Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: uUYFLwlZIskGaA+D20l9YAZMyiI1Gq58EMHE8wh6r+M=
Subject key identifier: 63:28:76:B0:CB:04:F5:87:8F:93:CF:96:E0:AB:9B:98:8B:D6:57:20
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019770E36D8C63FC1574B328993A60C30D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: D8
Signing time: Sun 15 Jun 2025 00:00:42 +0000
Manifest this update: Sun 15 Jun 2025 00:00:42 +0000
Manifest next update: Mon 16 Jun 2025 00:00:42 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: PGKCzURb77uWVl0EZ4ifIAgo7RoN3G4YtYUcUMX1Vmc=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:6d:8c:63:fc:15:74:b3:28:99:3a:60:c3:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Jun 15 00:00:42 2025 GMT
Not After : Jun 16 00:00:42 2025 GMT
Subject: CN=632876b0cb04f5878f93cf96e0ab9b988bd65720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bb:72:82:55:a8:e6:a1:28:85:11:2d:9e:6f:
b3:6f:7d:e4:89:66:c0:1b:05:a3:84:ec:97:e4:94:
88:e9:4e:66:f1:ee:5e:0c:09:f3:80:53:e8:4c:87:
dd:ab:95:12:e7:d1:7f:67:7c:55:32:4e:a7:34:4e:
5f:d5:bb:5c:05:fd:f2:d4:33:54:ea:3c:b6:f3:74:
52:77:b2:55:7a:ba:82:a5:b3:ed:85:7f:b1:1a:70:
35:cb:f6:5e:d1:a2:ed:76:43:32:2b:ba:e3:0a:45:
82:d3:a8:a9:1d:cf:71:67:11:0b:2d:f3:58:a1:a8:
2e:51:1a:67:ce:3d:9b:eb:22:a5:3a:eb:7e:ea:7b:
e0:09:7e:59:74:cc:aa:ac:fd:e2:be:ef:db:d3:1f:
ec:09:d3:12:13:bc:aa:1c:d1:4f:0a:9a:55:05:6d:
ed:36:5b:6d:7a:24:6d:c7:05:d8:92:fe:a1:d1:69:
a8:5e:15:00:51:83:ce:42:a9:4d:34:c1:af:fc:13:
b3:77:f6:12:45:3b:16:51:c4:97:97:92:a4:f7:8a:
f5:ba:31:e1:6a:f8:8d:66:21:ba:2b:39:da:99:b9:
04:27:88:f5:00:6f:1a:41:55:31:1f:a1:3b:59:2b:
7c:3b:11:36:20:ef:95:a6:2f:8b:1a:17:be:20:50:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:76:B0:CB:04:F5:87:8F:93:CF:96:E0:AB:9B:98:8B:D6:57:20
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:50:a1:15:63:6b:d2:da:9c:29:6d:6b:39:bd:56:db:f7:
d7:35:8e:5a:df:75:40:3b:27:89:55:da:0f:fb:9b:b0:68:a9:
d8:dc:fa:b2:cf:48:47:1f:48:40:40:88:76:ef:92:55:d8:c7:
54:bf:c1:92:d3:2a:bb:8b:28:84:fb:e9:80:fa:e5:d6:21:7f:
02:05:d8:9e:2c:d0:e0:5e:63:5d:60:da:7f:2e:89:47:30:fc:
26:aa:3f:06:d1:83:f4:56:c7:40:57:4d:6c:5f:64:e0:6b:c4:
36:b1:d9:ef:0e:32:5f:d0:66:d4:4f:67:b8:38:2e:e0:08:9b:
19:ba:9c:66:7d:e1:02:6e:81:33:43:0d:1f:47:73:87:ab:8f:
11:5a:28:b4:17:12:54:34:ad:d1:b0:25:5f:a0:1c:9e:2b:03:
5d:f5:fd:31:d2:55:e8:18:64:5a:5d:44:c8:95:9d:2b:cc:2e:
34:c8:c9:8d:26:81:b7:2d:20:8d:0e:aa:aa:0c:b7:e8:83:41:
6a:1e:34:8f:38:68:2e:e5:a4:8d:46:6f:37:8d:aa:21:a0:e2:
23:7a:e6:46:99:a1:08:1e:64:cb:be:9d:4e:e7:8e:82:68:43:
4a:ef:b8:8b:bc:35:bd:d3:b5:c1:4d:b7:1c:46:b7:cf:d1:68:
a2:d8:8a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw422MY/wVdLMomTpgww0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1
NmMyMGEwHhcNMjUwNjE1MDAwMDQyWhcNMjUwNjE2MDAwMDQyWjAzMTEwLwYDVQQD
Eyg2MzI4NzZiMGNiMDRmNTg3OGY5M2NmOTZlMGFiOWI5ODhiZDY1NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8btyglWo5qEohREtnm+zb33kiWbA
GwWjhOyX5JSI6U5m8e5eDAnzgFPoTIfdq5US59F/Z3xVMk6nNE5f1btcBf3y1DNU
6jy283RSd7JVerqCpbPthX+xGnA1y/Ze0aLtdkMyK7rjCkWC06ipHc9xZxELLfNY
oaguURpnzj2b6yKlOut+6nvgCX5ZdMyqrP3ivu/b0x/sCdMSE7yqHNFPCppVBW3t
NltteiRtxwXYkv6h0WmoXhUAUYPOQqlNNMGv/BOzd/YSRTsWUcSXl5Kk94r1ujHh
aviNZiG6KznambkEJ4j1AG8aQVUxH6E7WSt8OxE2IO+Vpi+LGhe+IFCMCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGModrDLBPWHj5PPluCrm5iL1lcgMB8GA1UdIwQY
MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt
YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi
LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBNQoRVj
a9LanCltazm9Vtv31zWOWt91QDsniVXaD/ubsGip2Nz6ss9IRx9IQECIdu+SVdjH
VL/BktMqu4sohPvpgPrl1iF/AgXYnizQ4F5jXWDafy6JRzD8Jqo/BtGD9FbHQFdN
bF9k4GvENrHZ7w4yX9Bm1E9nuDgu4AibGbqcZn3hAm6BM0MNH0dzh6uPEVootBcS
VDSt0bAlX6AcnisDXfX9MdJV6BhkWl1EyJWdK8wuNMjJjSaBty0gjQ6qqgy36INB
ah40jzhoLuWkjUZvN42qIaDiI3rmRpmhCB5ky76dTueOgmhDSu+4i7w1vdO1wU23
HEa3z9FootiKLA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:52:15 2025 by rpki-client