Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: 3MfTwy2om13zXF9TQ7MdIcB8Onr7UW7+JTuUp4HpSz4=
Subject key identifier: 5C:83:22:E7:FD:57:16:BD:9B:7F:DE:47:1B:BC:FD:75:86:38:CE:27
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019610C51D94BFFF757E4752EE70FE50C18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0D4D
Signing time: Mon 07 Apr 2025 15:01:15 +0000
Manifest this update: Mon 07 Apr 2025 15:01:15 +0000
Manifest next update: Tue 08 Apr 2025 15:01:15 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: pQwxfnh5KY0oEF/0x1xmamNSrSMm6l+4v4nMNzwpqio=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:1d:94:bf:ff:75:7e:47:52:ee:70:fe:50:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Apr 7 15:01:15 2025 GMT
Not After : Apr 8 15:01:15 2025 GMT
Subject: CN=5c8322e7fd5716bd9b7fde471bbcfd758638ce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:6b:86:b1:c0:99:70:6c:42:7d:83:e3:e6:
bf:d3:18:29:60:da:60:36:07:ec:27:e9:0d:f2:5d:
50:15:86:82:78:bd:c5:11:ef:1a:5b:95:cd:8a:7a:
aa:4a:a5:92:28:70:d7:f3:f2:19:a8:92:68:aa:65:
60:d1:9b:b2:6d:02:e5:60:b6:a4:34:cf:47:a3:e1:
17:c6:05:be:01:c6:3c:41:2d:df:c6:e9:25:39:a9:
e6:2d:d8:9a:88:8d:52:95:a7:6c:c1:fc:61:bf:69:
41:7c:b2:9f:29:c1:c1:69:3d:86:07:0b:1b:6f:86:
1c:8d:8e:d7:79:05:eb:87:ea:1e:0f:b9:5f:c4:bd:
5b:35:06:71:8f:df:ee:f0:4e:03:48:f0:f8:fd:73:
e8:5a:a5:06:f9:e1:89:7e:71:7f:98:cb:65:47:45:
44:d0:e1:85:12:a3:e5:c6:f9:dc:66:01:0f:56:3b:
e4:3a:68:8b:ab:f2:bb:93:10:64:3c:82:05:d3:7c:
59:6c:75:f9:01:d6:9f:22:c8:12:9b:a5:ae:34:4d:
1f:93:ec:24:1b:2b:7f:52:dc:72:d5:24:2b:dd:7d:
7a:b1:19:2c:da:16:7f:d3:64:3a:4a:44:e9:26:e0:
d4:10:e0:3f:40:64:ef:0a:e4:0b:63:bb:ef:36:43:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:22:E7:FD:57:16:BD:9B:7F:DE:47:1B:BC:FD:75:86:38:CE:27
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:85:7d:87:35:14:f5:83:6e:bd:6c:0b:9e:3e:38:05:a8:38:
7d:b6:b7:06:03:8c:f9:a0:63:49:37:2f:14:9f:69:68:0d:73:
35:68:84:87:97:eb:ac:d9:c2:a8:1d:57:37:c6:a0:7e:ac:8f:
f4:25:32:a1:97:cb:53:d1:3e:38:ee:5a:c4:07:d9:ca:b3:88:
cc:fa:0e:c6:4a:99:83:c8:63:3c:99:d8:09:eb:d9:1a:9b:3b:
7f:1f:86:96:38:cb:4f:3d:73:21:e4:5f:53:40:5b:02:5b:2d:
5c:3a:13:91:39:12:16:c0:48:c8:7a:55:d8:3e:cd:bc:24:7e:
dd:ab:49:2d:bc:56:7b:56:fc:21:b5:0e:25:40:8a:8d:16:22:
cf:50:39:77:c6:4d:fe:b5:8d:69:6d:9d:ad:4c:90:71:9b:0b:
3b:e7:cb:69:33:a4:08:30:ab:4e:50:0a:e3:3c:36:14:a7:f5:
68:7e:8e:ed:80:4f:6c:a2:9a:55:56:f4:e2:93:b7:6d:f1:64:
69:2e:7e:b8:d9:10:a9:88:ee:4a:52:3c:8a:43:8a:fd:e8:3b:
f5:75:8b:ea:53:1c:d2:32:91:ba:26:3a:fa:ce:22:f8:3d:9f:
d2:4d:d3:1b:5d:e8:03:58:d6:b4:f7:38:9b:f5:30:69:17:63:
65:fb:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:11 2025 by rpki-client