Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: fRrIQ6h46myjnr6UBdxB6FMgXBrE/LV6f2qovhDmPoQ=
Subject key identifier: 23:96:C9:95:13:A2:75:AD:16:1E:1D:DB:B5:A6:A4:AA:D0:FF:F6:F6
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019874BD803DFD32F714B999465F566EA66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1358
Signing time: Mon 04 Aug 2025 11:00:32 +0000
Manifest this update: Mon 04 Aug 2025 11:00:32 +0000
Manifest next update: Tue 05 Aug 2025 11:00:32 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: GcypF6LfJS45NWHD4oKJn1+dzR91MbXHiHjOi1LIelg=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:80:3d:fd:32:f7:14:b9:99:46:5f:56:6e:a6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Aug 4 11:00:32 2025 GMT
Not After : Aug 5 11:00:32 2025 GMT
Subject: CN=2396c99513a275ad161e1ddbb5a6a4aad0fff6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:22:54:44:f3:44:cd:3c:02:9d:ef:9d:fb:
c6:62:95:62:67:99:f5:f3:db:d8:14:2d:5b:11:5e:
a4:fc:11:a8:72:56:12:e5:0b:a1:e1:17:06:73:d2:
2a:cc:32:73:ad:a0:cc:6a:cc:83:4c:0c:c0:c0:4d:
b6:da:9e:c2:78:31:54:9e:8a:2d:47:1a:48:f1:65:
37:cb:38:4b:17:4e:c2:6c:da:3c:25:bb:60:18:1e:
de:db:60:54:99:18:48:de:b9:50:98:7a:e2:c8:15:
16:ab:e0:87:09:b4:75:58:21:d8:15:89:3a:8f:80:
c4:de:e4:0a:fe:11:5d:95:28:00:41:51:5a:4d:8b:
de:ed:42:50:18:04:68:8e:17:03:96:cd:fc:3c:aa:
d7:ef:1a:6c:88:55:c9:fd:3f:da:a1:38:6c:ad:35:
dc:aa:e9:57:40:bd:3e:94:cc:25:67:d8:dc:d2:97:
81:1f:e6:7a:49:ad:98:2d:b2:71:dd:fd:99:a6:c5:
8d:50:a1:0d:d7:c5:7e:b4:27:eb:24:07:33:fe:b3:
18:d3:a6:4b:c4:01:09:2a:9b:6d:26:9f:d9:4b:83:
a5:29:05:96:58:7f:48:23:64:81:7a:9c:24:46:55:
b3:26:d7:01:f0:38:54:e1:69:d8:94:1a:22:f6:87:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:C9:95:13:A2:75:AD:16:1E:1D:DB:B5:A6:A4:AA:D0:FF:F6:F6
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:39:fd:7c:66:6a:2f:96:dc:33:13:84:33:0e:4a:05:93:e8:
06:4f:1a:c2:46:eb:d1:07:1c:b1:33:91:57:ea:67:ae:b8:71:
2b:af:7d:dc:e2:84:53:39:e3:9b:b3:4a:77:ef:00:f1:3f:c4:
48:f8:cd:c3:ae:59:08:0b:04:39:89:f6:32:79:81:12:44:a9:
a1:63:7a:13:e1:02:e4:74:82:7e:7c:97:84:c1:37:7a:b9:5c:
fe:d7:04:2b:f3:1c:2d:97:b3:fa:72:53:da:3a:ca:3b:23:16:
cd:be:82:63:6d:4a:15:cf:a1:27:4f:d6:bd:e6:26:b0:dc:cb:
b0:18:59:5a:de:ab:d5:c0:3c:32:fe:10:a8:70:d7:e0:da:9f:
5c:9b:c5:5b:e8:b0:5f:1f:bf:03:fb:a1:dd:51:68:79:98:20:
ca:e6:8a:aa:f3:be:58:90:40:6b:5c:fc:f2:58:a3:7f:7f:0c:
d0:63:c7:4e:f6:72:c8:dc:cc:e3:49:19:2c:97:ca:57:28:1d:
d1:d3:d7:f4:18:da:bd:bc:a8:94:55:1b:c1:50:90:e3:33:80:
31:be:ea:68:9f:3e:09:ee:c2:b0:67:31:ca:f5:0a:98:4f:ba:
ec:70:0e:b6:93:23:de:ec:c2:c9:8b:0c:5e:1b:d2:e4:51:f7:
ea:3c:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:58 2025 by rpki-client