Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: NF2iRhCZdIj7FVGsbdB3wHZTbNcqU/DuxOrE8m1udL4=
Subject key identifier: 12:4C:53:5B:EE:66:BE:32:28:5F:4C:A7:6F:BF:84:3F:6E:62:B7:9E
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0196BA11FC2A014DAA74C49D127664E8E099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 12:01:02 +0000
Manifest this update: Sat 10 May 2025 12:01:02 +0000
Manifest next update: Sun 11 May 2025 12:01:02 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: ZX9NBPqVbPozO/wYs+Uprn8So6gehhWxCybb/J0kGYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:fc:2a:01:4d:aa:74:c4:9d:12:76:64:e8:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: May 10 12:01:02 2025 GMT
Not After : May 11 12:01:02 2025 GMT
Subject: CN=124c535bee66be32285f4ca76fbf843f6e62b79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:bb:49:73:04:cc:94:3e:e5:14:5f:d5:f2:
d6:8b:30:6f:e6:f8:c1:57:95:c1:f3:7b:58:ab:ea:
a6:78:b1:b4:f8:f8:d9:4e:8c:93:8d:18:db:a1:de:
04:ed:6e:cc:f6:aa:51:8f:c8:59:1b:92:e1:35:bf:
76:00:1b:71:d5:d9:21:84:c7:46:80:fe:9b:33:8d:
85:7c:c1:63:2b:d4:21:c3:67:3b:5b:f3:5d:e6:7f:
e5:7b:9c:0e:08:5b:92:91:53:93:0d:58:d6:a0:82:
8d:46:f9:4f:63:c0:11:ef:56:b2:39:90:5c:eb:d8:
9a:74:a7:12:1a:d2:9e:03:c7:b4:ae:0c:75:d2:4e:
f0:5d:05:43:0d:fe:fd:36:e5:ba:1c:5c:47:a9:68:
02:fe:68:5c:c9:df:f8:2a:c7:8f:d5:42:3b:20:dc:
f7:21:93:36:86:d2:75:35:5b:db:0f:ee:4b:35:9a:
08:5d:94:47:d3:8e:df:1e:b4:e8:d5:9c:47:50:93:
3f:e8:ee:f3:3f:17:59:5d:e1:66:f2:b7:73:4c:76:
4c:e2:83:1b:d8:a8:9c:01:13:26:c7:bf:67:84:ee:
23:ea:0b:e0:ee:7b:ca:3e:39:39:c7:36:54:01:7a:
43:83:44:dd:8a:d1:9b:af:27:c0:d9:98:b0:98:bf:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:53:5B:EE:66:BE:32:28:5F:4C:A7:6F:BF:84:3F:6E:62:B7:9E
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:8d:ef:97:03:9a:87:3f:63:9d:de:e0:8f:24:30:78:53:
0b:92:e4:92:5d:c8:52:fd:49:26:e4:b3:30:ed:f2:f5:c1:fe:
d8:ae:6e:aa:a8:68:9e:6c:ff:c2:5a:e7:25:46:60:eb:3b:4c:
e5:ea:64:58:c4:79:94:ac:f9:24:be:03:9e:4a:15:50:c9:85:
4b:ff:89:6b:68:2d:df:4d:48:5f:5f:a6:f8:0e:91:e3:1f:63:
76:3d:7e:ce:f1:d6:58:ea:6d:de:cc:14:45:90:b5:28:95:52:
ed:3c:d1:bb:bf:a9:e7:c2:dd:05:ee:ad:13:4c:74:1b:5f:a1:
f9:c3:2b:a6:e6:52:73:25:cc:e9:55:b5:b6:f7:47:4a:34:29:
fb:62:92:11:82:96:08:5e:40:d5:33:ef:eb:26:76:3e:0a:97:
fb:69:e1:c9:02:25:72:20:91:83:cd:ef:1f:53:8a:a4:c9:5d:
e9:fc:fd:3a:4a:93:19:aa:68:1c:9f:d3:a6:f8:6b:47:45:1e:
99:af:54:0e:31:96:ee:fb:dd:1d:f7:20:f6:1a:1b:08:dd:a6:
4b:54:b0:d9:9b:00:76:c6:22:ef:cf:4d:29:d5:01:da:2d:ca:
41:36:df:7e:61:fe:54:57:a9:ca:f1:19:ef:de:99:ca:a4:4f:
79:af:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:47:25 2025 by rpki-client