Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: QZ0TTXEnG3R5JX0oxpUDLUaADmtgXngo8bHdnxdhCGU=
Subject key identifier: 5A:3C:9B:F1:6E:16:FE:0B:88:69:82:7A:A4:4A:EA:C9:C2:51:6A:D9
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 0196A389F7BC27471B3A9948F8B04B6F967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 14B9
Signing time: Tue 06 May 2025 03:00:50 +0000
Manifest this update: Tue 06 May 2025 03:00:50 +0000
Manifest next update: Wed 07 May 2025 03:00:50 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: 0I6IYVSFoamBaZgwvi9zfg7F0I8jj/rNMgVau668WB8=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:f7:bc:27:47:1b:3a:99:48:f8:b0:4b:6f:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: May 6 03:00:50 2025 GMT
Not After : May 7 03:00:50 2025 GMT
Subject: CN=5a3c9bf16e16fe0b8869827aa44aeac9c2516ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:08:0c:1f:0d:9d:9e:26:4b:0a:53:ca:d1:
e9:20:fe:f0:5d:b1:f0:db:d6:fc:2d:87:32:c5:27:
a7:ce:de:2e:9d:4d:5f:a3:e6:d6:21:0e:f3:07:05:
7c:f0:3b:07:a8:c5:64:fa:5e:b0:6c:9e:30:d7:38:
a7:f7:bf:30:7b:56:17:4e:3b:14:6a:82:88:fa:aa:
17:7b:00:a9:50:29:1d:d4:82:f3:b7:f3:fc:be:a8:
d5:14:e3:14:da:4c:e0:43:fe:4b:f2:2e:51:44:c4:
bd:f8:0b:7b:b5:9c:c5:26:07:d1:0a:c7:75:99:ce:
41:15:f8:b7:b4:e7:ab:0c:f4:3d:3b:3c:d9:d3:41:
b1:6b:28:bc:85:87:41:b8:dd:04:7f:b1:03:85:36:
05:1b:23:21:21:87:99:13:9d:fd:66:28:f8:f8:0c:
25:7f:c7:e2:6b:10:77:10:4e:80:e7:44:19:cd:8f:
8f:90:8f:33:4f:17:c0:a2:0b:9c:cd:e2:64:f6:08:
98:44:c6:09:ef:a4:a1:5d:99:33:6a:c3:20:da:ae:
42:56:4b:52:1b:46:48:e3:92:42:e0:b8:e1:5a:aa:
32:cf:19:85:05:58:a1:0b:21:d2:c4:5a:79:5c:2f:
ac:f4:62:60:d9:b1:68:ff:a8:74:6e:2d:d8:e2:06:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:9B:F1:6E:16:FE:0B:88:69:82:7A:A4:4A:EA:C9:C2:51:6A:D9
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:bd:6b:36:5f:ae:16:3f:1c:7c:fe:44:4a:b6:fd:6a:69:
38:29:3c:98:bf:61:e9:62:bf:5a:c0:6c:51:7e:9d:ff:fc:f1:
7b:2d:00:29:05:22:65:16:87:36:9f:0e:21:93:72:e3:df:ed:
59:9d:86:06:04:69:37:00:72:ed:c0:2d:55:48:30:7e:37:f2:
d4:e0:ec:36:ce:97:2a:0e:3b:90:ab:54:cb:9c:ba:a8:e4:b2:
b5:d8:15:80:1b:03:b0:57:37:71:59:1b:49:84:76:39:c4:a7:
cb:b0:db:9d:90:22:7b:18:e9:19:ba:9a:27:c9:5f:e0:f2:b8:
ad:d3:fd:c6:75:94:5a:55:2a:d3:8b:e9:fc:a1:e6:ee:d0:c1:
3c:e1:74:0e:3e:94:e7:ed:0c:11:04:fa:46:20:61:94:12:b4:
6f:ed:50:6f:ee:ab:40:f4:fb:1f:f9:2b:eb:a0:e2:11:8f:75:
7a:85:39:e3:5a:f3:e0:08:d0:49:4c:9e:ea:fe:13:eb:63:bc:
cf:87:4a:a7:79:2e:cd:bb:75:01:be:63:8a:0d:97:64:97:d0:
0a:12:1b:11:f1:4f:68:44:ed:4e:17:25:87:6a:73:67:52:28:
f2:43:3f:15:bb:c7:a0:57:fd:e2:e0:58:09:0a:7f:3e:58:f9:
b6:8d:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:24:27 2025 by rpki-client