Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: ZPVw2JB4xvwwmQKU8PLiodUthSeDvBIJg4gadVdTTz4=
Subject key identifier: 97:05:92:1A:F3:65:CE:6C:C7:8A:F9:9D:34:3E:1D:FD:A0:B3:5F:59
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 0196CDCF972CACB58F19E2BFC47873ADE457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0E9A
Signing time: Wed 14 May 2025 08:00:56 +0000
Manifest this update: Wed 14 May 2025 08:00:56 +0000
Manifest next update: Thu 15 May 2025 08:00:56 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: xpHTbgPGdZcXR98bNa2o4z5L0i5ZNBpAF1IcSMzmeuo=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:97:2c:ac:b5:8f:19:e2:bf:c4:78:73:ad:e4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: May 14 08:00:56 2025 GMT
Not After : May 15 08:00:56 2025 GMT
Subject: CN=9705921af365ce6cc78af99d343e1dfda0b35f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:19:26:e9:a2:e7:1e:06:c6:34:0e:48:0f:
bd:42:8b:04:8e:56:e0:70:05:8d:a0:99:f8:fa:c1:
f2:e7:07:b0:9f:f2:24:48:50:db:a0:28:9f:e9:d4:
84:4a:a5:05:e4:ca:a3:2b:b1:e4:9d:3c:47:73:75:
f7:69:e6:5a:50:dc:b4:d7:a1:e8:b4:5c:3e:fc:66:
e7:78:3e:0a:03:5b:ea:1b:e1:66:b4:67:d6:b6:a8:
b1:36:8a:85:7a:a8:31:8d:0a:1e:cc:d7:dc:74:50:
7a:07:71:72:02:93:f4:73:e5:94:4f:55:8c:74:fe:
2b:c1:e2:67:92:33:15:b1:98:cc:8c:19:45:80:95:
43:76:a4:ac:dc:92:54:b0:b8:87:f2:fc:8d:7b:82:
d9:aa:16:01:86:35:c3:59:df:a3:8d:9f:41:db:37:
cb:ef:8b:ec:48:f2:42:4b:dc:df:b2:a6:6c:e8:82:
b0:24:ce:dc:50:ec:28:bd:99:53:af:b9:d5:9d:44:
b7:fa:2c:d1:9c:76:92:ea:3c:e7:5c:45:dd:fc:3d:
40:cb:75:7b:09:f9:f2:76:69:f1:34:66:2e:4a:26:
c5:3b:20:f6:8b:0a:38:94:57:42:62:58:7a:26:3c:
e8:ee:b2:2c:35:49:a3:92:be:e1:d5:dd:03:c2:cd:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:92:1A:F3:65:CE:6C:C7:8A:F9:9D:34:3E:1D:FD:A0:B3:5F:59
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:a6:00:da:06:65:ad:cb:ae:b6:4c:33:dc:ca:96:81:cc:
3b:cd:cb:5c:4d:53:c2:2d:b4:a0:c8:98:3e:51:2e:c6:78:36:
cf:68:b3:06:ea:5d:6f:3b:a7:79:df:28:08:ca:de:a1:d6:6c:
e2:80:93:71:5b:dd:3b:39:ed:c0:65:61:5b:34:5e:79:bc:1e:
7e:b8:29:00:9b:a8:11:55:cb:07:c3:d1:4b:42:32:63:8b:18:
30:61:d4:f0:75:ab:f5:58:54:86:3f:0f:48:42:75:7b:ad:d0:
03:c8:b1:2e:b1:46:48:3f:e6:f9:86:7b:36:8f:ac:d0:8f:08:
6a:cf:8d:56:f7:81:d5:bd:0b:aa:2d:97:0d:d5:24:6c:37:e4:
71:aa:8b:bf:d0:28:06:63:b5:0f:5e:1c:93:de:e5:34:3d:99:
1d:e0:5f:58:ea:e4:c5:ce:60:2e:4d:1e:bf:5e:a6:f3:fb:7b:
5d:c0:95:63:dd:19:29:d2:8b:2c:fc:56:f4:c9:10:dd:8e:5d:
49:bc:ea:4e:0d:b4:b6:bc:5c:4c:27:b9:42:4d:36:c3:3e:35:
32:2a:ce:8c:11:8d:c5:8a:e3:d5:59:c0:38:31:09:d0:38:2a:
7b:03:25:cf:cc:ef:ed:eb:38:82:7d:1f:52:89:92:52:f5:c0:
c7:9d:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:55:30 2025 by rpki-client