Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: oSmu1gdEDqatsTzHBndQuJ976fwvB+KB4XesNpoT8gQ=
Subject key identifier: C5:43:08:C7:8E:79:5B:92:C4:02:51:BC:7F:40:CB:06:9E:D0:09:84
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01963C1D6AC08143D2812D5990D6C26C13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 11FA
Signing time: Wed 16 Apr 2025 01:01:22 +0000
Manifest this update: Wed 16 Apr 2025 01:01:22 +0000
Manifest next update: Thu 17 Apr 2025 01:01:22 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 1jPgeKV9CFjmY1Bh271Y1XQYUFnB/0L0BVMi3H0ld+M=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:6a:c0:81:43:d2:81:2d:59:90:d6:c2:6c:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Apr 16 01:01:22 2025 GMT
Not After : Apr 17 01:01:22 2025 GMT
Subject: CN=c54308c78e795b92c40251bc7f40cb069ed00984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:8a:47:7c:a0:18:60:02:36:5d:c8:32:d2:
54:ef:07:e0:b7:cc:0e:c2:79:1a:2f:b7:8c:6c:05:
7e:17:b4:11:0d:ea:07:70:a8:9a:c0:f7:cd:92:9c:
d8:3e:03:52:5a:51:3c:7c:9e:4b:cf:63:0a:84:81:
54:3a:8a:27:1c:dd:c6:42:7d:f0:66:50:59:0e:89:
3c:68:37:42:e5:df:d6:c9:cd:7e:75:00:63:39:4f:
75:8b:e4:cd:97:dc:c5:a8:54:44:fc:92:c5:a0:0d:
b7:ba:dc:3b:07:fe:74:3f:8f:4d:1d:5c:42:01:37:
f9:b9:c9:e4:ec:3f:e3:bd:48:41:f8:cb:37:7e:ac:
2e:6e:33:d2:f3:57:99:fd:ce:75:81:95:27:f7:d5:
3b:97:c1:e1:8d:a7:c8:22:cf:8f:06:59:f8:f8:ea:
07:d7:61:e7:1e:3b:54:7d:73:9b:35:da:ff:5c:21:
d8:cc:b3:0c:d5:c3:7d:97:28:85:1f:99:96:ab:22:
68:44:76:ec:67:73:33:c2:c4:a4:2a:17:3a:63:3e:
2b:bb:1f:ba:43:62:fe:38:74:88:ce:86:30:ca:7a:
e1:f3:e9:4f:69:25:21:d8:40:3a:bc:07:56:5c:e8:
60:08:03:7a:81:82:51:af:b7:20:b7:50:3a:6b:8a:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:08:C7:8E:79:5B:92:C4:02:51:BC:7F:40:CB:06:9E:D0:09:84
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:50:46:67:c6:8c:04:4a:21:dd:5a:f8:b3:f1:4a:fc:ba:13:
e4:c7:1d:e0:d9:ce:44:46:a5:f3:c8:72:31:fc:08:86:92:b6:
7e:39:0d:79:5f:a7:8a:81:14:a9:d2:71:e5:6a:f6:d2:44:1d:
64:af:a6:fa:d6:05:d6:1a:60:e3:69:98:40:e4:20:96:61:da:
e4:a4:b3:00:5a:1e:e5:60:ea:6f:6d:dd:e7:6d:ff:c3:14:d5:
5f:e5:5b:05:f3:22:a2:51:af:5f:4c:44:e4:d4:4f:e0:f6:2d:
62:c6:af:9b:b8:fc:73:45:f2:d1:2c:8b:b1:1b:4f:82:1e:f4:
b8:7e:ab:c9:c1:95:a9:10:9a:f8:66:67:4a:4a:f6:f1:c8:70:
ec:0f:68:95:3d:5f:d6:05:b2:fd:97:c6:5d:b1:a3:e5:8b:05:
30:64:73:90:9a:dd:9f:a6:c6:b5:29:81:70:ca:8c:ed:9f:87:
de:fe:93:fd:1c:b9:2d:5e:6c:1a:73:13:a6:db:b8:63:34:28:
68:ea:c5:71:b3:2b:e7:43:2d:eb:f2:42:e9:c2:05:a0:27:5f:
5d:28:11:8e:79:83:92:fc:7a:84:a4:51:8a:dc:d1:f7:3f:16:
68:9e:e5:1d:d0:53:81:a2:26:d3:8c:c2:03:f5:13:51:d8:57:
ec:2d:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:05:46 2025 by rpki-client