Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: IS5d9IcMxYZ+bypW+oy8DGpfqLWmeo9J3oiLl3HzNr8=
Subject key identifier: 96:79:81:9E:4D:00:9E:15:FE:D0:FB:CC:A4:1E:1F:74:D5:EB:E0:87
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 0196B8FF284F4F969798B41FD848325A17A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 07:00:51 +0000
Manifest this update: Sat 10 May 2025 07:00:51 +0000
Manifest next update: Sun 11 May 2025 07:00:51 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: nLKLtccgQunZ957o8bi5Eq9QxWhZnz62IpEvP/wsql8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:28:4f:4f:96:97:98:b4:1f:d8:48:32:5a:17:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: May 10 07:00:51 2025 GMT
Not After : May 11 07:00:51 2025 GMT
Subject: CN=9679819e4d009e15fed0fbcca41e1f74d5ebe087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:a0:27:b8:b3:92:a5:ff:ca:04:e1:66:7b:
4e:fb:c9:63:5a:bb:44:32:30:f9:c8:61:92:78:48:
94:39:c9:c0:8a:5f:1b:e2:4e:01:c3:e8:62:e4:7d:
3f:db:0c:37:61:eb:89:83:b1:a8:29:d8:80:34:13:
eb:4b:12:c0:78:72:4b:15:24:48:31:ac:dd:0b:86:
df:4b:f0:92:88:f5:78:cf:e7:30:cb:c1:e0:51:86:
47:af:13:d2:d8:51:c5:55:db:33:cd:7c:f2:a0:2f:
a0:b7:1f:6e:15:f0:07:3a:cf:c1:c8:3e:a9:a6:ab:
8b:28:51:1a:1a:55:cf:b6:ee:d7:ee:f3:c8:ee:52:
6f:f7:e9:39:93:37:67:7a:98:de:1a:a6:8c:6f:ad:
b3:64:a0:3d:4f:ae:66:dc:40:23:1b:61:4e:ca:28:
4b:16:fa:7b:96:a6:67:1c:67:0c:41:60:26:f0:ee:
e5:4d:d8:87:8c:19:33:8c:65:06:1e:78:a6:7c:90:
b2:94:3a:93:78:65:ad:79:9f:00:8c:be:6c:5e:4f:
eb:71:ac:8f:6a:e2:d4:2e:38:3e:57:85:3a:de:71:
78:3f:b5:4d:09:c4:7e:a7:74:a9:5d:69:a4:8e:82:
39:cd:ab:85:cc:26:ca:13:b9:27:0e:b4:2c:4b:73:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:81:9E:4D:00:9E:15:FE:D0:FB:CC:A4:1E:1F:74:D5:EB:E0:87
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1a:9e:0c:bf:4b:fe:7b:02:d0:06:74:03:3c:ba:74:64:06:
a7:3a:83:8c:98:a7:a0:71:2e:a7:fd:db:4c:6f:7d:fb:a5:57:
a1:0f:27:b7:e1:27:7b:bf:ab:af:a3:cf:74:fe:0e:96:02:f6:
3b:6f:39:6a:db:77:9d:db:05:04:d3:c5:3b:95:4f:3a:ad:82:
b4:50:df:07:68:fd:0c:97:12:eb:12:0f:94:aa:6f:22:4f:b5:
38:3f:20:7e:26:f8:f5:10:58:9e:f0:4c:4a:ea:ba:d0:84:cb:
53:2c:6e:ca:0f:a8:cc:87:93:72:b5:80:2d:71:10:aa:62:5d:
c3:53:95:78:89:6e:e3:0a:86:b1:cb:69:ee:6c:69:05:8f:3e:
b5:92:16:9f:e5:d4:a8:22:80:2d:10:39:41:65:1c:77:d9:10:
81:fc:17:7c:d3:9e:e0:a1:f5:4e:59:9a:b1:90:c1:93:d4:36:
5f:7e:e5:0c:60:85:86:9e:ad:be:9c:8a:f9:d2:a0:01:34:a5:
4d:08:01:70:fb:c5:18:fb:e4:20:7c:12:fc:8a:67:fc:2a:eb:
00:58:53:fc:4a:42:0d:af:00:64:30:72:0b:6c:52:a9:73:4a:
32:88:79:74:41:ec:67:d2:70:f1:83:24:e6:ef:d5:af:f3:1b:
6f:0d:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:53:47 2025 by rpki-client