Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: qCD206b60D2q57mgfOpzR2j4pm1l0F30gcoq1HY4iew=
Subject key identifier: B6:19:16:AF:4C:EB:B3:02:E2:7A:3B:CF:A8:39:AD:29:AE:D2:C2:E9
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01969D1A2A2CFF0FA61BFA92C253EEE1276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1521
Signing time: Sun 04 May 2025 21:00:59 +0000
Manifest this update: Sun 04 May 2025 21:00:59 +0000
Manifest next update: Mon 05 May 2025 21:00:59 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: Qn7AbBzRJLICNuCduWyj6Yqfh/AeaBOqLzDRSBUlwPM=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:2a:2c:ff:0f:a6:1b:fa:92:c2:53:ee:e1:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: May 4 21:00:59 2025 GMT
Not After : May 5 21:00:59 2025 GMT
Subject: CN=b61916af4cebb302e27a3bcfa839ad29aed2c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:ee:d7:4c:0a:d1:c0:dd:09:07:a8:69:73:
4a:55:71:b0:6c:82:e7:bc:d8:23:6d:26:9d:d7:df:
63:cb:7b:5c:7b:6a:4c:f0:72:9d:6f:05:04:93:61:
4f:2f:04:6b:5c:d0:d0:5b:51:49:51:8d:33:bc:a1:
d1:75:a1:a7:c0:98:4b:19:92:c8:41:4b:7a:c2:9a:
aa:d5:7f:d1:42:bd:a5:7b:ad:62:5e:f8:ec:6d:e4:
06:26:f1:99:6a:cc:02:a6:de:ae:00:cb:c2:29:02:
b0:2d:f3:39:df:4d:97:aa:ba:77:0e:17:c9:d9:f5:
e5:c8:85:3c:e9:2d:c8:fb:c3:d0:cf:08:68:6c:34:
bf:61:a7:48:31:30:34:a1:f8:08:8c:9e:d0:93:39:
1f:7e:5f:e3:28:f1:73:db:01:0d:a5:09:5e:9e:8f:
25:de:e9:e2:83:6e:3f:b7:cc:7e:28:a7:47:9c:e7:
df:d7:6a:a3:8a:af:fb:11:6a:ec:13:3a:12:81:b5:
56:05:81:d9:53:af:57:0d:c2:01:a3:01:a2:41:34:
2f:f7:57:2f:c8:52:9f:d6:33:2f:bc:43:5f:9f:d4:
d7:86:c8:a8:e4:5b:cb:ed:ac:d6:c0:5e:c4:40:08:
50:b5:d6:ed:04:49:57:b9:82:f8:2e:c1:de:b1:15:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:16:AF:4C:EB:B3:02:E2:7A:3B:CF:A8:39:AD:29:AE:D2:C2:E9
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:c7:0f:34:a9:c2:72:d5:1b:32:d8:69:4d:ad:9f:0e:f2:
0a:21:0e:39:fa:a2:6c:da:26:55:44:59:45:7f:df:c3:e4:07:
fa:25:79:74:cc:32:3e:12:86:50:c1:46:af:24:e5:6e:e8:ad:
7a:6a:54:c6:49:2c:7a:c6:38:ce:30:73:fb:c9:6c:cd:f6:14:
88:68:09:6e:29:c1:a1:19:16:d9:fc:2e:03:18:00:ff:d7:ee:
9e:ba:2a:25:53:3e:d8:0b:7a:13:27:05:75:73:b3:d0:16:e4:
a1:7f:f7:e9:ac:44:0b:7b:90:c5:cc:90:1c:d1:f5:22:b0:15:
6b:5f:d2:2f:5b:5c:a2:07:65:c5:4a:79:7a:ab:8c:2a:ef:14:
2c:6b:17:9e:3a:6e:a3:9f:e4:8a:3a:a6:3a:cd:f6:0f:4d:ea:
f2:bf:f2:24:46:e8:b7:22:30:46:3c:59:bd:18:60:ca:8c:d1:
65:f2:0d:22:16:a3:8c:13:5e:c2:d9:e9:08:ae:f8:aa:d2:cf:
3d:98:38:2d:53:b5:5b:54:f3:bf:21:bb:7b:ac:b8:00:6a:21:
0d:7a:ef:b9:78:bc:21:43:8e:4e:3c:be:74:27:b6:48:5e:ec:
8d:0e:c1:51:78:0d:5e:1c:a7:e7:bb:8a:7a:f2:b2:cc:ad:77:
19:82:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:07:45 2025 by rpki-client