Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: UeOFOFyM/7rLjjA+0w84+Mk3WBrk/adHprmRuJup+CQ=
Subject key identifier: 03:68:0A:08:EB:7C:C4:C1:BE:64:69:57:44:47:BB:EC:CD:C7:CD:EA
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 01977609D29B394021F645A5F234BEE235A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1526
Signing time: Mon 16 Jun 2025 00:00:44 +0000
Manifest this update: Mon 16 Jun 2025 00:00:44 +0000
Manifest next update: Tue 17 Jun 2025 00:00:44 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: YF+MV/o2TSynWKQg221LSctK30/v9Ig666WGs0CyySQ=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:d2:9b:39:40:21:f6:45:a5:f2:34:be:e2:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jun 16 00:00:44 2025 GMT
Not After : Jun 17 00:00:44 2025 GMT
Subject: CN=03680a08eb7cc4c1be6469574447bbeccdc7cdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:88:38:7c:3d:9a:42:ef:4c:c1:07:ce:96:
85:db:95:47:20:06:b2:bf:42:f0:fb:f6:0c:12:d5:
3a:94:0b:aa:eb:6c:ee:08:7a:41:c4:ae:a0:9a:aa:
77:4e:2b:0b:30:ef:df:f7:82:3e:62:ad:45:ef:60:
29:b6:26:6a:3b:0e:06:09:0c:42:0e:fb:41:32:8c:
16:70:e7:53:d3:d0:07:94:36:6d:ba:33:22:17:24:
96:bb:97:e0:28:25:c2:9b:54:41:e1:8d:87:5a:d8:
fb:4b:e7:17:0b:36:23:1b:be:c9:59:6a:e6:a7:64:
15:7b:8c:62:70:99:c5:6d:f5:06:61:96:e2:7f:30:
63:68:71:7b:81:bb:2b:50:b3:c5:f2:80:a9:da:83:
51:94:16:de:56:dd:1b:2d:e4:7d:87:61:2c:9f:ac:
17:ff:22:50:c0:e7:21:b0:66:f7:35:7b:ca:55:98:
82:20:2b:ac:5a:2e:2d:25:16:34:0a:e5:15:18:3a:
f1:7e:ee:74:49:31:35:a1:69:18:09:f4:81:72:ee:
5a:62:97:01:d8:55:9b:bb:3e:c4:24:09:f2:e4:b8:
6c:be:07:98:ff:f9:89:38:ae:f9:a9:07:96:e0:6b:
d0:01:bc:78:ab:2e:0e:0c:c4:fe:0b:f4:84:23:09:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:0A:08:EB:7C:C4:C1:BE:64:69:57:44:47:BB:EC:CD:C7:CD:EA
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:37:85:bb:55:56:13:95:47:4d:12:6a:fc:d0:ed:55:43:30:
44:fc:6a:2f:38:7e:2c:13:30:b2:23:c1:d9:1d:bf:48:3e:31:
a9:34:1a:34:1f:d5:58:e0:b8:47:c7:35:7d:54:30:27:41:77:
95:fb:3c:e1:82:69:69:de:9b:91:ea:ba:a8:4d:e5:bb:2d:8a:
57:b2:2e:cd:e5:c1:17:29:c2:93:fa:34:22:49:fb:c7:fe:7d:
38:7a:0d:92:1c:c0:1d:18:cd:78:82:ec:60:b0:ab:67:d1:c9:
5e:e6:a2:0e:df:0f:e6:dc:19:c0:c9:d8:6b:02:0d:72:19:5b:
04:0b:a5:96:8c:bf:13:22:40:20:b7:f8:81:3e:db:fd:b9:d5:
ef:b6:85:d1:8f:38:3b:c7:8f:4f:25:45:af:84:27:8a:32:51:
5e:bc:81:ac:e4:01:56:87:dd:3e:c0:e8:65:d8:34:c9:65:c5:
b8:be:64:86:c3:fb:bb:38:8b:c0:85:5b:a9:4f:71:76:0b:05:
b6:1e:9d:db:ce:23:b2:ad:de:57:9e:75:23:e1:3d:b7:10:6d:
ad:a9:07:42:a0:3f:b7:0b:45:9b:5f:e7:e4:71:6e:21:26:8a:
2d:84:b3:1e:ac:b4:b2:ae:dc:84:02:04:02:ad:65:7b:1c:4c:
69:2e:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:13 2025 by rpki-client