Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: oTM56L35LYHOZu5p8I25h387B+dEn1ipfyhW3j/Qc1U=
Subject key identifier: 0F:84:81:97:7B:A2:15:55:D3:B5:F3:84:1D:6A:A6:B7:8E:04:4E:38
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019788B45D08ADF89E97A67BC383C5C6D1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1530
Signing time: Thu 19 Jun 2025 15:00:11 +0000
Manifest this update: Thu 19 Jun 2025 15:00:11 +0000
Manifest next update: Fri 20 Jun 2025 15:00:11 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: BDmEwVW3Io6BKMbySaGlhmJuCQLBt051dERNnVDWZDM=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:5d:08:ad:f8:9e:97:a6:7b:c3:83:c5:c6:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 19 15:00:11 2025 GMT
Not After : Jun 20 15:00:11 2025 GMT
Subject: CN=0f8481977ba21555d3b5f3841d6aa6b78e044e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:ed:de:da:ee:90:d8:0b:5d:91:1e:b2:ab:
fa:93:df:dc:74:69:58:0c:c8:13:45:ce:92:5c:98:
62:29:bb:c3:8d:77:a6:2e:0c:bd:48:23:4a:6b:2f:
e6:99:76:5a:57:d9:21:26:73:ab:7a:e2:3d:6c:a0:
ad:ec:a5:5c:a9:6a:4e:c6:64:38:ae:43:b4:ea:87:
36:09:bf:ba:43:8c:f2:d1:f4:b4:6e:de:ee:fc:54:
1a:22:d7:da:d9:53:ef:fa:50:58:12:6a:28:ec:2c:
5c:9f:23:88:a8:be:39:19:f3:a1:12:5b:4d:7c:d2:
d0:70:48:97:2b:12:0d:ac:d2:e0:3d:c1:f2:5e:36:
f1:d1:10:bd:51:1d:7a:23:af:4b:95:69:b0:1b:15:
5e:c4:77:70:c1:4b:ff:6e:76:f7:af:51:2d:45:a6:
32:fb:f9:e1:5c:3c:1c:cf:7c:3f:f8:cb:dc:c9:ce:
39:f2:a6:26:24:4c:2e:bb:56:ae:56:37:54:37:21:
95:8a:92:32:a5:1c:a2:8d:0e:09:dc:b1:96:26:65:
47:07:dc:4c:a3:49:9a:0f:6f:4e:4f:b0:0b:99:66:
ed:e9:8f:52:11:d2:0c:02:44:db:1d:2e:35:b8:33:
4e:85:88:15:cf:a5:f5:19:07:a8:db:2d:e8:62:f9:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:81:97:7B:A2:15:55:D3:B5:F3:84:1D:6A:A6:B7:8E:04:4E:38
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:3b:9f:9a:da:3e:9a:6d:82:52:bb:ca:71:bc:17:87:23:
71:45:ce:e1:11:f2:dd:fb:16:51:9b:ab:ac:4f:0a:26:16:90:
85:a7:bd:d5:66:97:fa:cd:64:59:9b:23:b3:29:2c:9c:67:ca:
95:d2:00:2f:cb:49:e4:72:01:81:98:43:e6:e7:cb:ce:02:44:
aa:62:88:40:c3:64:fb:95:27:70:44:a2:7d:0c:49:e2:9b:6d:
73:d1:31:c4:a1:a1:7b:05:ae:53:d1:94:d3:b2:99:f8:71:46:
91:fd:c6:9c:a1:74:57:29:e1:e7:0e:24:ac:64:8d:fb:33:a7:
b6:91:0b:4c:3b:6f:83:fc:ff:2c:4f:d9:3c:bf:06:72:2c:41:
8c:45:92:63:a0:6c:23:72:ab:2d:18:91:f9:e7:f4:15:87:37:
60:1e:f5:05:06:a1:ff:26:53:4f:e5:3e:56:0a:44:b4:31:df:
52:42:b2:5f:56:9d:28:4b:a3:56:77:f1:03:dc:29:62:75:c9:
0c:1f:a1:51:94:c4:e8:59:ee:dc:99:eb:bb:50:da:c2:1e:40:
d4:fe:3e:bd:ad:bc:72:1f:a1:cc:2c:87:65:84:da:12:54:17:
75:84:ce:99:bf:71:47:50:86:8b:4c:18:bc:db:9d:ff:03:d9:
47:5e:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:32:20 2025 by rpki-client