Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File: EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier: rcWQEiT5G6rvO+9+iPVoBfoKv4UH9J/qTkhug12W3iM=
Subject key identifier: A2:38:67:53:D3:5A:89:84:54:3C:1F:24:30:19:24:71:41:C5:B5:83
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 01960FB39D775BFB4D2D105624DFC2BFE290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 10:02:31 +0000
Manifest this update: Mon 07 Apr 2025 10:02:31 +0000
Manifest next update: Tue 08 Apr 2025 10:02:31 +0000
Files and hashes: 1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: a/0xN/AugcMtMiVPjxlfAGsLhjd3G2OJxMIVKOP/RXI=)
3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
4: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
5: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b3:9d:77:5b:fb:4d:2d:10:56:24:df:c2:bf:e2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Apr 7 10:02:31 2025 GMT
Not After : Apr 8 10:02:31 2025 GMT
Subject: CN=a2386753d35a8984543c1f243019247141c5b583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:f5:92:49:94:f1:72:91:50:e0:85:f6:78:
71:5f:a0:75:57:cf:ce:ff:c7:2f:d7:3f:5a:44:9d:
16:f1:0a:77:82:a4:a8:4c:f3:10:67:5c:81:9b:41:
9a:6f:38:f4:4e:d0:ef:46:63:e6:af:19:11:d1:11:
71:cc:40:d5:ad:24:b2:a3:65:a2:8e:3d:64:cb:35:
e5:0e:08:ee:11:a1:9b:65:68:37:48:4f:a9:fd:3a:
34:96:2e:14:1f:f1:33:37:e2:c4:29:f3:98:4d:65:
f5:54:e1:b6:4b:75:1e:44:1e:17:7e:0a:57:c4:0b:
d9:de:9a:8c:5a:02:82:ea:33:ec:f0:45:2b:fa:26:
ce:5c:41:ca:b3:2b:97:7b:17:3e:16:c7:5c:9e:42:
da:4f:3b:ff:d8:80:5e:a2:18:89:cd:f4:09:52:34:
f6:49:2f:d6:85:f4:8c:08:35:b7:5a:8f:22:46:7a:
86:37:0d:ef:99:f7:22:4b:b3:00:37:0c:9f:1b:65:
e0:31:06:a4:17:e0:ff:23:3f:38:1e:ae:e6:60:98:
44:3f:4b:00:5a:d6:f8:d7:2e:db:04:33:e4:4a:c4:
86:a2:69:62:5b:8c:58:10:e8:93:51:46:e4:13:cf:
c4:33:8a:26:17:fd:8e:56:61:a1:11:21:07:21:10:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:67:53:D3:5A:89:84:54:3C:1F:24:30:19:24:71:41:C5:B5:83
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:3b:bd:95:73:93:75:7d:ba:45:fb:c0:7a:6a:54:c7:54:
f8:a6:f2:68:ed:b9:07:1d:2d:85:6e:fa:6c:2a:2a:a3:aa:85:
35:a4:88:2a:d4:57:96:a4:ee:14:eb:bc:66:b3:e6:3b:06:59:
67:7f:ca:79:f8:d9:ab:8d:cc:c0:51:d2:66:5c:25:87:8b:06:
29:aa:ab:14:57:4c:01:23:c1:8d:d8:2b:4c:ce:7e:51:ee:2e:
cb:3b:0d:f5:77:80:13:17:ab:aa:8f:41:6f:82:15:cc:a4:b2:
06:b5:3a:96:86:55:3c:51:c1:26:ae:d7:62:e6:d3:38:33:df:
13:34:d4:c9:d5:ae:58:04:54:69:e5:c3:ca:8c:bc:4a:3a:c8:
0a:c6:ae:ee:4d:b5:e4:66:34:ed:4f:63:7e:3c:15:87:e8:dc:
4a:0d:c2:76:c0:10:b0:17:b4:33:e4:c1:f4:d8:25:85:f1:a6:
0a:a1:c9:cd:b6:76:34:8a:f5:c9:ad:6b:db:39:77:b7:2d:db:
35:3a:8f:83:d6:df:c9:31:37:53:98:03:c9:3d:5a:3e:a4:09:
23:f4:b7:fe:2f:71:c9:7f:95:2b:fe:2d:e4:53:ea:85:d3:08:
d3:35:5b:95:e9:4f:cc:24:a3:46:fa:db:92:09:79:f8:71:54:
6d:fe:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:32:41 2025 by rpki-client