Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: J+iTwiO+XcxmIswRX7OOzWEMSQyT8lBnumEW0s1e6+o=
Subject key identifier: B1:63:62:A2:33:E1:EA:0B:27:5C:8D:AE:45:BF:1B:F2:36:74:C0:1F
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 01976C622DA3E22DD0448F5F896CB34032AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 0454
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: pVWUD69jxaocIDNFMFuDavrWOmQeS4p2SswVSVoP/I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2d:a3:e2:2d:d0:44:8f:5f:89:6c:b3:40:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=b16362a233e1ea0b275c8dae45bf1bf23674c01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:fe:01:29:f6:c7:f2:77:7a:05:9f:59:6d:
8f:ed:e9:04:92:7f:80:74:97:82:76:ed:26:91:83:
10:1e:30:00:da:0b:98:38:c9:01:19:82:03:e5:d5:
9a:2a:d3:3e:34:4c:53:71:c3:29:34:4d:b1:98:e4:
d1:4a:e1:0d:7d:b6:5c:40:ac:a3:e5:9a:54:0c:ac:
ea:8a:51:8b:6a:c1:b4:d0:f2:dc:42:94:fa:9a:51:
49:5c:27:7f:44:33:cc:f7:cf:09:a2:d4:fa:43:84:
7d:5f:28:b6:56:ed:60:d9:38:05:93:3a:3a:4a:c1:
96:f6:58:f1:b5:cc:8e:7a:29:64:c0:cb:bc:7f:6f:
f1:8d:cb:a7:bc:34:5a:f5:95:5a:aa:77:db:02:16:
05:1f:d6:5d:96:26:66:7e:a0:43:d2:b2:48:5c:d5:
cc:74:32:6f:ec:8a:3d:6b:c9:2a:d9:7a:f0:0f:a7:
dd:5f:8a:63:97:e8:ac:a0:da:b6:43:7a:3d:44:94:
77:a4:de:69:56:a7:76:8b:5a:2f:fc:09:67:af:b6:
92:18:0c:54:61:5a:2e:f5:3c:78:81:e8:a6:e3:7e:
b2:cc:78:1f:96:7a:80:e0:b8:8e:a6:aa:9e:cf:e8:
27:66:19:4b:3e:d7:2d:9c:7e:d9:4d:1f:04:e8:3b:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:62:A2:33:E1:EA:0B:27:5C:8D:AE:45:BF:1B:F2:36:74:C0:1F
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:b9:8f:6c:30:af:8c:ee:07:01:70:b6:b6:f3:c0:0a:71:
54:21:84:3f:f8:d4:27:05:82:39:d8:19:c7:2d:de:e7:7a:b7:
24:bc:b6:2b:93:e4:53:86:98:10:19:f3:56:0e:91:1a:f3:8c:
df:5b:11:26:ee:52:28:68:6e:b0:e8:c9:9d:fc:25:12:b5:89:
7e:e9:02:3e:c8:c0:7f:2e:9b:03:82:1a:a1:47:b4:6a:03:7b:
12:5c:c5:b3:62:23:5f:1d:31:ba:45:08:2f:dd:3e:69:3c:3e:
be:16:22:0f:d3:ff:e7:70:37:9d:07:fe:c7:90:62:43:89:3d:
47:99:02:59:28:29:75:a4:1a:ce:ac:ce:f4:fd:80:f1:39:5c:
a3:cb:c9:8e:70:c5:a7:0e:90:e5:02:2a:af:28:34:00:18:4c:
83:9b:16:1e:a1:c3:fe:af:54:2e:1a:c5:b1:64:00:62:d7:a8:
1f:c2:45:f6:07:1a:33:b0:db:3f:8a:93:4a:a3:f7:56:04:44:
56:7f:84:ae:e9:4c:fd:a5:c4:01:6b:27:96:98:cb:68:a2:9a:
54:ac:34:05:11:dc:40:7b:af:27:6d:9d:2f:a7:a0:4f:dd:ec:
1e:14:67:0d:bf:56:ab:40:81:2b:0a:23:e3:03:f3:57:f6:c1:
0b:8c:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:14 2025 by rpki-client