Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: Ai9/fWY20jSiOK6xsSbvorTV4DprpmuiYF32YpuuOMQ=
Subject key identifier: 89:35:F4:7C:64:00:73:F9:1E:84:A7:66:75:06:4A:A8:AB:F7:95:EA
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 0196A31BC1AAD2AA08CCBC3B7FD89EF057EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 03CC
Signing time: Tue 06 May 2025 01:00:27 +0000
Manifest this update: Tue 06 May 2025 01:00:27 +0000
Manifest next update: Wed 07 May 2025 01:00:27 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: 4fsI8gmjBASTb+T4UNuIGqSC3R6fHvGhDpPpGoVFeGA=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:c1:aa:d2:aa:08:cc:bc:3b:7f:d8:9e:f0:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: May 6 01:00:27 2025 GMT
Not After : May 7 01:00:27 2025 GMT
Subject: CN=8935f47c640073f91e84a76675064aa8abf795ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:a5:9d:88:a5:b4:53:21:ea:f9:b7:da:8a:
5b:3b:df:e9:a0:8f:d3:33:57:e2:84:6b:07:c1:05:
7c:35:c8:62:70:2d:2b:ec:ad:b2:91:3c:33:2c:ef:
27:0d:f6:9a:94:63:ed:6a:2a:a5:a0:9c:cb:2b:e0:
27:a2:0f:e5:4d:fa:a7:4e:46:ad:3a:80:08:7f:e4:
4b:70:b7:86:69:0f:ae:1b:25:fe:a4:f0:9f:05:f9:
88:77:16:c7:82:44:1b:43:fb:bf:65:72:86:52:2a:
2c:fd:3f:7e:12:6e:bd:a0:31:bd:6b:81:ee:1c:68:
4c:ff:17:f6:af:a2:d3:36:aa:ad:5b:5b:eb:f1:7d:
34:18:79:fe:1c:1e:37:79:2d:ee:0e:4e:23:51:d8:
49:0c:e0:8a:19:1e:c1:89:fc:0d:56:f5:ed:32:91:
d2:2f:17:5e:4b:5d:3b:89:26:da:17:26:2f:6a:02:
27:af:89:4d:79:1b:e1:ab:6a:f5:f2:9e:a9:b1:8d:
cc:68:a5:30:83:ec:2a:5c:57:48:aa:55:3d:b8:6c:
98:b1:45:82:f7:1e:e4:fb:59:30:26:52:5e:ff:ef:
9a:0e:99:d4:5f:2d:c6:c9:26:36:75:6e:61:ff:96:
03:a3:b6:4a:ff:01:e5:e5:ad:34:d7:45:ea:53:10:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:F4:7C:64:00:73:F9:1E:84:A7:66:75:06:4A:A8:AB:F7:95:EA
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:6e:ca:c2:a7:1a:ed:e4:cf:71:37:ae:c0:4c:dc:30:ca:
c8:67:39:5c:3e:93:b3:70:7f:fc:8e:4f:01:cd:d2:08:cf:3d:
09:c3:a5:f0:b7:c4:6a:f4:4e:ca:4d:54:8e:95:72:a8:61:76:
82:6a:2b:63:a9:1f:0c:6f:50:8c:74:5f:5d:07:ab:aa:56:1f:
45:4e:b2:6a:d5:c7:72:5f:1d:33:46:46:44:f4:9e:5a:eb:7c:
10:e9:91:e7:9b:4e:67:7e:f2:88:ac:c3:d4:06:7f:63:07:95:
04:52:36:fa:c8:ea:05:59:2b:8b:71:cc:dd:19:d8:3c:e8:36:
5a:1a:17:df:49:bc:4e:ab:ad:c2:cd:f0:3a:46:57:c3:c8:e7:
2d:91:38:cc:e0:e1:e2:02:00:19:fb:75:4e:f7:8e:63:67:5d:
01:8b:43:1d:16:e3:db:00:d7:1e:1e:14:74:61:92:3d:0d:e5:
b6:4f:ed:fd:ec:32:55:43:56:c9:b4:0d:3e:56:d4:b0:6b:89:
76:e4:2a:a6:87:e7:c7:70:f7:01:2f:1e:6f:6f:77:0b:77:7a:
45:64:ce:94:a9:63:a4:78:f3:57:09:c4:b9:f0:e4:cf:96:3c:
45:d1:26:1a:76:32:a1:5b:00:a8:0f:6b:4b:9b:59:29:54:8e:
54:a2:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:01:23 2025 by rpki-client