Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: t/LI6tQWeFiTv392Dxce/iUWlBin7teoovcKn7jU+jk=
Subject key identifier: 30:21:54:27:9E:6B:5D:5D:04:94:97:F1:8F:44:BB:A8:1C:A4:CE:A7
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0198B1B08D72A073FF3DC902B2A48914C2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1340
Signing time: Sat 16 Aug 2025 07:03:14 +0000
Manifest this update: Sat 16 Aug 2025 07:03:14 +0000
Manifest next update: Sun 17 Aug 2025 07:03:14 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: jMgqmaEKDmAJArGQmnMRz38vcAezFQtK8m8MdZT0Zuo=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 Aug 2025 02:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:b0:8d:72:a0:73:ff:3d:c9:02:b2:a4:89:14:c2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Aug 16 07:03:14 2025 GMT
Not After : Aug 17 07:03:14 2025 GMT
Subject: CN=302154279e6b5d5d049497f18f44bba81ca4cea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:5d:b9:89:07:6f:0b:c5:3d:1f:7d:c3:49:
a6:a6:e4:b6:5a:2f:1b:25:29:d0:0d:80:91:51:a8:
6b:d0:7a:db:52:4f:a0:31:ea:66:66:af:5b:08:09:
d3:0d:e0:b3:b9:f4:d7:28:f8:bc:e9:75:ac:80:40:
4d:2e:f7:67:15:e4:44:42:15:fb:9f:7f:92:a2:99:
d0:8d:d0:c5:66:fe:92:c2:67:11:27:fb:f1:64:56:
51:d4:31:ff:cf:27:34:a9:eb:19:d7:ab:a4:64:cb:
a2:da:33:8a:95:a9:85:64:af:08:40:8c:2e:de:cd:
1c:96:ae:a8:67:26:f6:a6:37:fc:08:a5:d1:ed:f6:
25:0e:a2:95:42:3c:58:aa:53:d6:fa:63:41:75:0d:
bd:30:f2:fc:9b:6b:bb:7d:24:7e:31:24:b9:27:dc:
86:6b:91:35:67:4a:f2:76:58:6d:92:1f:7b:56:db:
c0:49:76:69:03:34:d3:14:b2:71:44:de:8b:b6:da:
99:55:5f:36:de:11:be:cd:93:44:88:98:f5:26:9c:
76:b0:a3:0b:44:c9:ca:47:22:e1:5b:8a:84:39:07:
36:fd:32:d5:0c:5c:ff:bf:7a:a9:dc:b0:85:78:e1:
c4:6f:a4:7b:ab:f7:ff:60:69:c5:0f:2e:5b:74:a2:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:54:27:9E:6B:5D:5D:04:94:97:F1:8F:44:BB:A8:1C:A4:CE:A7
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:58:e7:4b:0b:25:f5:11:2e:bb:a1:cc:c1:d3:2b:47:bb:69:
9c:92:da:20:c7:3d:85:05:89:f3:c4:dd:a0:30:98:fa:fd:55:
38:5d:e1:30:65:21:9e:e4:23:6e:79:54:99:51:95:c6:49:53:
cb:eb:c8:87:72:7a:dd:0d:46:22:af:eb:b9:6a:0e:55:f4:76:
c9:09:8a:8e:2e:82:2d:fe:bd:fe:ca:d2:cb:00:61:3c:4f:90:
28:29:4a:cf:09:e9:2b:7f:43:17:a0:d8:ff:2a:e5:fd:15:75:
6c:02:44:76:d0:9a:97:11:f6:de:0e:99:5a:e7:96:01:ae:f6:
1c:67:ce:c9:0a:30:0e:21:0f:17:87:b8:0d:c6:f0:4e:2d:53:
51:af:86:57:00:49:e3:a9:c8:68:08:72:cd:48:91:b2:13:77:
0e:77:11:fc:f0:9e:53:4a:5e:7b:10:96:38:3d:d7:16:8e:c5:
f3:fd:18:cb:90:90:af:98:1b:52:83:bf:ed:2c:fc:9b:29:5b:
bb:8f:7a:9d:d2:79:8b:53:69:c8:7d:22:cd:4b:f2:ed:e2:38:
0f:1b:94:06:9a:5b:56:0d:15:d7:a3:85:11:42:07:ee:70:0f:
37:e7:7a:74:52:b7:69:94:83:51:d6:04:43:85:81:c3:22:6a:
13:30:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 16 08:19:37 2025 by rpki-client