Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: 6RRjb/rfqaaAzGGtVmmmqcNJ1C3fOZnkV32pvaZjQQM=
Subject key identifier: 45:10:D0:0F:D5:7A:BA:7B:0F:84:A9:7E:2C:36:4C:DE:8F:62:BD:B1
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0196A31BC3D93F1E9A961382DCF8C95A3174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 152C
Signing time: Tue 06 May 2025 01:00:27 +0000
Manifest this update: Tue 06 May 2025 01:00:27 +0000
Manifest next update: Wed 07 May 2025 01:00:27 +0000
Files and hashes: 1: 3v8yr5gJI83WUjRJ9OZVqhkkR7c.roa (hash: fBGuRwwzNL/uOKrTf6Q2PyK8x8wJZZLUSDBTYI2GL84=)
2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: eF399EncxTgo0aN9Jr11m+WD7DYKapEYw9sCgJryYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:c3:d9:3f:1e:9a:96:13:82:dc:f8:c9:5a:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: May 6 01:00:27 2025 GMT
Not After : May 7 01:00:27 2025 GMT
Subject: CN=4510d00fd57aba7b0f84a97e2c364cde8f62bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:4c:31:fa:83:32:02:b0:ee:f9:53:b0:b9:
db:d3:9b:27:8a:06:7b:3d:76:c6:c6:e1:6e:15:1d:
67:91:31:06:33:c8:2c:42:1c:6a:f3:ab:1c:45:b1:
b1:cf:c9:0b:72:fa:de:2d:86:7d:9a:35:c6:18:3f:
31:dc:6d:20:ba:ba:5c:01:df:83:29:50:c7:23:10:
5b:08:6b:73:67:61:19:93:84:99:00:f5:89:87:29:
38:b6:00:51:82:d6:c7:d3:81:5c:10:ac:29:40:b2:
22:3b:76:f8:31:e0:b9:97:bd:cd:44:5a:dc:79:b3:
8a:ec:cf:26:8c:ec:56:99:8d:df:9b:79:3d:77:6a:
51:6c:ba:49:d7:79:86:aa:15:ef:4a:8e:36:a5:22:
b1:ac:e8:23:1a:b2:5a:ae:e2:4c:21:19:70:b1:11:
22:8e:f3:72:9c:43:a2:c8:13:8e:f0:2f:c5:6a:b1:
24:26:5f:a7:1c:33:1d:eb:5a:9d:91:30:29:29:5a:
b9:15:08:e4:d2:63:67:72:05:ef:70:ea:d2:2e:4d:
1e:a8:dd:b2:6a:7e:d4:50:3a:83:3d:fa:5f:8a:fc:
95:ba:6e:18:a9:ba:09:82:a7:2b:23:9b:5f:91:9e:
de:41:c6:5b:be:71:01:fe:76:da:2a:5b:75:f6:cf:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:D0:0F:D5:7A:BA:7B:0F:84:A9:7E:2C:36:4C:DE:8F:62:BD:B1
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e0:54:2d:29:05:1b:27:91:ec:5f:b5:50:66:6b:bc:46:f8:
60:50:08:9c:8e:fb:6a:1a:dd:3d:59:2b:da:70:79:fe:8d:62:
0d:07:99:55:04:6a:58:40:6e:db:bc:39:93:a2:49:17:e9:5e:
b0:20:f7:66:1c:94:9c:12:5e:67:76:28:44:62:eb:95:ea:8d:
78:b6:c0:c0:33:a1:6d:20:67:66:0d:bc:2f:82:d4:9d:76:c6:
b3:76:22:77:7c:83:fb:7b:27:b0:fa:06:76:b1:69:98:a8:e3:
f1:e3:0e:49:d9:23:64:75:6d:6e:97:e3:01:dd:66:a9:25:34:
6b:ee:4b:d7:9b:a7:6d:5c:46:0a:87:3f:8d:86:f7:6f:0a:26:
60:aa:ab:e5:80:5e:ab:26:e6:4d:63:61:0e:b2:ae:de:bc:35:
4b:4f:a5:3d:f5:2f:1f:7b:6b:93:fb:b5:5f:dd:07:32:53:0d:
3f:76:bd:91:6d:0f:b9:ed:e8:8d:9e:8e:79:cc:19:d8:a8:32:
76:0d:5a:2f:f2:cf:5d:7f:17:39:48:7e:dc:87:4e:47:3c:9a:
af:d5:04:3c:10:f0:25:3c:1a:d5:b0:70:9e:1a:43:67:d2:ad:
2b:6a:08:46:29:f2:de:17:1d:37:d1:87:e7:d2:23:3b:4e:60:
8f:da:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:12:08 2025 by rpki-client