:73:95:60:07:
84:37:51:12:e9:a2:3f:04:70:5b:78:e7:82:bf:d4:6b:08:f3:
8a:72:c0:e0:62:19:ce:51:76:1e:7b:71:0f:20:13:39:d5:49:
b6:9a:43:cd:5c:2b:7c:70:57:8a:63:f9:38:e7:45:c7:e2:56:
cd:9d:19:dd:00:4f:ce:c0:fc:2b:41:19:3a:4d:e6:db:4b:45:
1d:92:80:a9:e0:37:be:8e:0e:5a:b6:4d:ae:ab:65:73:56:3c:
3c:c6:d9:02:d3:2b:d3:ea:37:0e:ef:ca:65:a0:24:7b:3b:cf:
29:d8:af:bf:9c:28:62:72:76:3b:47:55:5e:a6:a5:12:3b:35:
6f:9b:bc:08:50:08:5b:53:65:c8:cf:25:e4:8f:f6:8c:7b:4d:
1a:74:6d:3c:9e:c8:de:e7:d1:ce:98:12:32:91:cf:aa:fc:16:
2a:bd:b2:0a:ed:ee:25:06:fd:61:8c:ac:1d:9b:01:84:e7:67:
60:77:f7:c0:f4:93:a2:e3:c5:28:4e:32:01:04:db:49:70:01:
1c:d4:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:41 2025 by rpki-client