Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: H3PpAIeIAH1Bo+r4U87GOjKMtw9wNIjH+fcdJu5pOWk=
Subject key identifier: 7F:A7:82:E0:A0:BC:A2:5C:97:D5:DA:03:C4:3D:A2:EF:C0:29:4B:DA
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01964A0F57FD2B76630C2C1EB7AFFC6EB5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 148B
Signing time: Fri 18 Apr 2025 18:00:41 +0000
Manifest this update: Fri 18 Apr 2025 18:00:41 +0000
Manifest next update: Sat 19 Apr 2025 18:00:41 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: IHVfy351tXqNWoR3E90vqJj45JJ9DsuWDLy55Dy3tNY=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:57:fd:2b:76:63:0c:2c:1e:b7:af:fc:6e:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Apr 18 18:00:41 2025 GMT
Not After : Apr 19 18:00:41 2025 GMT
Subject: CN=7fa782e0a0bca25c97d5da03c43da2efc0294bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:6e:b9:6b:f6:fe:24:22:1c:cd:7a:9d:ff:
52:8e:2c:c7:5f:4d:dc:e5:82:b5:f8:a7:6e:6a:88:
eb:7d:c6:90:0d:ae:08:ee:d5:d3:85:6b:2d:71:2c:
73:a3:c1:bf:57:9c:a6:d4:1d:03:3b:17:b3:24:81:
4a:9a:97:e8:c0:d6:ed:bb:be:de:d0:2d:dc:f7:49:
a1:fa:1b:be:b1:54:20:01:ad:92:cc:2f:2f:0b:78:
c3:ee:25:1b:98:07:d3:9d:5d:c6:69:5f:95:8a:68:
c5:50:a0:81:e9:53:7c:75:2d:16:bc:0c:2c:56:24:
08:ae:aa:63:5c:44:36:ae:c7:b0:c9:82:ed:20:13:
31:32:ba:9c:cb:91:c4:d7:ed:42:5a:ad:dd:19:ec:
d3:00:82:23:dc:0d:85:3c:09:40:95:92:3f:d6:89:
ce:83:92:3c:30:a1:ff:3b:7e:7e:89:75:99:80:4e:
5d:b9:fe:cd:59:9e:4c:07:49:f5:34:ca:00:22:33:
49:cd:00:c0:93:c0:36:9e:db:1d:fb:8e:12:01:0f:
8a:cb:2d:d4:8c:b9:6a:30:49:37:a6:8c:ac:07:c8:
28:d4:e2:e7:13:3a:31:b4:da:a2:5c:23:77:80:aa:
5f:47:ce:be:f0:ac:7e:80:6c:a6:b6:fd:f3:94:68:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:82:E0:A0:BC:A2:5C:97:D5:DA:03:C4:3D:A2:EF:C0:29:4B:DA
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:0e:f1:a7:57:09:9a:b0:e8:f4:0d:e2:5d:48:aa:d1:73:
00:d0:02:f8:5c:a2:83:89:d0:d9:37:68:43:b7:fa:b3:d2:17:
7e:3b:db:14:e8:e8:03:02:3d:f1:dd:f0:62:0d:ec:d3:e9:80:
af:02:da:59:7a:99:29:b3:0f:41:ea:5d:a9:25:39:77:5f:51:
44:de:76:92:e4:22:b2:63:80:93:9d:9f:40:67:73:b2:d0:4e:
b1:84:f0:55:f6:85:61:4d:03:0e:64:d7:58:c0:34:09:79:77:
68:ae:ff:48:2f:8f:74:ef:3a:10:b4:5b:e9:e8:35:d2:f9:9a:
82:81:02:e6:f8:cf:c2:15:bb:6d:9b:1b:1b:23:a1:64:94:99:
4e:84:78:17:f0:4f:3e:17:07:f1:16:e3:45:0f:ac:fc:8a:e5:
e0:06:ab:b3:12:2c:25:54:14:7b:b7:7d:e6:ef:24:45:5a:12:
67:8a:29:23:d0:31:5f:db:3c:47:9f:38:f5:f5:83:79:33:6c:
fa:e9:3e:f8:24:3f:50:73:ce:83:e9:29:23:71:f9:03:68:0c:
90:d0:1c:ef:a7:f6:c6:52:39:4f:ff:a6:20:5b:b4:91:42:94:
df:4d:bb:36:74:0e:70:fa:65:1f:2f:e4:58:f3:92:6d:d7:f8:
00:15:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:50 2025 by rpki-client