Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier: tq0IKrL6BRGYfUa623UUE4cwz/QK7HQdKdiIhbHvwcs=
Subject key identifier: B3:85:A6:9B:58:25:86:27:E4:26:DA:16:FA:19:F1:DE:66:6B:B4:FE
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial: 01974A0C82BB784D0F54830097167E52653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:23 +0000
Manifest this update: Sat 07 Jun 2025 11:00:23 +0000
Manifest next update: Sun 08 Jun 2025 11:00:23 +0000
Files and hashes: 1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: l86Qv3F/s34FMnd1Zrac7CNwIwnyJiyyZK+9VY0uwMQ=)
2: pVRh1H8i6hpGm0AJsVhAXpoV0YM.roa (hash: yQAZF8uKUbV2hSWHi72VMNtufOdhujdp62Q8WwrqslI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:82:bb:78:4d:0f:54:83:00:97:16:7e:52:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
Validity
Not Before: Jun 7 11:00:23 2025 GMT
Not After : Jun 8 11:00:23 2025 GMT
Subject: CN=b385a69b58258627e426da16fa19f1de666bb4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:0d:d8:18:f7:7d:2e:62:e8:d5:c9:12:57:
8d:a0:b0:6d:c1:4d:52:8c:92:f1:32:90:b8:ee:a5:
09:13:33:9d:5b:51:1e:a7:f5:a1:63:f2:3f:f7:99:
4e:6f:89:99:ed:a0:c6:e4:f6:4a:21:a2:b5:91:44:
31:61:20:d3:f4:43:8c:2c:b7:bd:6d:63:c7:d7:82:
11:db:27:18:f1:81:0b:3b:3d:5e:2e:44:54:ec:97:
95:85:25:ce:86:8d:8a:31:f5:f9:38:53:50:27:02:
39:d3:bf:60:e7:89:e4:55:fc:22:e0:a7:1a:52:b1:
34:66:27:59:7b:ba:ad:e4:8e:f2:fd:a8:9d:20:49:
c7:9d:fc:44:78:39:d5:bc:2f:3c:b4:f9:93:16:c6:
c0:ae:cf:a6:97:4b:5e:9d:10:74:fb:c5:b7:7f:f7:
5c:84:cf:42:37:1c:b2:45:79:4a:72:49:07:41:3a:
04:1d:67:32:7b:ae:27:ee:83:7c:4f:72:09:ef:63:
8d:8e:24:31:a8:72:3f:e3:08:1a:6b:eb:63:d8:82:
2f:88:06:c6:14:67:a2:a7:98:c2:bb:61:48:a3:e3:
38:ef:b6:39:b3:c1:08:92:f7:0f:1d:8e:9d:2a:36:
c9:fc:1b:b1:d7:3c:08:d1:93:b7:9e:fd:a0:67:0b:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:A6:9B:58:25:86:27:E4:26:DA:16:FA:19:F1:DE:66:6B:B4:FE
X509v3 Authority Key Identifier:
keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3d:05:3a:fb:54:c0:66:62:43:38:74:a4:d7:9b:89:04:a2:
05:57:40:59:65:be:e4:cd:df:91:c8:36:19:a1:84:b3:11:f5:
c9:a5:34:9d:c2:48:f2:5b:c1:a6:04:9a:72:4d:a0:53:6c:89:
30:2c:f5:bc:05:7b:51:3d:f5:47:32:4a:35:22:83:d5:ca:1e:
56:85:54:24:24:57:8c:85:38:12:b0:58:89:34:d4:0f:3c:52:
c0:c9:6f:b0:3c:f2:1f:ac:60:57:24:36:32:61:50:ed:46:3e:
f6:3a:76:35:ed:8a:23:65:9f:c8:3e:f6:fc:dd:7c:ef:43:b6:
0f:ac:6a:3a:27:45:7f:ea:60:03:59:9f:b0:6d:f5:fb:2b:ee:
f2:94:d5:1b:33:0b:20:4d:ee:ac:b8:a8:a6:7c:87:45:75:d7:
77:14:be:e7:ea:50:35:e3:32:ac:80:0c:53:d7:62:c7:8a:a8:
64:dc:8a:36:80:8c:05:49:e3:ff:86:7a:f7:eb:7b:62:bd:61:
b0:9a:24:d7:e8:e6:a3:c5:a8:34:35:4d:64:b2:7d:b7:ee:89:
c6:6e:8b:ff:a0:ea:30:f6:ba:6f:0e:b0:42:23:55:22:af:5f:
90:04:a7:ef:0f:81:44:95:52:ca:6d:d2:d1:5a:67:25:22:fe:
06:25:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:33 2025 by rpki-client