Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: eVNFfhn4Sh1GdU9oJqTyqBeqLXGsvfU+aWfwNHHEBW8=
Subject key identifier: 18:10:30:E2:35:07:64:5C:26:75:90:FD:30:DE:68:5B:82:C5:F9:E6
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 0196BE252EDE0E2166EB62470A384E92993F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 0635
Signing time: Sun 11 May 2025 07:00:29 +0000
Manifest this update: Sun 11 May 2025 07:00:29 +0000
Manifest next update: Mon 12 May 2025 07:00:29 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: 5xKgA8nW6Wi8ZnsHrrXnzXkX7h4QovhYJI4MeteosZY=)
2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:2e:de:0e:21:66:eb:62:47:0a:38:4e:92:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: May 11 07:00:29 2025 GMT
Not After : May 12 07:00:29 2025 GMT
Subject: CN=181030e23507645c267590fd30de685b82c5f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:e0:00:ae:c7:e0:a9:38:6d:21:b1:71:53:
2f:d8:54:ff:82:bf:d4:06:92:ea:66:ae:0f:48:d7:
bd:b2:1e:12:38:25:39:90:55:10:c4:ec:f9:38:eb:
f6:62:8b:ba:cd:be:77:49:b8:4e:f5:ef:53:30:1e:
7c:6e:21:79:fd:0c:5e:08:dd:98:40:9c:e6:83:ce:
12:5c:be:a5:e2:a8:d8:a3:71:43:6a:15:5c:c1:3f:
31:f3:85:c1:86:08:92:d8:6b:28:6c:c6:d8:b6:ab:
24:14:b4:44:87:76:9f:ba:a9:08:98:d2:65:9a:67:
21:2e:9e:fb:7c:c4:5d:ac:68:51:4b:e6:05:27:c3:
04:81:c4:b7:f9:14:5b:82:f3:50:f3:16:ec:5d:f1:
15:73:70:55:3f:b7:66:67:91:b1:fc:e2:3a:8c:18:
c6:29:32:44:82:80:82:69:d5:d8:83:13:71:77:fd:
87:db:6a:fa:9f:f4:b9:11:56:09:fd:4c:e7:b2:32:
cc:01:16:d1:b6:1b:cc:6f:8f:c8:a7:a8:30:26:7d:
c5:5e:cc:d0:c7:40:d8:d0:11:4c:43:d0:fc:ec:18:
fe:0b:6a:8f:a3:50:6f:c2:91:e4:93:c6:d6:2b:b0:
0a:26:cc:23:9f:e7:2b:76:af:10:38:f0:32:bb:10:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:30:E2:35:07:64:5C:26:75:90:FD:30:DE:68:5B:82:C5:F9:E6
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:2e:fb:4a:bf:a9:05:73:4d:33:02:e1:60:83:c3:05:5d:
8d:60:b1:2e:a8:d6:fd:b8:51:98:e9:03:b1:75:3c:54:68:a1:
06:2d:d7:4a:44:d9:82:02:5b:08:63:2d:87:ed:28:34:2f:85:
d9:b0:00:28:87:bd:97:39:af:55:35:69:57:86:80:4b:8a:6e:
15:51:49:1a:d7:52:72:e8:fb:d8:b2:7f:58:3a:07:66:46:aa:
71:7a:1a:38:d9:4d:88:9c:e7:d4:d9:9c:82:e2:ac:ae:42:4e:
09:09:31:20:89:06:e8:3f:3e:29:7b:b9:7b:23:6a:6c:0f:ed:
21:4f:1b:49:81:2d:a3:98:7d:6a:87:4f:59:57:83:85:a2:cc:
55:20:4b:1c:2a:80:30:f0:fc:d8:75:8f:f2:4c:78:78:8e:f7:
e6:56:3c:73:32:18:ea:93:c7:e6:07:8c:d9:b2:44:25:63:a7:
57:34:35:21:fd:24:c4:31:e0:c3:31:4a:6a:0e:c3:da:11:2c:
1a:b1:ed:2e:5a:8a:37:2d:e5:e6:2a:54:b6:ea:63:85:20:37:
6f:f5:63:9b:b7:d9:c4:3e:7b:ff:84:21:ca:4c:1f:19:38:82:
23:94:4c:cd:da:da:fa:57:8a:c2:dc:fc:95:55:59:89:3a:c2:
97:cd:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:17 2025 by rpki-client