Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File: EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier: 77a/noUZcPPW6QmQtqeXf3AawFKpgQzyk4ApP3UytO8=
Subject key identifier: 43:40:1E:81:2E:CB:E2:13:93:69:AD:44:F8:44:1F:51:2F:35:59:14
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 0197488D2DA80C67E584E7E3269FFA280840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 04:01:41 +0000
Manifest this update: Sat 07 Jun 2025 04:01:41 +0000
Manifest next update: Sun 08 Jun 2025 04:01:41 +0000
Files and hashes: 1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: YF9JI3An/SYlgZGH1ezH+6EIWYAIr+TH7wBjnSDmEtI=)
3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
4: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
5: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2d:a8:0c:67:e5:84:e7:e3:26:9f:fa:28:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jun 7 04:01:41 2025 GMT
Not After : Jun 8 04:01:41 2025 GMT
Subject: CN=43401e812ecbe2139369ad44f8441f512f355914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:d0:31:a0:13:3f:d7:0a:f5:3e:08:85:14:
27:b1:d0:30:76:08:10:3e:99:0e:36:93:fc:4d:89:
8d:49:67:c6:43:4d:1f:c5:db:ab:ce:cd:e7:db:e9:
06:a9:ed:76:8d:c4:35:7f:af:d6:e7:ea:5f:8e:c3:
ec:93:9a:d0:28:38:0a:3c:fb:72:2d:e6:2c:25:e5:
64:5a:79:e3:ee:77:28:4e:4e:1c:9d:41:12:4a:f3:
b7:73:a6:55:ef:f4:33:78:d2:b1:a1:f9:5a:84:52:
48:a4:89:6a:8b:28:7d:8f:7a:4d:80:58:56:82:e2:
31:05:18:05:e9:51:db:01:49:4e:f0:4c:98:fc:90:
f7:16:89:1f:9f:a7:cf:b4:8d:56:c6:11:64:c2:8b:
74:72:db:74:e4:c0:4e:e7:83:51:70:5b:68:b3:11:
34:f0:92:bf:f6:12:3c:e1:ef:5a:0f:d5:d5:a2:d2:
e8:c4:d0:39:27:b8:05:ca:b6:8b:b3:7c:94:f1:48:
b4:a3:d7:84:95:63:b9:06:b8:c5:fd:6b:25:08:f9:
6b:39:91:26:c6:46:cb:ed:35:f6:03:51:16:78:fc:
1e:f1:56:dd:9b:5c:13:65:b9:c2:0e:1f:b5:6b:f7:
ec:17:4a:5c:40:53:ef:14:c9:73:9b:88:80:f0:cd:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:1E:81:2E:CB:E2:13:93:69:AD:44:F8:44:1F:51:2F:35:59:14
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:e4:c9:74:fc:85:1f:52:33:da:34:2e:50:05:80:26:f6:
e9:4c:0d:29:ac:c6:ab:f7:7c:29:05:6e:c7:77:9b:35:a6:bd:
85:a7:42:e2:fb:dc:77:4d:9c:60:ce:70:ed:e4:dc:5d:3d:28:
c4:b9:4a:b2:5d:67:6d:24:67:49:94:c3:65:d7:dd:98:e6:00:
3a:67:33:27:52:62:0f:62:d5:cf:1d:4e:2f:18:86:fa:1d:74:
9f:60:1a:b4:d8:62:dc:dd:92:21:52:28:c8:6b:37:39:6d:2e:
a2:80:af:2a:bc:aa:37:e3:b4:22:6b:8f:69:67:7f:35:7d:cd:
ce:46:05:b9:32:a3:3a:42:bf:3c:43:8b:66:6b:af:ef:1d:27:
82:99:d1:36:90:01:23:ea:ce:69:d9:96:d1:37:7e:72:eb:30:
3a:97:b0:93:15:b5:d9:b4:3e:d8:19:ca:75:2a:2e:14:b5:a7:
f4:ac:98:11:a1:e8:2d:1e:40:3b:d5:67:74:ef:74:a4:73:09:
c0:03:e7:49:48:9e:a4:c8:ee:0d:e9:c8:b4:5d:f3:69:5d:0c:
d1:27:53:84:15:f0:11:c8:48:6b:2b:12:f5:26:d2:cb:8b:ff:
8e:67:d0:93:66:5d:e6:45:17:60:b9:49:05:e4:2e:bf:ed:07:
0b:ec:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:07 2025 by rpki-client