Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: EJE3GYzPh5iluP2QeBjnS37RAJk2dTgOpaB2Wu8WBfA=
Subject key identifier: 66:71:70:8F:D1:24:BA:20:88:1B:FF:2D:96:6B:31:B2:C9:AB:0E:CD
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 01974B8DB6643CA1BA5AE807BB006A309636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0DF0
Signing time: Sat 07 Jun 2025 18:01:07 +0000
Manifest this update: Sat 07 Jun 2025 18:01:07 +0000
Manifest next update: Sun 08 Jun 2025 18:01:07 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: dKX4Mp4Zh6O+FqwJwvKrDISoV905gG1/N8JpZt94ZL8=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:b6:64:3c:a1:ba:5a:e8:07:bb:00:6a:30:96:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jun 7 18:01:07 2025 GMT
Not After : Jun 8 18:01:07 2025 GMT
Subject: CN=6671708fd124ba20881bff2d966b31b2c9ab0ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:a0:03:d2:6a:e5:42:5b:08:2c:d2:5a:ae:
25:f3:3c:87:85:41:70:ce:8e:ce:c8:cc:54:1c:bb:
8b:f4:03:bb:d4:7f:dc:50:10:59:ea:e2:1a:90:d9:
46:c5:a5:55:d9:93:71:43:7f:c9:8c:4c:d5:7a:36:
63:68:a9:b1:d6:13:0d:6e:13:61:c3:27:65:dd:92:
1b:d4:9b:3c:1f:01:69:89:65:e8:48:88:e7:6a:78:
64:dd:2c:8c:a9:39:b0:1a:d7:8f:61:13:99:06:ce:
da:10:34:a6:c4:5c:fd:1a:37:b3:94:47:d9:78:a3:
6d:e7:5c:39:00:96:b4:69:49:7e:6a:6a:3e:d0:c1:
f8:f0:4b:37:15:da:f5:20:a3:6b:d8:a2:73:60:af:
a5:80:f7:59:67:5f:10:a1:79:6a:5e:47:69:3d:ac:
57:d1:36:66:8b:f6:fc:28:b3:a3:67:d6:2c:0b:a5:
f7:b0:9f:f9:17:9d:97:b8:f9:91:f5:bc:86:e1:c6:
64:ba:dc:97:53:21:00:13:31:7c:a6:e7:18:a0:83:
2f:fb:0a:23:96:5a:f5:16:2e:14:43:f2:60:b1:a7:
eb:3e:44:f0:2c:d9:95:f8:26:16:b1:c1:e9:45:b7:
45:cf:31:0b:75:d2:e9:39:f3:61:14:37:5c:2d:e2:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:70:8F:D1:24:BA:20:88:1B:FF:2D:96:6B:31:B2:C9:AB:0E:CD
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:e8:fe:ce:a1:da:b2:64:02:1e:09:79:e8:fc:41:79:02:
df:31:d5:50:b7:f2:54:31:c3:be:9f:96:9b:f3:2d:72:78:64:
e6:68:63:56:e2:d1:97:85:1d:d1:ea:6d:38:f4:9b:55:56:40:
ae:92:ba:0c:09:bd:22:e2:ea:f9:88:e2:4f:39:82:89:42:06:
7c:ed:a0:c0:eb:7e:98:5b:19:84:5d:85:72:a5:b3:ec:30:6e:
19:67:d8:6c:20:18:96:59:16:36:70:dd:5e:49:ce:a3:f7:b1:
d5:39:49:ef:d9:3a:d0:be:6a:6c:79:af:7b:dd:e4:33:bf:e4:
94:4e:96:3e:3a:22:fa:9b:f9:25:98:09:39:44:d0:be:be:01:
03:48:b1:36:92:8b:ba:69:a8:b8:d7:77:ae:23:24:03:fc:55:
c3:06:bb:e7:f3:a2:f5:e5:23:48:b9:2d:56:36:dd:f2:f5:5f:
58:a7:8e:24:ad:66:32:28:e4:e2:32:c6:28:3d:f9:e4:1a:8c:
d9:df:82:9d:48:ae:bf:4e:0d:88:6f:7f:5a:88:1a:a7:3a:c7:
38:c7:4f:a1:97:1d:57:e1:c6:fa:d6:4d:c3:4a:43:b4:c0:ae:
d3:39:57:e3:5d:6c:cd:e7:c0:76:16:57:12:ee:bd:d1:8e:b8:
cc:db:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:30 2025 by rpki-client