Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: FVPbDL9Trk5htec2cKhS+KuHNua2qwPk+VtV0srGOH0=
Subject key identifier: 78:81:A3:C3:96:A8:87:AE:04:F6:2B:1E:24:42:1F:84:CD:0A:B0:81
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 0196D1E2D2EA85521C6081A70A1A505A2673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 03:00:25 +0000
Manifest this update: Thu 15 May 2025 03:00:25 +0000
Manifest next update: Fri 16 May 2025 03:00:25 +0000
Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: Jr0ubdxXjI9d45iZmtlJoQbQpw5Jua6YcgSxNYBWdbQ=)
2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:d2:ea:85:52:1c:60:81:a7:0a:1a:50:5a:26:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: May 15 03:00:25 2025 GMT
Not After : May 16 03:00:25 2025 GMT
Subject: CN=7881a3c396a887ae04f62b1e24421f84cd0ab081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:61:45:79:b7:80:1e:90:94:4d:7a:85:da:
f4:62:f3:5a:95:d8:f4:27:24:83:df:3c:3b:64:9d:
7a:04:10:35:8c:dc:2f:3c:86:48:e0:42:c6:7d:d5:
23:40:f4:a3:35:6d:65:ad:5d:b0:dc:6e:fd:b2:b9:
30:dd:64:d7:ca:91:9c:b5:33:25:e4:c4:63:b0:5c:
14:40:f7:90:2d:b9:25:a5:43:4b:f0:70:5c:e1:27:
42:05:30:c2:94:7c:a6:31:91:4c:6d:e3:77:c2:21:
5d:0a:29:78:11:2d:c3:3e:39:cd:57:41:a6:d6:5b:
2c:ab:ad:31:14:1a:24:0a:13:19:93:6b:cf:d5:f4:
1e:d4:fd:df:aa:f6:f0:b1:3f:44:81:9a:09:30:e3:
43:f2:40:a6:ce:bf:9d:ab:11:f3:46:81:95:50:31:
50:88:21:4b:91:f1:eb:90:89:a0:e6:b8:80:51:d6:
04:3d:90:2d:b7:f8:93:24:d5:80:f6:b8:b5:e6:e7:
f9:63:35:c9:3c:cd:a5:e3:ba:8b:da:9b:d9:41:a1:
4e:aa:d2:3d:41:d5:ca:2f:4b:67:d3:55:de:bb:61:
aa:c9:b5:a1:e7:56:ad:de:1f:0c:19:5a:d7:49:28:
0d:ae:3f:fc:aa:b2:57:7e:bc:b2:9e:9e:9c:07:f3:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:81:A3:C3:96:A8:87:AE:04:F6:2B:1E:24:42:1F:84:CD:0A:B0:81
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:78:b4:d3:55:f6:dc:75:83:2b:1b:55:79:e5:1d:d5:09:
b8:4e:f4:e8:00:c6:c5:ef:5f:8d:7f:c7:77:68:02:a6:02:71:
fc:a9:98:8d:72:97:a9:71:f6:0a:90:a1:c1:18:9a:53:2b:3d:
db:30:41:30:00:c9:91:ad:c1:63:86:80:fe:07:7c:e5:29:30:
45:a0:b3:b2:a9:d9:45:52:08:8b:28:6a:05:3f:12:66:62:8a:
f6:f5:5d:65:0e:16:15:8e:cc:d1:85:79:55:01:c7:06:6d:20:
1a:a2:c6:09:d3:d5:48:3d:22:f8:f0:af:ac:5d:16:5a:2a:0c:
24:5f:b7:6b:99:8f:e3:ef:e3:bd:9c:e4:c6:cb:d5:f7:a5:9e:
be:44:3b:65:70:52:e3:b5:ff:6e:14:1e:ef:55:f1:9a:f4:4c:
26:26:40:52:c5:9d:66:cc:9d:14:e4:7f:36:57:91:99:18:ec:
0e:88:47:cd:20:a6:1d:63:9d:7e:1d:b9:6f:b2:b6:43:95:ae:
98:fd:92:94:e3:6f:d0:c8:9e:8d:c2:f4:5f:17:04:7c:5d:fc:
6f:e4:12:34:1a:70:3e:72:d5:86:58:fe:d1:83:53:36:b2:76:
ff:91:d8:4b:6d:db:d3:cf:20:cf:5a:09:eb:be:3f:7e:97:de:
fd:99:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:46:38 2025 by rpki-client