Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: D1UCrEU+WK44X7AT0NlZgElc94zWCJPYctnlKUCuGd0=
Subject key identifier: 6F:9D:BA:9B:46:31:F0:68:50:A0:39:D1:70:3C:C3:C2:DF:DC:EB:EB
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019613FD62B83C8B7854989C2545828D8ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 14E3
Signing time: Tue 08 Apr 2025 06:01:34 +0000
Manifest this update: Tue 08 Apr 2025 06:01:34 +0000
Manifest next update: Wed 09 Apr 2025 06:01:34 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: e3B5aFkbpT+FDcvvVP5P306bk6pgopNNIFkYmbZgwfU=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fd:62:b8:3c:8b:78:54:98:9c:25:45:82:8d:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Apr 8 06:01:34 2025 GMT
Not After : Apr 9 06:01:34 2025 GMT
Subject: CN=6f9dba9b4631f06850a039d1703cc3c2dfdcebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:73:07:1f:68:87:3b:39:e1:e2:78:3f:91:
31:b6:c3:16:70:ae:5e:d8:b0:fd:d1:2d:6f:b5:8f:
ff:d3:a4:21:b9:6d:20:a0:f5:48:c3:b4:33:34:99:
84:7a:39:90:22:5e:b1:72:92:ad:1e:42:da:50:f7:
22:d4:37:72:54:1e:6d:f8:9a:54:79:88:7f:d4:da:
ea:6e:fc:85:a3:8d:cc:3b:7f:41:c8:79:14:51:25:
92:23:0b:0f:e0:9f:8d:e2:4b:0b:63:5b:8c:27:26:
96:5a:87:da:bc:6a:f2:5d:7b:a5:cc:67:cf:88:3f:
fe:d4:72:86:be:5a:c0:3a:f6:75:ad:7f:8c:83:bc:
9e:38:da:21:74:7f:1e:cb:5c:20:2f:5a:30:12:11:
a1:d6:bb:61:4b:b2:d8:f9:74:fe:23:fb:be:83:7a:
94:c1:af:c4:27:9a:db:07:b2:25:0a:8a:06:2a:e9:
ae:42:90:71:ad:19:c7:ba:9d:69:73:4b:bc:e2:7e:
33:8e:25:38:6a:cb:67:22:83:8b:d3:31:fc:0b:0f:
fb:06:4d:62:c3:2b:f5:c3:2c:27:18:fa:63:97:48:
ca:4e:4e:50:dc:27:3a:00:08:bb:81:8a:30:fa:79:
c9:e2:5d:78:ae:ce:b2:3a:ae:40:ba:84:8e:66:f1:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:BA:9B:46:31:F0:68:50:A0:39:D1:70:3C:C3:C2:DF:DC:EB:EB
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:b1:05:b6:95:5f:d0:f1:a2:8a:84:73:6e:d9:5d:1e:a9:
08:a6:5d:c4:e2:28:4b:92:5b:5d:cc:0e:d7:8d:5f:4f:8b:45:
93:ed:a7:6d:a8:c4:3c:d4:56:9a:d3:21:b9:66:df:a4:5d:2f:
4f:f7:8c:f0:b3:80:fa:6a:e2:2f:99:93:49:27:1a:46:b0:92:
0a:95:fc:70:b5:e3:9e:4f:c5:9c:09:60:98:a5:6c:f2:6a:ac:
a9:60:3c:58:f7:f1:5c:be:8c:a1:ad:4f:25:ba:4b:bd:7a:ec:
42:e9:c9:14:39:c0:9c:7c:f5:df:e2:12:73:9e:2d:ca:1b:84:
84:5e:b4:69:bc:ef:42:04:5e:8f:71:ce:9d:c8:5f:f4:e2:72:
c9:02:2e:34:f0:68:e1:3d:cb:d7:9c:2a:3c:7a:5b:3d:ec:f2:
93:37:53:cc:6b:ce:35:c7:bb:40:c1:80:52:29:87:75:58:92:
68:dc:d5:7d:1b:f4:3a:c1:e5:4c:66:d8:23:3e:1d:8a:6c:ba:
a2:d2:cb:ec:36:b8:e9:47:a2:8e:df:ce:1d:78:fc:70:5c:e6:
d1:96:85:b4:40:42:f4:c4:02:93:e2:48:d4:56:1a:d4:e7:14:
96:35:bd:05:ca:98:4c:ab:21:77:6f:1a:07:79:fb:ba:93:80:
47:c4:dc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYT/WK4PIt4VJicJUWCjY7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjUwNDA4MDYwMTM0WhcNMjUwNDA5MDYwMTM0WjAzMTEwLwYDVQQD
Eyg2ZjlkYmE5YjQ2MzFmMDY4NTBhMDM5ZDE3MDNjYzNjMmRmZGNlYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRRzBx9ohzs54eJ4P5ExtsMWcK5e
2LD90S1vtY//06QhuW0goPVIw7QzNJmEejmQIl6xcpKtHkLaUPci1DdyVB5t+JpU
eYh/1NrqbvyFo43MO39ByHkUUSWSIwsP4J+N4ksLY1uMJyaWWofavGryXXulzGfP
iD/+1HKGvlrAOvZ1rX+Mg7yeONohdH8ey1wgL1owEhGh1rthS7LY+XT+I/u+g3qU
wa/EJ5rbB7IlCooGKumuQpBxrRnHup1pc0u84n4zjiU4astnIoOL0zH8Cw/7Bk1i
wyv1wywnGPpjl0jKTk5Q3Cc6AAi7gYow+nnJ4l14rs6yOq5AuoSOZvFHNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+duptGMfBoUKA50XA8w8Lf3OvrMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfASxBbaV
X9DxooqEc27ZXR6pCKZdxOIoS5JbXcwO141fT4tFk+2nbajEPNRWmtMhuWbfpF0v
T/eM8LOA+mriL5mTSScaRrCSCpX8cLXjnk/FnAlgmKVs8mqsqWA8WPfxXL6Moa1P
JbpLvXrsQunJFDnAnHz13+ISc54tyhuEhF60abzvQgRej3HOnchf9OJyyQIuNPBo
4T3L15wqPHpbPezykzdTzGvONce7QMGAUimHdViSaNzVfRv0OsHlTGbYIz4dimy6
otLL7Da46Ueijt/OHXj8cFzm0ZaFtEBC9MQCk+JI1FYa1OcUljW9BcqYTKshd28a
B3n7upOAR8Tcow==
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:49:24 2025 by rpki-client