Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: ytJlZENHjZ8efaDmK4Jg6GMio/A1svw9qwJP1Gv3YFk=
Subject key identifier: 9F:1B:49:B5:13:A9:D2:FB:71:AA:94:3A:B1:4A:83:B3:6E:E5:2C:D1
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 0197B933976EBF5E63BFC63527BE1B01C6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 045C
Signing time: Sun 29 Jun 2025 01:00:55 +0000
Manifest this update: Sun 29 Jun 2025 01:00:55 +0000
Manifest next update: Mon 30 Jun 2025 01:00:55 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: jPcQLBsoK/y58NbDrTeNfIK/cmOu1HEgK8FgkyRxtvo=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:97:6e:bf:5e:63:bf:c6:35:27:be:1b:01:c6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Jun 29 01:00:55 2025 GMT
Not After : Jun 30 01:00:55 2025 GMT
Subject: CN=9f1b49b513a9d2fb71aa943ab14a83b36ee52cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:a5:67:ae:97:67:f7:72:ae:53:70:7e:65:
0c:82:57:54:1c:6f:54:91:1f:8b:55:b3:86:39:4d:
80:2f:9b:4d:60:42:ee:05:a7:97:f6:4d:00:82:37:
58:c2:00:67:b9:59:65:4a:fd:3b:2f:61:1c:e9:04:
92:4c:93:da:7c:2d:12:d3:21:5c:ad:8b:b3:66:88:
00:48:c5:4b:73:07:38:1e:8a:fc:32:d5:08:ee:2f:
0e:ae:c4:6b:c3:7f:fa:da:93:ac:47:aa:2e:2a:b9:
be:8b:23:23:03:f0:52:b1:5a:c4:e7:f2:32:b0:40:
85:fb:cb:bd:df:50:30:c2:5b:3a:bd:68:67:58:af:
23:c9:31:22:ee:1b:af:b8:df:11:a5:0f:a1:67:a8:
c6:26:e0:28:ff:c3:7a:64:5f:31:ca:cb:e3:a7:ac:
16:08:74:dd:72:7c:da:af:f4:31:60:0a:03:24:85:
25:a4:eb:44:5b:3a:79:95:9c:c7:40:8c:b8:9e:f1:
8d:b0:ed:66:84:cf:54:7d:91:3a:f9:ea:9c:ef:5c:
0e:5e:4f:7a:be:44:24:a9:6c:fd:40:f9:5b:ce:07:
af:66:11:3f:db:c4:54:ee:dd:43:0b:d8:37:27:48:
e9:51:c7:82:f9:54:4b:fe:f4:61:ad:c5:9f:29:20:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:49:B5:13:A9:D2:FB:71:AA:94:3A:B1:4A:83:B3:6E:E5:2C:D1
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:27:60:00:c1:47:f5:8e:d2:2a:e1:65:e3:20:c9:30:47:
fc:5d:a1:c2:87:34:06:bf:a9:70:67:95:b4:df:65:5e:d2:b1:
56:9e:b7:05:c7:bf:d0:14:03:b9:26:11:86:01:7b:2f:ce:ad:
87:ac:fd:a8:45:17:ed:b6:1d:fe:3e:19:72:d1:1c:93:9d:80:
bc:b7:97:98:3e:40:ab:94:78:1c:14:7c:00:85:e5:9e:88:32:
10:64:e8:8c:1d:27:23:0c:28:a2:ec:1a:57:ed:75:a0:bd:2e:
a8:bd:df:ff:25:20:e7:d3:fb:12:99:cd:4a:fc:27:15:a0:e2:
49:6c:83:a8:5e:37:fd:dd:ea:e8:95:e2:c3:43:89:b7:a6:b7:
3a:42:4a:52:95:30:57:a0:08:29:58:37:cc:2a:7e:74:f7:5c:
60:bc:78:4b:90:55:b0:61:e1:61:24:2f:9a:2c:87:48:e2:b7:
f5:54:6e:e9:e2:15:4d:61:be:69:bd:71:6a:d0:b3:90:71:d1:
8c:93:ce:92:c7:9c:2d:c1:8a:63:70:46:9b:70:d3:ba:e7:dc:
2b:f6:7c:bc:ee:1e:7a:b0:ca:84:82:3e:6e:1f:7a:2b:3d:58:
e9:14:1c:6e:6b:6b:38:85:c7:01:14:38:00:6f:b2:d4:93:b5:
14:6a:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:51:31 2025 by rpki-client