Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: Gh4QvpecJgmcrzoNcecoVNahR59F7JAOr6iKp0WnIqM=
Subject key identifier: FF:CE:2A:A5:D9:20:4B:FD:CE:50:25:03:FF:86:EB:5A:13:DB:ED:1D
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01958EBCA2EC43E3E11535ED49E85C462AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 09:01:21 +0000
Manifest this update: Thu 13 Mar 2025 09:01:21 +0000
Manifest next update: Fri 14 Mar 2025 09:01:21 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: jOIkjLzPGPyNgHd1FLukof9xD+P8MfBudOAH5VDOAoQ=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:a2:ec:43:e3:e1:15:35:ed:49:e8:5c:46:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Mar 13 09:01:21 2025 GMT
Not After : Mar 14 09:01:21 2025 GMT
Subject: CN=ffce2aa5d9204bfdce502503ff86eb5a13dbed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:9e:d1:ef:40:8e:a7:05:02:a1:88:cb:6f:
33:90:3d:aa:b0:59:1e:ed:01:26:90:5c:d0:ce:05:
c7:9d:16:f0:42:a1:98:17:df:4e:0c:1e:b5:a6:5d:
ea:6f:99:73:61:47:8d:f0:a7:bd:e7:6d:1d:a3:1d:
f9:08:2c:47:76:3b:f7:10:4a:97:13:f6:d9:63:05:
97:3c:cc:53:00:0e:77:d8:ee:bd:5d:5b:64:7e:13:
99:27:44:65:f6:1a:c2:58:30:89:bd:70:57:95:20:
65:a0:d6:7c:3c:b9:ee:35:95:c2:8d:2e:b9:a0:db:
77:ad:78:38:7e:2e:b8:47:23:d5:2d:01:7e:da:fc:
93:a3:e0:ad:aa:af:91:c3:a8:22:eb:a7:6f:68:4d:
42:62:ff:ba:1c:89:97:16:8f:76:35:99:d1:df:dc:
90:b7:51:7b:49:f9:96:9b:11:b1:7e:a3:e4:ef:df:
cb:ae:18:ac:32:c4:20:3c:8e:8b:c2:e6:ed:86:e4:
09:a3:c0:58:6c:df:f9:c9:07:04:cc:04:50:ef:9f:
42:25:0a:a2:98:61:37:e6:5a:af:97:14:c9:c0:e7:
f2:37:dd:72:85:21:07:a0:a2:23:43:11:56:00:2e:
9c:40:74:1e:ba:94:d1:18:6a:99:33:56:49:96:24:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:2A:A5:D9:20:4B:FD:CE:50:25:03:FF:86:EB:5A:13:DB:ED:1D
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:d2:ec:08:d3:cd:fc:3d:ad:ed:fb:10:53:28:84:bb:92:
a9:1d:70:a8:4d:f5:f1:53:a1:ae:f4:8c:81:33:18:c0:b5:b4:
49:13:27:34:bc:d1:11:52:b0:af:e9:19:df:a9:09:d4:15:d7:
df:95:82:7d:cb:53:a3:6d:50:b4:6e:ec:04:e4:e5:7f:cf:9e:
64:7d:c3:45:7a:6e:d3:3c:6a:96:b8:8f:e5:6c:69:db:c6:1c:
1e:cd:a3:ac:95:9d:65:45:91:33:bb:3e:fd:d4:5b:06:03:b3:
44:fa:a0:f0:21:fb:df:f7:b9:57:e0:4f:29:5f:61:5a:a1:8a:
4c:06:65:08:aa:0b:bb:8d:3f:0a:44:46:7b:d6:18:53:8f:a0:
41:94:35:1a:46:23:cc:49:54:42:9e:59:b3:c8:59:8a:72:8c:
ae:14:8d:c1:90:37:62:4d:92:4f:7f:2e:80:a0:14:9c:9c:4b:
4f:e8:c8:7b:ca:23:16:29:86:fb:5a:5d:e1:ea:57:95:e2:d9:
84:56:38:87:ec:2b:ce:5e:9d:12:a1:f2:d7:5d:68:1d:c9:c4:
f5:b8:79:19:cc:62:cd:c6:3c:06:fd:c1:90:83:84:cf:22:a3:
69:84:f3:04:79:8a:81:e7:47:a2:57:6f:06:90:b2:80:9d:af:
97:51:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:22 2025 by rpki-client