Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: i1eNhQ1FYLT1FMnTKl0RgEei8d6iEUiWdbEK/+0RAlE=
Subject key identifier: 58:A3:00:BB:7A:E9:30:F5:A1:74:C4:C7:65:C7:7E:5A:F9:D7:36:75
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 019645568889261CC149421579DFEDEFB3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0B0A
Signing time: Thu 17 Apr 2025 20:00:20 +0000
Manifest this update: Thu 17 Apr 2025 20:00:20 +0000
Manifest next update: Fri 18 Apr 2025 20:00:20 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: 3QYVcNZ1tOV55dbvqAXqkXc1WjqWNL75jnTuyP3sZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:88:89:26:1c:c1:49:42:15:79:df:ed:ef:b3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Apr 17 20:00:20 2025 GMT
Not After : Apr 18 20:00:20 2025 GMT
Subject: CN=58a300bb7ae930f5a174c4c765c77e5af9d73675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:94:7a:c6:99:d1:3c:db:21:25:52:1c:d6:
6d:78:24:1a:35:59:da:86:39:f8:10:23:b5:a3:02:
39:09:d3:0a:89:eb:c5:12:a6:74:a7:07:bd:cf:06:
80:82:45:57:6f:41:59:28:38:6f:c8:a4:5d:50:7f:
a9:07:cf:ce:9e:33:d2:33:e7:6b:1f:72:24:79:47:
47:66:46:48:48:1e:13:bd:ef:2d:e7:1a:90:a9:b9:
d8:53:c8:91:31:4f:5d:67:63:97:9a:4d:2e:22:e6:
8d:52:cf:bf:7a:5d:b8:bb:cf:96:7d:67:fa:1e:7e:
58:58:0a:87:99:e8:c1:d1:78:86:dc:2d:30:d2:7f:
1f:e6:79:b8:47:3b:39:83:34:02:c5:b3:6d:1b:59:
bc:52:1c:5c:de:1e:ad:68:37:6b:dd:db:7e:7e:2a:
a0:b9:cd:50:49:4f:4e:10:54:5b:a4:89:3c:6d:10:
98:d5:cb:02:55:eb:af:61:d4:fd:fc:45:9a:e9:06:
d3:a3:96:15:4f:e8:d2:5a:ff:5e:b6:69:23:bc:47:
45:2a:c3:71:06:0d:de:20:01:fb:bc:95:e7:1e:29:
6b:4e:ce:da:89:70:81:ed:31:49:68:05:8a:66:80:
af:5c:55:be:1f:f3:91:31:bc:fa:c9:4d:08:c3:8f:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:00:BB:7A:E9:30:F5:A1:74:C4:C7:65:C7:7E:5A:F9:D7:36:75
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:ed:31:38:99:9b:e8:42:88:cc:5b:02:eb:40:20:74:a0:
d0:79:db:4e:f8:00:20:b0:c9:8b:57:87:37:e8:d5:ed:0f:48:
3f:af:c8:0b:5a:b4:20:96:4b:cc:1d:6a:43:ee:c8:6e:e4:72:
76:f1:9b:15:be:62:54:cd:f0:3b:1c:e2:4a:5d:f1:a0:bd:44:
6d:42:c5:97:c6:8b:a9:59:3f:2c:de:3e:76:cf:0a:ff:e7:0a:
2b:e9:99:98:b3:6a:90:f7:6c:45:f3:ee:4b:98:7f:ec:ed:66:
79:e5:f6:f8:64:54:d9:b5:08:e9:e3:8e:ef:be:d4:1a:32:a2:
80:83:fd:25:ba:c9:bd:44:70:8a:7c:cd:f5:0a:46:a0:61:59:
00:e5:aa:c8:da:6f:ab:97:26:f1:f1:2c:76:c8:2c:80:c4:4f:
7e:f8:26:f3:0b:d4:24:a3:81:69:0f:c7:a4:d3:ce:c0:8b:32:
05:d9:dc:89:11:f6:d9:b0:33:d7:0c:3a:f9:83:01:b4:37:da:
dd:92:35:78:ea:76:6f:a5:a8:e3:37:05:ed:53:2b:7a:2f:3e:
c5:8d:dc:2e:7a:20:5d:44:ac:03:b1:79:ce:93:e5:78:37:61:
bd:7f:cb:4e:94:4d:43:50:f8:0c:67:7c:fb:2d:d6:dc:47:41:
aa:1c:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:04 2025 by rpki-client