Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: k1RiR7slJyLqR/rLk8o5fbQ63BaR7B6YnkQY8ENpqEE=
Subject key identifier: 34:60:31:27:A4:50:47:BF:92:7A:82:42:D2:7B:53:5F:43:7F:7E:D1
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0196BF6F79476E24EBA59E3C2463013D0EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 123E
Signing time: Sun 11 May 2025 13:01:15 +0000
Manifest this update: Sun 11 May 2025 13:01:15 +0000
Manifest next update: Mon 12 May 2025 13:01:15 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 3qbx08HRnGx9jGaLmp1OvTyi8MEl7DT0Vbam/kYimnk=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:79:47:6e:24:eb:a5:9e:3c:24:63:01:3d:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: May 11 13:01:15 2025 GMT
Not After : May 12 13:01:15 2025 GMT
Subject: CN=34603127a45047bf927a8242d27b535f437f7ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:89:21:7b:f6:b6:d0:b8:15:9c:68:dd:0e:
35:70:66:f0:41:37:86:a5:81:21:f8:1c:3d:33:db:
05:a6:88:27:da:b7:f5:b7:55:15:03:72:30:44:e6:
70:f2:7c:15:0b:d4:61:bd:4a:54:77:1a:2c:29:ff:
de:ee:a9:e1:bd:17:64:e2:fe:bc:a4:43:be:c3:01:
39:a2:c8:4e:c3:fa:ac:2a:4f:1a:35:98:69:91:e8:
00:74:74:11:7e:00:a9:56:35:ea:c2:c2:90:6e:b0:
cc:60:89:19:e0:d6:15:ec:db:54:f1:0c:5a:33:5b:
8a:63:61:cc:31:ab:50:7d:6b:6a:39:8c:98:d4:42:
11:e2:51:9c:bc:e6:67:e8:bc:7f:bd:34:db:db:97:
d8:b4:eb:db:70:d7:3c:c4:be:68:e8:2e:5a:b3:fc:
76:e5:ce:19:ed:7e:2b:44:2f:cc:10:4b:62:8b:fe:
5c:c7:be:52:5e:5e:88:de:e3:15:16:7b:ce:0e:90:
e1:e8:c2:e1:70:4d:3f:e4:03:a9:10:c8:07:2c:8a:
31:00:73:05:a1:b3:41:23:c1:c9:55:a1:92:36:3e:
8e:52:3f:db:96:46:8d:e5:0e:ba:37:c2:57:db:e3:
d8:fc:c2:72:d5:13:4f:13:0d:a1:53:ee:da:67:a8:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:31:27:A4:50:47:BF:92:7A:82:42:D2:7B:53:5F:43:7F:7E:D1
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:64:ce:0b:fe:34:3a:9f:0e:4f:b9:e3:bf:92:d4:60:0d:
23:e6:0d:58:f1:bf:d9:09:8c:91:af:ff:52:7f:5e:0d:6b:f6:
f8:61:1f:8e:4e:0d:b5:f3:f4:2f:33:ec:6e:47:77:39:63:af:
9f:cd:14:95:b6:07:58:86:4a:c8:60:42:a3:a1:31:f5:75:af:
22:13:e0:7c:82:a3:29:0c:d4:44:9c:0e:0e:9a:15:95:ef:1f:
24:f3:48:f0:d0:3d:4d:3d:21:29:49:43:7d:1c:e9:0b:4f:e1:
17:fd:a0:08:1a:29:4c:2d:42:29:cb:cb:18:b3:8a:36:d0:5b:
b2:39:7d:87:cc:3f:69:3e:ac:92:bf:d2:9e:24:1c:6e:9d:5a:
d5:18:02:93:e7:a4:cb:67:1f:0a:80:7a:a8:71:1f:a2:ff:75:
9f:11:50:62:f6:2b:7e:4a:be:75:98:4f:57:9f:ad:e7:bd:87:
0e:04:1c:60:ca:d4:af:51:b4:ac:d5:c4:50:92:72:45:c7:42:
d7:9a:a6:59:97:36:4c:5c:7f:f7:fa:64:44:0e:8c:d0:18:2b:
f4:cc:54:d4:29:1f:2a:e2:fd:56:73:f9:ec:96:fd:33:92:a9:
2f:02:d6:1f:f3:48:12:a0:61:59:9d:df:ee:17:02:9b:18:9d:
99:a0:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:59:05 2025 by rpki-client