Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: BYzpTSgFvT17ZJtSmHGjbZxdtx/mbRcHV07qo8xPryE=
Subject key identifier: 95:2B:B0:7A:73:18:68:B2:5C:B3:4E:15:2E:D3:30:DA:6A:80:1A:1C
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01958C6122C81AA912B19DC76536C43585CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 119F
Signing time: Wed 12 Mar 2025 22:02:10 +0000
Manifest this update: Wed 12 Mar 2025 22:02:10 +0000
Manifest next update: Thu 13 Mar 2025 22:02:10 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: Q9zFsryaBVTuSNSfM4QlJp/JmXJA5xHdv6KKbVzuBR0=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:22:c8:1a:a9:12:b1:9d:c7:65:36:c4:35:85:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Mar 12 22:02:10 2025 GMT
Not After : Mar 13 22:02:10 2025 GMT
Subject: CN=952bb07a731868b25cb34e152ed330da6a801a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:bb:37:d3:3c:49:a7:d6:d7:04:72:0a:82:
65:3e:51:5e:0e:84:5c:84:5b:01:82:09:0d:ff:bd:
e2:2f:cc:0d:6c:98:63:87:af:51:5a:f7:aa:a9:51:
aa:2f:1a:4b:03:e7:80:df:f7:90:57:08:2f:b5:0c:
94:b7:84:73:65:18:67:9e:1d:1a:31:f5:10:96:68:
55:35:b9:ed:dd:04:ef:d2:e3:8b:8c:94:5e:c6:fe:
81:09:d6:a7:a1:b6:16:46:5e:37:99:d9:d5:16:cd:
98:19:4a:37:47:88:4a:44:28:d3:de:79:cd:64:d5:
c5:7f:79:e2:1f:15:d6:6b:53:76:d9:93:f5:1d:ff:
37:9a:6a:1e:ec:0e:4d:94:a7:f3:93:35:68:8a:9d:
21:38:ca:02:35:dc:ec:10:3e:7a:d6:16:fb:0f:36:
eb:77:25:51:9c:25:c3:c2:c5:d4:99:73:d4:db:78:
82:76:2a:8f:6f:67:f0:c1:cf:88:94:d9:b2:19:e3:
d8:ed:b7:51:37:fd:57:1b:9d:63:47:42:d2:71:36:
55:65:45:19:72:05:4c:2b:4e:f9:8b:aa:ea:4e:cf:
81:d8:64:90:e8:59:35:c8:c2:4b:9b:33:44:ac:6e:
9e:fe:60:6d:e0:4e:8c:bb:8b:8e:68:c1:9b:cb:96:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2B:B0:7A:73:18:68:B2:5C:B3:4E:15:2E:D3:30:DA:6A:80:1A:1C
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7b:bd:93:6a:43:7c:8f:41:c5:c7:5a:ff:db:e5:e1:25:5a:
18:ac:b2:8c:9a:c5:d1:3c:83:56:1a:ec:c4:26:34:04:23:2b:
c7:bf:e2:7c:57:ec:c6:f6:c6:0e:7e:ef:e6:6a:01:af:43:fc:
15:1e:15:7b:68:b9:e4:d7:5a:df:3f:22:db:9a:ac:0f:12:70:
7c:da:7e:72:87:ae:f2:f5:19:6a:92:58:7b:f5:09:69:8b:52:
a6:16:db:ab:57:b6:12:f5:a7:44:ce:59:7c:6d:7b:e3:14:76:
07:36:2d:3f:11:69:e9:eb:fb:9d:7f:69:45:e6:f6:4b:05:40:
ac:cc:58:6f:4f:ce:d6:e3:0e:e0:fb:cc:01:59:57:2d:96:2d:
e7:08:03:41:cd:29:57:a2:c2:57:1a:57:3a:b8:85:8a:32:27:
f3:49:ae:dc:84:dc:13:81:39:04:fc:de:bf:c7:6b:b2:04:e8:
d4:b7:0d:11:44:b5:c1:37:83:0e:5c:e2:9d:5d:b0:1a:b6:99:
99:2a:1b:ee:56:b8:1b:4d:b3:df:9e:65:74:ce:e2:9d:86:3e:
5e:c7:25:f1:ae:20:98:b9:d8:13:c8:e5:00:85:66:ee:47:2f:
eb:0c:f6:1c:96:7a:95:27:ce:d9:c7:ac:b7:23:76:b5:e6:d8:
fd:57:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:59 2025 by rpki-client