Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: 9upIfku5l5f4ecSB6+e0glpFfKtoRKh1ngIndRc7naE=
Subject key identifier: 0E:A7:17:0C:C3:57:C8:B6:0D:28:AF:49:3C:D4:E4:D4:87:BD:85:06
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019656B803B5E505B5F96ECDBD8F8DBD79D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 014C
Signing time: Mon 21 Apr 2025 05:00:22 +0000
Manifest this update: Mon 21 Apr 2025 05:00:22 +0000
Manifest next update: Tue 22 Apr 2025 05:00:22 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: MeBhRECiAH+LGV5s114jZjEu4Y8Vw6nfDUdfe1fyN1k=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:03:b5:e5:05:b5:f9:6e:cd:bd:8f:8d:bd:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Apr 21 05:00:22 2025 GMT
Not After : Apr 22 05:00:22 2025 GMT
Subject: CN=0ea7170cc357c8b60d28af493cd4e4d487bd8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:f1:a3:b8:b0:c1:60:73:22:1e:01:05:10:
20:2d:50:29:8d:61:10:f9:0a:f2:d8:11:ad:94:93:
47:b1:67:23:67:de:33:0d:dc:9b:4b:b1:45:5b:55:
1b:34:7f:e0:b9:2e:ec:1e:2e:9a:bf:3d:88:88:d4:
7e:35:2f:2b:15:d8:4b:38:76:6d:5d:38:5d:8e:1f:
0f:92:24:f0:27:63:3d:36:e4:d5:6e:a9:72:1c:70:
cb:03:e2:0d:67:8c:5a:cc:1d:ae:ee:e4:f4:94:62:
8f:1c:86:c9:7c:30:6f:66:a3:55:02:ee:c2:c6:3f:
ad:68:17:d5:7a:a1:ac:c4:ed:7c:41:65:3b:27:8e:
ea:69:c7:9a:d0:2c:92:7c:4f:fc:43:33:e6:6e:1f:
93:96:3a:c3:72:ec:17:14:85:bb:93:ed:a7:af:cd:
5c:2c:6b:cb:af:95:f3:a7:0f:ef:b7:5d:26:48:9b:
f9:f6:80:54:0a:bc:01:dd:5b:a3:ff:dc:69:dd:8f:
4a:73:22:b9:ba:99:76:6b:b8:3b:f6:cd:3a:41:d4:
6e:72:71:cf:27:da:cb:10:bb:d6:94:66:73:ce:f6:
0b:52:2c:54:5a:fb:66:70:ec:f9:70:b3:e9:ca:38:
6d:6b:0c:d2:4c:47:5f:84:3e:ee:c6:41:b2:55:c0:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A7:17:0C:C3:57:C8:B6:0D:28:AF:49:3C:D4:E4:D4:87:BD:85:06
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:d9:7f:5f:09:a7:90:fc:be:90:2c:79:b2:0e:be:b3:9c:
9b:57:4c:51:ec:3e:2e:c8:77:76:6f:0e:2c:26:e3:ce:7b:36:
74:af:84:13:c1:45:9b:b0:67:2b:07:c0:dd:67:f0:a5:e0:01:
09:45:58:e2:12:68:c2:47:cf:45:2e:ab:03:6d:9e:58:a3:68:
20:53:32:61:b2:c3:95:03:b0:6a:2a:d1:f4:2f:c2:f7:d6:98:
03:90:e7:86:7a:ab:46:c1:f8:d1:3b:28:45:cc:00:20:9e:5e:
9b:db:53:d3:c8:0e:fe:7d:57:ff:8d:48:c0:be:f6:9b:b1:61:
60:36:47:2a:f6:4c:ce:34:c7:c5:09:3d:94:c1:b9:a0:9e:14:
bf:95:e7:8d:21:e2:7b:7e:67:5e:00:41:25:2d:17:7f:01:8b:
42:7d:e1:ec:81:92:94:e1:33:ae:1f:dd:5f:93:74:06:db:fb:
65:0c:9e:7a:c6:5f:c6:1a:14:8c:8d:5c:c7:8e:e2:ad:62:a3:
82:f1:9b:60:23:37:91:bd:e5:c4:26:be:0b:bb:8e:64:d9:0a:
c2:9f:dc:9e:0a:cf:66:8e:c0:56:78:67:b1:0a:02:cd:e3:c9:
e3:ec:28:e1:34:aa:a8:43:33:d7:fb:83:22:9d:87:8a:69:55:
fb:5f:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:04 2025 by rpki-client