Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: bIIx58k0FcgAtjrLeXtZdnWB+V1iVSoYxx80sQLwbRg=
Subject key identifier: A7:7E:79:62:2F:8E:06:89:EB:A5:22:6D:3A:99:9A:36:BC:EC:48:27
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019510C6BFC472FA861A56BBC22080A9BA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 115F
Signing time: Sun 16 Feb 2025 22:00:15 +0000
Manifest this update: Sun 16 Feb 2025 22:00:15 +0000
Manifest next update: Mon 17 Feb 2025 22:00:15 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: lzdX0ybiw7j1ERewsU6MCM2YLQNrjUXBYXN3OhkM38w=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:bf:c4:72:fa:86:1a:56:bb:c2:20:80:a9:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Feb 16 22:00:15 2025 GMT
Not After : Feb 17 22:00:15 2025 GMT
Subject: CN=a77e79622f8e0689eba5226d3a999a36bcec4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:4a:ff:c9:d6:28:17:07:e4:a1:13:ca:a6:
bd:76:9a:ce:2a:e6:2d:ef:65:6c:d6:18:9f:dd:3e:
3b:30:0c:8d:76:b5:12:9f:3e:b7:43:a4:6e:b1:ce:
c5:ea:c7:da:50:f9:10:ef:84:98:aa:07:a7:fb:cf:
19:4c:c1:06:09:e9:7e:9a:e4:0f:4f:3d:91:e7:63:
08:09:24:d8:b5:4f:7f:0e:87:02:46:66:8d:6e:0c:
96:19:8c:8c:b0:e2:97:2d:9b:e0:b6:ba:15:3d:b7:
42:2f:db:1a:2a:72:38:b4:59:52:bf:64:47:60:be:
6d:cf:dc:92:fa:b2:1e:22:97:af:26:63:9a:f8:90:
c4:d8:db:97:4a:29:ce:bd:09:27:32:a7:61:b1:f9:
1e:e3:c6:28:99:81:96:a7:ff:44:a4:d5:47:21:b0:
97:89:14:54:e5:96:1f:d9:7d:e1:e8:2a:99:6a:35:
e5:69:42:0e:0e:35:c1:91:17:9f:cd:ee:e9:51:35:
2b:80:d6:ca:0b:a6:58:86:9c:25:94:6f:af:f3:61:
06:02:32:bf:47:68:a3:14:f7:3b:2e:f2:8e:89:a5:
d5:73:83:2b:02:d8:05:9a:0c:14:8f:8a:fd:d2:a1:
b2:2f:03:77:a7:75:78:fc:a8:28:13:ed:88:a7:2b:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:79:62:2F:8E:06:89:EB:A5:22:6D:3A:99:9A:36:BC:EC:48:27
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0a:31:f8:85:6b:36:c1:12:66:17:8a:96:5a:2c:28:b9:c9:
da:24:fd:a0:67:04:76:75:1d:52:08:19:f6:fd:f3:fc:e4:53:
89:a5:c3:24:84:79:e0:5b:8b:df:96:54:04:7a:a1:30:d5:8b:
a0:f6:d4:de:4d:bb:6b:84:76:a5:2c:90:2e:40:9e:2c:48:9b:
bc:d6:60:8a:cc:22:b9:6e:ab:32:0b:07:a0:f9:2d:34:9c:2f:
a0:d7:09:40:46:da:07:42:b5:99:60:b9:e0:65:d7:1c:a2:5d:
70:84:87:1d:36:45:94:e5:b6:e4:db:d9:c5:b2:4d:0b:41:6d:
d8:cf:4a:b7:19:fc:47:de:f8:72:8b:23:01:21:a6:a4:d8:98:
a1:42:77:4d:52:7a:27:c8:55:79:a2:d3:eb:1d:05:10:d0:36:
77:4a:27:ab:57:1d:6e:60:b7:99:99:e1:4b:1e:f3:0c:73:30:
13:bd:18:f7:cc:01:41:10:b2:c6:a1:c4:97:f1:22:2c:f6:ce:
99:4b:7b:9a:98:32:cf:18:26:30:36:53:a4:5d:34:0a:bd:97:
dd:2b:46:c3:b4:e1:a8:9a:25:21:db:c9:66:fd:35:2c:06:d2:
79:ab:1f:aa:26:ae:11:7a:67:c2:45:cf:a0:eb:bd:e7:e1:a8:
34:b8:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:00 2025 by rpki-client