Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: ELYzvmvijMP46nXzAZVpita0b4CTreLRYcnP5zxp4io=
Subject key identifier: 54:48:30:A1:A7:96:99:50:A6:91:8F:B2:A8:DF:92:9D:60:26:93:06
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01964443DD6C446B979B11C9B7A08471A9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 15:00:20 +0000
Manifest this update: Thu 17 Apr 2025 15:00:20 +0000
Manifest next update: Fri 18 Apr 2025 15:00:20 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: kfuo9XZFW4/N5Yb6PtygaFzR93acpvbL4hZsCoEy65s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:dd:6c:44:6b:97:9b:11:c9:b7:a0:84:71:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Apr 17 15:00:20 2025 GMT
Not After : Apr 18 15:00:20 2025 GMT
Subject: CN=544830a1a7969950a6918fb2a8df929d60269306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:97:0c:cc:69:a4:9f:dd:62:4f:d1:0c:4f:
12:d6:18:6b:30:34:f9:b3:e5:d2:a3:1e:9c:97:e1:
b8:da:4a:01:0e:03:06:c5:f7:13:f9:21:3d:22:4d:
ed:00:bf:f3:3e:bb:bb:2e:ba:ce:16:8c:87:2c:6f:
d9:2e:a1:cb:1c:0d:bd:bb:f8:b5:88:87:96:d2:2c:
c0:4c:b1:4b:c8:37:27:16:e2:38:18:62:55:ce:40:
cf:cd:7f:71:fc:79:c2:13:c5:7a:7e:a3:90:30:ac:
be:01:e3:70:81:2c:55:44:ef:5f:f5:f7:36:87:70:
5c:08:a0:f7:2f:c4:82:2e:67:b8:04:17:09:4b:ff:
08:91:47:b0:15:cc:69:a1:4f:3a:9a:fa:ec:24:dd:
c0:97:b5:68:c8:d6:01:ca:68:d6:fa:42:94:dc:40:
0a:21:ed:a6:4e:4c:9f:dc:5c:fa:2c:c5:54:5e:5e:
ed:1d:7a:95:09:31:97:16:28:82:a9:d2:f5:df:86:
0a:c4:db:2c:04:f9:de:7c:18:fe:84:3b:93:36:6e:
ce:92:9d:1b:09:b6:95:75:9e:b1:99:cb:79:f9:03:
30:a7:7b:dd:84:56:51:f5:7b:a4:34:19:9f:3b:93:
4f:dc:22:73:2d:dc:ae:53:a8:77:4e:a4:de:2d:00:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:30:A1:A7:96:99:50:A6:91:8F:B2:A8:DF:92:9D:60:26:93:06
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:aa:67:bb:6b:9b:8e:ae:5a:3b:30:59:56:74:6c:dc:e9:
01:31:79:d0:4b:4e:7c:13:4f:e0:e9:86:e9:b4:6d:fc:68:46:
a5:c5:68:2b:37:86:a9:02:03:a9:c4:6f:f5:24:ec:fc:bb:1b:
03:7c:1c:4a:ac:ee:65:18:f0:d2:12:cb:3c:9f:c6:52:a3:02:
37:e2:73:ff:7e:5b:97:e0:1f:63:e9:50:9e:98:e7:31:f6:71:
7d:3f:14:3a:98:38:c8:31:c9:0e:c9:9e:89:af:f5:e6:f5:bd:
94:e0:eb:ac:ac:57:54:07:a8:9c:90:91:b3:00:dc:53:80:e2:
79:cd:57:f4:3f:ee:5f:b5:28:bc:48:37:f3:50:28:e8:0d:dc:
ca:74:b9:58:b8:43:3b:9f:68:72:bf:38:dc:89:2a:61:24:1a:
30:4b:2b:e6:93:ab:25:9e:a5:92:53:3b:fe:8e:20:92:6c:ca:
1e:99:b0:81:1b:2d:e2:c5:e9:1e:a0:c4:b2:cb:39:5c:02:03:
eb:81:8e:a0:75:31:af:62:95:9c:ff:08:32:03:eb:64:a5:5b:
f4:1c:5f:a1:10:20:05:ef:13:b6:2e:a2:44:04:14:15:4e:14:
2a:0d:9d:c3:f8:5f:ce:ec:34:c8:e9:bd:32:ea:9a:4b:93:02:
e2:bc:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:43 2025 by rpki-client