Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: lotg3E8/0+1+rv10JT5DSiBQGDqVJQHE2xM/qlfPuw0=
Subject key identifier: EA:7E:5C:90:F7:B6:37:8E:29:47:04:CB:E9:9F:AE:5C:2A:EB:41:26
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 01962C3CACE7A124566D27580A593253AE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1206
Signing time: Sat 12 Apr 2025 23:01:35 +0000
Manifest this update: Sat 12 Apr 2025 23:01:35 +0000
Manifest next update: Sun 13 Apr 2025 23:01:35 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: vUw/Ufkg9ISA+lfiBKndZf4F1f40GHSI+aMReMU5mcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:ac:e7:a1:24:56:6d:27:58:0a:59:32:53:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Apr 12 23:01:35 2025 GMT
Not After : Apr 13 23:01:35 2025 GMT
Subject: CN=ea7e5c90f7b6378e294704cbe99fae5c2aeb4126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:06:ae:13:99:7a:99:a4:5b:14:fa:08:8d:
7a:56:a6:ee:97:ab:b8:51:e4:e0:58:1d:5a:e9:9e:
97:4a:29:ac:0e:d3:21:3c:87:9b:f5:a6:43:9d:e3:
23:b9:01:55:9e:7d:e8:7c:bd:6f:d2:47:23:29:8c:
a6:e2:ba:37:70:39:36:11:8d:2a:96:bd:69:6c:b3:
9e:f8:ae:4d:ea:e2:b0:26:1d:a8:06:5a:ec:aa:b6:
36:d8:d0:2f:73:fc:ff:b9:4f:b5:96:0f:6f:bb:28:
7f:fe:3b:9f:07:b4:88:6c:6a:5d:ed:bf:ce:07:c5:
66:fa:5b:08:4a:ac:92:9e:05:de:a2:8e:67:43:92:
3c:77:94:2f:09:6a:8e:b8:6f:b9:3c:2c:26:db:58:
46:d1:9e:ed:a2:69:4c:25:7f:bc:34:14:3a:60:e5:
00:11:38:8c:c1:7f:f3:84:c4:d6:34:30:6c:26:88:
00:df:3d:19:81:2c:4e:ef:8d:8a:d2:f0:8e:19:ba:
04:1b:b4:b3:65:52:a8:1a:39:bd:bd:5c:97:85:39:
9a:f6:85:a3:c4:03:5a:b9:13:19:f0:a2:77:0e:cf:
78:14:cf:7b:01:64:36:28:96:36:d5:45:52:68:bd:
38:ed:6f:50:a9:f6:0b:d5:34:93:a7:33:45:13:ee:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:5C:90:F7:B6:37:8E:29:47:04:CB:E9:9F:AE:5C:2A:EB:41:26
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f1:c4:e5:a5:e9:2f:4f:fb:07:10:7c:b8:bc:10:73:85:32:
a8:d0:6b:62:4f:ce:7a:92:03:11:8b:0f:98:f4:de:e8:ab:a2:
be:ba:87:63:b7:a9:0d:1f:2b:b1:f6:cc:6b:5f:be:be:4f:69:
c9:dc:7e:f4:31:ff:39:f4:eb:28:f0:e2:92:6b:e8:9b:39:fd:
96:c0:ef:dc:5c:3c:38:1d:23:84:86:b8:13:8b:8c:4c:83:63:
9a:7a:a1:55:bd:91:c4:f0:d2:75:2f:3c:97:63:85:5b:47:8a:
34:4f:3a:f3:e7:3a:8d:b3:ee:ad:2d:7d:44:92:f7:79:4b:a9:
8d:cf:a4:38:f0:eb:2c:df:57:37:1f:37:5c:55:64:7b:73:82:
82:b7:a2:b1:91:f4:6f:d7:96:c0:13:c7:e9:93:bd:68:6c:d4:
4a:0b:96:b1:e3:2a:95:f4:e4:03:45:03:71:54:92:8e:a2:c2:
59:0c:9e:2f:41:9a:b5:44:f3:eb:19:d0:cf:8f:46:fd:c1:c7:
84:52:f2:cd:95:91:e1:83:4a:ee:9a:42:77:85:32:20:fa:59:
55:a4:89:8b:2d:69:d3:50:c5:e6:cd:89:c6:9b:ec:5c:ff:a6:
a4:76:14:29:54:0e:ce:c6:89:da:0c:56:11:ec:4a:f8:f7:82:
82:02:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:01 2025 by rpki-client