Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: W+4jjL6uSc5hoAwS5uewPCtB/hN3BsuSnBolSSwN07Y=
Subject key identifier: 68:5B:B7:B5:F8:FC:8E:54:73:7D:15:DB:52:55:C1:8F:F1:BF:15:C9
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019652000978C5CD133542BC83220F4FEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 07:00:56 +0000
Manifest this update: Sun 20 Apr 2025 07:00:56 +0000
Manifest next update: Mon 21 Apr 2025 07:00:56 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: NFAJ856GWdB3nuDk9+Ow4GdruiCcnagMXm6BupoXCN4=)
2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:09:78:c5:cd:13:35:42:bc:83:22:0f:4f:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Apr 20 07:00:56 2025 GMT
Not After : Apr 21 07:00:56 2025 GMT
Subject: CN=685bb7b5f8fc8e54737d15db5255c18ff1bf15c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:12:a2:f4:79:bf:a1:8c:fa:d9:96:0c:50:
15:38:ed:c6:74:9b:bb:79:32:06:21:23:da:7c:ca:
57:5f:3a:8b:7c:0d:45:f6:67:12:23:8d:22:69:e0:
2a:af:03:80:ff:39:5a:e8:00:69:45:9a:1a:5a:47:
18:27:14:3b:7a:61:0a:26:00:27:3c:7b:7b:7d:38:
dd:1d:35:ae:5f:4b:6d:4e:ab:ab:d3:d0:da:25:32:
b0:1a:7c:98:02:fd:29:ac:0d:c5:0a:1c:d4:1f:7e:
b0:93:a2:2d:b3:d7:31:41:a4:3b:4a:ee:15:74:82:
df:15:04:e8:6f:9b:aa:aa:cb:19:fd:a6:68:09:0c:
61:e4:61:f0:ae:02:a8:da:53:a6:2b:14:d1:1c:8c:
d8:93:a1:cc:93:17:6e:8f:64:e9:93:53:4e:66:c4:
05:61:ca:08:21:5a:5e:ba:5b:77:98:06:52:8a:02:
42:9a:b5:a5:11:cc:b5:25:66:be:bd:01:67:6d:32:
02:a3:4b:1c:21:2e:6a:e5:6d:05:83:89:30:71:6a:
05:55:ec:ef:17:2e:ac:09:8b:41:cd:41:48:55:3e:
af:98:71:a4:31:bf:ea:74:25:ac:79:6f:2f:4b:d9:
7b:ab:a0:5f:cf:31:91:fa:d0:e2:65:18:52:fa:0d:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:B7:B5:F8:FC:8E:54:73:7D:15:DB:52:55:C1:8F:F1:BF:15:C9
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d2:b1:b0:47:14:dc:b3:e7:3d:8b:49:25:27:b5:e7:3e:ee:
ca:a2:67:b1:f6:ec:53:1c:f7:00:29:fe:b1:d9:1d:2f:65:22:
cd:76:65:56:4d:fd:19:cd:de:a8:56:43:d4:cc:6c:a2:94:dc:
81:17:14:e8:0f:47:5c:0b:0d:5c:54:bc:44:f0:b8:1c:72:58:
c3:91:a0:fc:a3:26:7d:90:6d:24:d3:5d:f3:db:9b:0f:43:a6:
cf:3d:7e:86:0c:2c:3c:86:2a:9c:67:f0:98:99:82:6e:77:33:
8b:f2:40:46:21:e9:92:ad:1a:b7:2d:d0:5a:9d:60:fe:10:d1:
2c:66:ac:d6:2c:91:27:ba:cf:98:c4:b9:09:f4:16:9e:e5:62:
e8:90:9f:26:dc:79:22:7c:fe:35:b2:a5:0f:35:2f:54:42:6f:
c9:fd:2e:03:e6:a5:06:f5:39:9c:dc:a8:79:bc:38:85:60:be:
28:aa:f6:1a:4d:f2:38:b1:6c:3b:34:e6:12:8e:56:36:af:26:
ac:93:2e:47:a2:2c:14:35:a8:75:04:a8:3f:20:ee:3d:ff:0a:
9d:b7:d8:9b:15:fe:83:fe:7d:32:b7:07:38:d8:42:36:8c:fd:
79:e2:e3:d3:61:19:7b:9c:7e:c4:2b:f3:07:11:0e:b9:ad:33:
93:3b:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:24:58 2025 by rpki-client