Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: D17rnK6RQtT15ekV7I/0pIyxYupgb5+LeW5HA3igGfM=
Subject key identifier: 8C:C7:95:61:60:A4:BB:44:A4:4D:B1:EC:AE:B4:7D:54:9C:3F:DC:E8
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019748FA1905C23D14A9DF829A6AC461748A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: DmsZZ+Z6LilyiqYyQi7BLQykCI7qCwkfRqzPhM3+SSU=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:19:05:c2:3d:14:a9:df:82:9a:6a:c4:61:74:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=8cc7956160a4bb44a44db1ecaeb47d549c3fdce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:42:b8:96:12:1d:cc:03:a1:1a:d1:37:03:
8d:bb:7c:c5:4d:ac:3b:9d:bf:62:ba:f1:aa:b5:de:
5e:cf:4b:9d:7a:56:bc:0d:ec:4b:87:c4:c9:9f:79:
d0:42:7f:4e:28:7b:85:de:79:f7:2b:9c:35:fb:23:
2f:f4:18:f1:10:fe:02:05:17:ae:ab:b0:cc:4a:6b:
29:9e:08:7a:ae:9d:27:52:a4:ff:b7:b4:dd:d6:19:
92:df:c1:07:ba:b1:6c:a1:88:dd:d1:c0:b4:34:fa:
8c:5c:75:7a:84:dc:8f:27:ab:d8:be:a1:f7:29:be:
89:3d:5f:a5:0f:53:1e:91:58:ad:95:8e:9b:57:fb:
48:a2:76:fb:b2:15:40:55:b1:6e:7a:62:95:ec:22:
55:8d:83:b4:ac:21:c2:0f:41:16:37:cb:6f:b4:d6:
5a:0d:a3:c6:9d:35:c6:ef:83:92:64:82:a4:b0:ed:
0a:7e:8d:f2:bd:a7:c7:59:b1:d7:c6:eb:a4:9b:12:
8e:18:ee:04:4e:b3:3f:ba:6d:b6:d0:1f:53:c5:5a:
c3:4c:34:0f:e2:c5:1a:c8:92:84:21:52:ed:a2:88:
15:b4:ad:3c:d7:4c:65:0e:66:62:db:ad:8e:5f:4b:
0c:2a:6c:08:06:a1:89:1f:43:27:46:6d:e3:2b:28:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:95:61:60:A4:BB:44:A4:4D:B1:EC:AE:B4:7D:54:9C:3F:DC:E8
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3d:86:18:1d:d0:b7:79:63:c3:1d:52:02:db:1a:6d:52:94:
1c:e4:b4:ab:a7:3d:b2:3a:15:e6:9c:47:c9:83:83:6e:93:de:
9c:55:7f:01:1a:f8:d7:48:fa:45:48:04:1f:c9:75:52:ef:eb:
27:d3:cb:76:5c:62:9b:b2:8b:c1:fc:fa:e0:55:57:c0:29:28:
e7:45:c6:78:46:c2:c9:1d:5c:ba:ca:cd:8c:7f:6e:8d:af:fa:
b8:02:83:92:03:ab:74:80:00:a4:2a:43:e5:ce:52:e9:b6:d6:
80:95:86:c9:60:a7:94:72:65:49:68:42:db:12:fb:15:ef:47:
c2:be:5a:e7:40:93:d5:72:b7:12:92:21:3d:ed:c3:0b:a6:41:
68:a1:db:ef:8b:7f:5a:6f:8a:a8:a7:ac:10:37:f0:43:6e:aa:
9b:11:14:c7:e8:df:41:fe:16:d7:e1:6c:81:18:a7:c4:af:d1:
1a:1f:0b:df:2a:cf:72:60:80:02:37:df:39:94:56:ec:dd:1f:
41:2c:31:a0:9f:fe:d1:ad:d4:2b:19:80:f1:c7:5f:5d:d4:0c:
02:81:5a:bf:85:4d:93:68:ad:33:4c:ce:58:cc:8c:15:17:c9:
95:bc:c8:63:13:85:9e:5b:91:62:bc:89:ff:0f:f9:d3:02:75:
40:18:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:59:55 2025 by rpki-client