Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: jp4nZgrx6QAIYiuqnBavf8nhlzbh0FcQ3JzU7+mP8VI=
Subject key identifier: D6:7D:9E:2B:C2:C3:8A:2C:C5:AA:6F:9C:7C:BB:B6:F4:FA:07:2C:88
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01969F085AE7129C8C7F45412A3C07770DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 152B
Signing time: Mon 05 May 2025 06:00:46 +0000
Manifest this update: Mon 05 May 2025 06:00:46 +0000
Manifest next update: Tue 06 May 2025 06:00:46 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 4/Pu3zb06knqdih74AkixtmbxWu2rEYWJQlZYvvHqAc=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:5a:e7:12:9c:8c:7f:45:41:2a:3c:07:77:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: May 5 06:00:46 2025 GMT
Not After : May 6 06:00:46 2025 GMT
Subject: CN=d67d9e2bc2c38a2cc5aa6f9c7cbbb6f4fa072c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:e8:0c:78:ca:68:1d:f3:12:f5:13:4f:e5:
65:af:d5:d8:d8:32:97:29:4f:7a:89:e1:6a:2f:fa:
e4:f3:e6:9c:ef:8f:b7:db:5a:10:90:3e:bb:7e:0f:
35:66:4a:ff:3d:20:8a:46:78:4a:16:e7:02:69:d0:
c7:96:2e:f0:5e:f0:71:fb:eb:03:62:8e:2b:a0:05:
41:7d:3e:11:09:b9:a0:ca:ca:19:d6:41:2f:3c:79:
d6:f5:41:78:7c:43:e9:38:b9:62:17:14:e5:b7:cd:
2f:7b:5a:bd:74:29:cf:25:b5:5c:e2:28:89:7c:00:
00:4d:62:8b:64:c9:fc:42:28:8d:96:51:e1:7b:c1:
19:e2:16:db:53:43:23:25:be:69:fc:45:e8:44:91:
2f:62:ac:9b:36:11:c5:81:47:dd:01:99:91:a4:c6:
5c:92:e0:10:c7:8c:9e:c6:3e:63:fb:1a:c7:41:3d:
70:eb:30:e9:70:f8:3f:16:df:20:30:07:54:e1:aa:
39:35:ac:99:58:d8:cd:f3:eb:4a:ff:db:17:2f:3a:
9e:f3:fb:59:1b:00:73:a0:a8:60:b4:5b:27:dd:4a:
83:57:c3:78:74:76:0d:52:97:07:b9:69:bb:20:86:
d8:bf:0b:08:93:da:f5:36:79:0f:25:82:61:c8:37:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:9E:2B:C2:C3:8A:2C:C5:AA:6F:9C:7C:BB:B6:F4:FA:07:2C:88
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:df:4b:a9:86:df:31:5e:8f:cc:1f:f1:23:f3:8e:9e:6b:
5d:71:30:8a:98:34:1b:c8:9a:56:82:0e:c6:04:70:01:7b:cc:
13:1f:c5:1a:b3:9a:6d:af:fe:ea:46:10:03:3d:e6:67:31:89:
da:7f:9a:04:06:7a:46:78:ee:dd:7d:fc:c7:2d:47:81:4f:99:
9e:d7:cd:dd:08:d8:81:ee:e8:91:b7:74:bd:fe:bd:9d:81:e8:
89:54:4e:39:9d:cf:59:5f:24:30:7e:7d:bd:08:fb:31:e5:fb:
09:37:5d:6e:c2:78:34:af:a2:a3:eb:0c:f9:86:39:dd:f0:a8:
e5:50:b7:59:2c:5c:43:a8:89:50:66:ba:80:e2:a4:b9:36:b2:
07:73:c2:2c:95:2f:67:6b:40:ad:67:39:07:7a:0a:6c:b2:35:
a3:1b:28:4c:ca:85:e6:68:cd:8f:87:ad:b2:f5:df:7a:ee:a7:
bd:83:de:59:43:a6:bf:ce:01:56:67:06:ff:39:76:8b:f9:56:
fe:9d:0d:10:94:37:6c:a2:88:e9:0d:d8:5c:66:45:f6:e4:f9:
4b:79:a7:e7:f5:52:3f:68:55:f7:df:12:ef:e8:5d:75:18:d9:
64:03:55:78:4f:89:ce:1a:bd:7e:84:5a:7a:05:06:ae:95:ef:
12:8b:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:04:36 2025 by rpki-client