Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: OESedbWWR9G7v+OP8Q8Wijw1LKzq/zDO2oA8tv1w03g=
Subject key identifier: BD:7E:59:75:B6:3F:F8:D2:01:24:6F:5C:AB:BA:9D:11:7E:F5:90:68
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 01964AEAB4743FF45F2575F83BE68F646A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 22:00:17 +0000
Manifest this update: Fri 18 Apr 2025 22:00:17 +0000
Manifest next update: Sat 19 Apr 2025 22:00:17 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: 8vieieqCvAWPCZrb3sNNdyeI5u/lJEcmJCkoXguwg1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:b4:74:3f:f4:5f:25:75:f8:3b:e6:8f:64:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Apr 18 22:00:17 2025 GMT
Not After : Apr 19 22:00:17 2025 GMT
Subject: CN=bd7e5975b63ff8d201246f5cabba9d117ef59068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:a0:2f:20:48:45:bd:3c:c0:26:49:20:7b:
eb:49:f8:30:2a:20:5f:0a:37:8f:04:8e:21:7a:32:
53:bb:78:38:2f:85:ae:16:c4:13:47:9c:bc:3b:aa:
28:99:23:8a:15:36:9a:6b:6e:28:d5:3e:10:0d:55:
41:ed:a4:8c:f9:ac:17:f3:a4:95:02:fe:06:45:8d:
e0:be:14:db:10:66:a6:10:39:6e:ba:02:04:13:c3:
31:cc:50:28:5e:81:35:f3:98:2e:3b:90:93:0a:bf:
95:59:17:fb:18:1c:05:5d:e0:ba:74:4c:c0:c0:1d:
14:e6:30:d6:1c:26:9e:a5:70:36:81:84:56:95:e1:
ca:84:f7:b5:38:3f:fc:d3:ad:86:93:cb:df:3c:76:
4f:0f:0a:8a:47:54:df:d9:d5:ee:b9:fd:36:fb:f8:
1b:c3:5a:94:b3:52:06:de:80:d3:98:27:ca:63:a9:
a1:99:82:ba:e5:14:b8:3a:e3:2f:f7:cc:76:30:f5:
54:83:0d:ea:2a:94:60:20:aa:b6:10:a6:ab:2b:db:
32:a2:06:47:4d:e5:bb:ab:1f:65:9a:e3:23:e1:90:
15:30:62:ca:79:30:34:75:b8:7f:9b:b4:a4:ff:cc:
21:d7:07:ec:f9:5a:4e:10:0f:47:31:48:d3:97:26:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:59:75:B6:3F:F8:D2:01:24:6F:5C:AB:BA:9D:11:7E:F5:90:68
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:81:04:83:e3:be:63:8d:00:77:68:04:6d:fa:97:57:d6:
4b:90:4d:e8:f5:97:c5:94:9d:8f:f6:fe:e5:10:a9:8f:ae:85:
e1:12:4a:63:e5:3f:9e:fc:83:88:a6:ed:57:84:dd:8d:f3:e2:
a7:de:c0:ac:ed:c7:91:74:e3:df:f1:3c:3b:05:92:42:40:79:
40:77:83:0c:62:77:3e:a1:cf:43:77:74:3e:f8:5e:4a:0f:e5:
03:62:cb:59:3c:3e:85:74:a2:c4:71:a7:6d:23:a8:e9:8c:af:
1f:00:62:63:85:c2:bd:64:4e:60:c2:eb:98:15:07:23:b8:a6:
bc:b8:35:62:ce:42:b8:44:b9:82:d0:8e:dd:ad:13:d0:d4:20:
fc:86:dc:3c:2f:03:06:b0:6c:be:d4:f8:34:55:9a:25:9d:cd:
a5:66:2c:db:09:6d:f1:4a:ba:ed:fc:98:c8:7e:7e:99:5f:99:
b0:03:c1:0f:42:88:f7:33:25:b0:24:8f:aa:84:27:49:4b:22:
59:7e:5d:d7:ea:b4:61:7c:8e:ea:61:46:2d:3e:63:f3:ea:e8:
0b:28:90:d7:ad:1c:f2:be:ef:d2:16:d5:4a:dc:82:e4:3b:8b:
5f:e0:b1:c9:91:7a:b1:a1:4a:6c:8e:92:fa:21:2d:86:43:89:
ee:da:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:50 2025 by rpki-client