Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: +xKmCHEwQMa6LHHnVg8vHTWr7tZfi2M6SOI9L3Ur1SI=
Subject key identifier: 3C:1C:26:51:19:4B:69:DB:8D:8C:C3:A9:4B:5A:0E:E9:CB:ED:71:34
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 0196579421669741445C32AC65B370477870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 1B
Signing time: Mon 21 Apr 2025 09:00:47 +0000
Manifest this update: Mon 21 Apr 2025 09:00:47 +0000
Manifest next update: Tue 22 Apr 2025 09:00:47 +0000
Files and hashes: 1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 1syL54CrNdPn37dAvY4laWl/U91zIf4rCPJ5sEHwFZ4=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:21:66:97:41:44:5c:32:ac:65:b3:70:47:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Apr 21 09:00:47 2025 GMT
Not After : Apr 22 09:00:47 2025 GMT
Subject: CN=3c1c2651194b69db8d8cc3a94b5a0ee9cbed7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:a1:a6:1d:15:23:f2:98:5d:34:46:d1:a6:
9c:92:c9:1d:da:23:14:c6:5c:bc:fb:8f:a9:96:59:
96:92:dc:4f:e9:6f:96:a4:b8:82:8b:c5:9b:10:68:
f3:fb:f9:f6:d9:7a:5f:f9:05:19:f8:e1:5e:4f:54:
8e:1c:ff:63:09:0d:ea:37:5a:72:14:3d:71:cb:3d:
ad:ee:97:1b:80:c7:bd:89:03:cf:92:3f:19:7f:33:
df:78:18:04:dd:31:25:08:f1:1a:f7:c7:25:94:24:
26:9a:68:78:23:30:09:0e:2a:b4:12:ca:5d:70:ff:
ec:06:f5:af:06:94:50:c8:69:ad:cc:75:62:48:c0:
31:c1:ab:ac:61:f4:f2:da:9d:75:f0:97:89:54:0f:
e7:b8:ae:fb:f8:fb:85:c8:d3:9f:a7:6c:72:a4:fc:
53:58:c3:3c:db:ad:f4:9b:70:5c:84:62:fb:72:0b:
66:99:3c:67:56:85:4c:ac:8b:9e:ab:cf:10:38:e1:
5f:22:d3:32:b3:7e:68:a7:99:ea:f2:21:86:34:18:
16:a4:fa:13:61:2c:90:ae:41:a0:38:3d:54:56:99:
8b:17:3d:67:44:af:d6:08:b4:e4:8e:a7:fc:15:ae:
70:da:1d:bc:43:11:50:39:cd:dc:b8:c1:7b:b9:d2:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:26:51:19:4B:69:DB:8D:8C:C3:A9:4B:5A:0E:E9:CB:ED:71:34
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:db:7f:89:fe:03:2f:b7:87:f2:24:91:b0:b4:9d:f6:fd:61:
5b:7f:a3:60:74:ca:9c:22:1b:b2:c7:66:14:bd:dc:de:20:32:
34:15:ca:f7:e0:85:1b:b9:d1:b6:01:be:65:c2:b5:cd:4a:af:
e9:0a:31:fc:a8:0b:ba:3d:79:74:b7:8e:26:30:12:49:ca:57:
e7:23:08:27:ab:af:60:2d:c8:0f:5b:28:81:79:12:98:3c:35:
87:2d:ec:96:44:8c:fd:80:65:c8:33:36:1e:b7:3b:bf:e3:52:
5c:4d:13:dd:a3:3b:f9:fb:19:21:67:28:93:f4:1c:f7:61:d6:
67:86:b2:60:8e:b8:15:b2:fe:1e:a6:83:5a:ea:81:b3:1d:74:
c9:b6:ae:d7:4c:ee:c3:a4:9b:6a:52:d9:1b:5d:77:4d:f1:2b:
60:ea:55:96:a9:34:aa:5e:29:a4:12:49:0b:aa:53:42:53:32:
22:60:16:2d:ba:30:71:24:43:af:85:88:41:a1:3c:12:f9:82:
66:67:4b:5a:65:1e:1d:90:59:8a:23:a2:61:6d:e0:3d:2f:79:
c5:9c:3c:02:0c:85:97:c5:fd:7e:a4:a9:63:87:9f:4a:fa:ad:
76:ec:05:04:15:3b:5c:7c:cc:58:1d:7e:ea:b3:b2:be:51:71:
ca:b8:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:53 2025 by rpki-client