Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: n7/9Oii4N6B9USe+ECwVot62vu//kNNX7c/bCqUSOEk=
Subject key identifier: 38:89:4F:78:2E:8C:39:5C:DC:23:07:31:E7:0F:C1:52:1E:FA:7F:67
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019652A48C091263D3BA4F3E4B4E3FA0FDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 53
Signing time: Sun 20 Apr 2025 10:00:37 +0000
Manifest this update: Sun 20 Apr 2025 10:00:37 +0000
Manifest next update: Mon 21 Apr 2025 10:00:37 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: EDblFHo2Mhb3Abi+H22kOcB/1t3QdExDHLzZPuSrefc=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8c:09:12:63:d3:ba:4f:3e:4b:4e:3f:a0:fd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Apr 20 10:00:37 2025 GMT
Not After : Apr 21 10:00:37 2025 GMT
Subject: CN=38894f782e8c395cdc230731e70fc1521efa7f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:ee:95:e1:20:71:16:46:b5:6f:79:a2:88:
c1:9f:5a:c9:cd:55:12:ef:2e:ea:83:3e:a2:76:1a:
dc:22:09:10:90:9a:45:68:b5:96:e0:34:47:2f:de:
10:64:6d:c5:f9:d9:37:5d:7e:c4:93:0f:e6:be:ac:
5d:60:c8:3c:ed:5c:b8:da:ea:94:30:71:06:95:9f:
1b:16:18:5f:60:31:eb:41:66:63:ed:cd:1a:18:08:
e0:83:76:31:a8:30:d7:88:c7:cd:fe:36:bf:c4:46:
49:39:ba:15:26:be:ba:18:da:9a:fc:e4:44:ab:5f:
c2:5b:b2:75:74:1b:dd:4c:13:7a:50:e8:ee:ae:50:
7f:ed:3d:28:85:23:b7:f5:e6:e4:0d:be:44:f9:3f:
a4:cc:aa:c7:c4:b4:d7:83:05:fc:7f:70:da:39:ad:
6d:95:a1:91:07:61:f3:54:b1:72:50:91:0f:83:23:
b9:6c:e9:ab:86:a7:8e:e0:26:7d:b0:0d:17:e1:89:
8e:37:c4:68:b0:ff:e7:03:fc:15:83:19:bd:9e:32:
92:31:a1:99:77:6b:0e:a8:4e:fa:6d:f8:ca:a5:25:
ff:e8:ef:3a:62:6b:fa:44:5e:13:ff:d8:49:a7:11:
28:d0:1b:39:3d:4f:39:2c:93:b2:e2:8e:7d:04:16:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:4F:78:2E:8C:39:5C:DC:23:07:31:E7:0F:C1:52:1E:FA:7F:67
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7b:85:3a:97:f1:29:a0:37:90:05:14:ac:12:53:73:52:ab:
89:86:25:77:a4:1e:c0:9b:07:ed:2a:07:25:69:d2:57:33:24:
e1:a6:ea:4a:d7:45:ae:d1:de:84:f8:e5:7d:e4:19:db:fb:95:
91:98:33:81:54:65:47:56:18:52:70:48:91:a8:ea:5d:78:b0:
d9:49:ff:c7:49:bd:e3:f9:fb:70:ec:ab:c0:25:c3:80:37:66:
08:0b:ca:04:c9:0e:b3:11:fb:d8:04:26:fd:7f:a5:8d:3e:97:
31:3e:9b:d9:f7:0a:bc:c7:9f:ce:a0:bf:35:63:d4:46:11:5c:
64:88:bd:51:c1:7b:30:5f:3d:cf:07:06:e6:9a:3a:48:d7:00:
ec:49:af:0d:65:8a:6f:00:15:a8:89:94:47:21:04:e2:af:af:
34:03:07:9a:6a:94:c1:ca:f5:44:40:6b:d8:b8:f5:3f:01:40:
fd:10:53:ca:3d:56:b2:16:34:54:6e:15:e9:91:7f:52:1c:46:
d6:6a:f7:67:92:06:5e:2a:ea:70:2c:5d:4e:35:d1:d4:e5:07:
8a:4d:c1:66:38:47:38:2e:98:92:4a:3f:49:6b:43:cd:ac:71:
04:1c:46:43:97:86:8c:a9:82:8d:28:35:d2:ff:74:e8:76:ea:
0a:d5:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:18 2025 by rpki-client