Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: 0DN0dH4KQlVvtonwUrnOGY5pN6tbn9Z6fgM2EfjFANs=
Subject key identifier: EA:85:F3:BB:FA:FA:A3:0A:7E:FA:54:7D:B8:05:AE:3A:0E:AA:44:3A
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 01964B21D7FFD4D2FDC3B9A447860DD97921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0CAF
Signing time: Fri 18 Apr 2025 23:00:31 +0000
Manifest this update: Fri 18 Apr 2025 23:00:31 +0000
Manifest next update: Sat 19 Apr 2025 23:00:31 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: mff5kXijgHhvt+LP1opsVsbzQ9Y5i8rTmubWK4mWwWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:21:d7:ff:d4:d2:fd:c3:b9:a4:47:86:0d:d9:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Apr 18 23:00:31 2025 GMT
Not After : Apr 19 23:00:31 2025 GMT
Subject: CN=ea85f3bbfafaa30a7efa547db805ae3a0eaa443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:07:df:17:ac:bc:2b:7c:31:76:99:35:b0:
89:9f:3b:43:20:16:6c:69:78:21:c5:20:ef:10:b2:
45:22:d3:e2:2d:9a:c7:d6:90:31:8f:63:73:79:f0:
fd:61:81:08:f0:13:b3:81:2a:e5:ae:22:bf:80:90:
b4:6d:7c:ea:be:63:8b:f2:7a:d1:85:6c:b5:ba:24:
b0:58:58:70:d2:74:b3:24:b0:ca:24:8d:53:55:0c:
f2:95:fb:f0:e7:09:cd:e9:95:d9:1a:64:b1:5f:c8:
fb:cc:b7:e5:52:7e:82:61:f9:2a:9d:d9:46:6a:40:
ad:84:ab:88:a6:c7:33:86:91:66:e7:5e:d1:8f:c6:
68:b2:7e:ba:11:53:ae:82:e6:31:94:76:c9:17:82:
61:e7:58:ad:83:6e:77:29:c2:dd:d5:6c:3b:e3:00:
f4:c1:62:40:e9:31:b5:ca:67:5c:d3:35:1b:9f:0f:
ea:9b:66:65:67:cf:bf:0c:43:2c:ed:5a:cc:91:0d:
eb:d4:13:3c:55:3b:2c:96:52:ab:28:56:42:73:0a:
c2:c3:5c:a0:a4:f2:d5:99:88:40:fe:ea:13:a3:ab:
c0:7a:59:58:27:09:2f:da:71:94:a7:30:2e:88:ee:
ea:3f:29:95:8c:c4:65:8b:a5:76:98:ef:a6:70:14:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:F3:BB:FA:FA:A3:0A:7E:FA:54:7D:B8:05:AE:3A:0E:AA:44:3A
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e5:42:a7:10:7c:ec:49:fa:9f:32:a5:23:41:ce:66:6f:6e:
9a:03:4c:0d:86:64:3c:f1:8c:6d:91:5f:c0:08:1b:59:b9:71:
30:8b:f1:bd:5f:c0:d1:2f:0a:27:f5:9f:cd:88:52:e9:4b:4b:
74:de:bd:dc:c3:6c:f5:79:9c:02:e3:b9:89:d3:93:5f:0f:47:
20:70:83:42:97:32:67:b1:36:74:8d:09:f7:a8:ff:41:38:4e:
7e:61:a2:0a:78:56:01:ef:78:c8:74:6b:a0:47:27:66:48:75:
4f:31:a6:7d:24:e4:6a:ee:17:bd:d8:38:82:3f:4d:f5:0a:4b:
7c:0f:18:ea:2a:b7:02:e3:2a:01:d9:e1:26:95:7a:9b:4d:c4:
12:01:4f:9f:f8:d7:ac:a9:91:ed:38:87:bb:3c:da:99:47:bb:
6f:f6:39:31:ed:2c:99:4b:bc:36:63:49:8c:ce:9d:14:d0:46:
64:85:19:fc:3a:b6:81:a3:6d:4d:5e:ef:62:67:e8:78:5a:77:
d1:8b:97:e2:0b:b4:04:aa:d8:ad:b1:03:92:b5:39:07:76:02:
e4:6b:4a:f7:78:d8:27:77:33:f9:82:0e:f2:d4:09:e4:ff:de:
b1:1f:2b:8f:1d:41:66:5e:85:49:1a:7f:11:7f:0d:7a:f4:5c:
bc:fb:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:27:03 2025 by rpki-client