Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: 1ZWpgKJPkfrYf9FZZuzaxIIiAQct6Wh7sigwa57T6nY=
Subject key identifier: 61:F6:23:65:79:6D:25:77:AC:70:7A:C9:B6:31:56:FD:86:CF:33:25
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 0196C2DDB3BA3618B8E0DE5D04486815BAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0CED
Signing time: Mon 12 May 2025 05:00:31 +0000
Manifest this update: Mon 12 May 2025 05:00:31 +0000
Manifest next update: Tue 13 May 2025 05:00:31 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: GLwaIqT7A2SmBUXNjuZhUbPaelhD5pHYI0pPnfRrm50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:b3:ba:36:18:b8:e0:de:5d:04:48:68:15:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: May 12 05:00:31 2025 GMT
Not After : May 13 05:00:31 2025 GMT
Subject: CN=61f62365796d2577ac707ac9b63156fd86cf3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:24:24:f7:1d:f0:9e:2a:6f:14:f2:54:c0:
af:51:9f:a6:55:39:a0:8a:ad:7c:eb:bc:51:d5:d7:
82:9d:b2:bb:5b:3d:b4:ad:38:92:3c:42:0c:ff:0b:
f6:ac:d9:fd:91:06:f8:19:82:f6:75:5f:a4:c9:7c:
93:9e:ed:bf:39:58:95:91:bf:cd:b4:2b:44:b0:07:
a1:e4:2c:5e:7e:2a:eb:86:a3:ee:65:37:ee:06:9b:
82:d3:18:5f:8f:00:76:b9:ad:dd:75:07:67:18:a9:
a4:a3:4f:88:a0:89:82:7e:8a:14:6e:67:28:77:dc:
c1:46:59:d5:9d:d1:f9:da:b1:fc:98:a1:82:2b:d2:
55:1a:6b:13:ee:ac:b9:ff:d8:f8:ab:d5:e6:e2:fd:
f0:39:61:cb:b4:85:8c:1c:2b:b0:fc:30:6a:bd:34:
26:d0:8c:3c:80:b0:f4:4f:8e:04:6c:f8:7b:6f:de:
93:b2:a5:cc:91:11:68:f9:98:5d:7b:31:e6:84:46:
c7:bb:c2:3e:ed:ce:5a:b9:56:a9:17:ec:6c:3d:d9:
06:53:a1:1d:58:38:ca:48:e1:59:66:8c:6b:0a:4a:
b2:11:62:a8:88:72:4a:1a:70:09:3e:58:de:6e:12:
88:57:86:f5:96:79:1e:b3:76:21:c6:0a:2c:4c:1e:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:23:65:79:6D:25:77:AC:70:7A:C9:B6:31:56:FD:86:CF:33:25
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:f0:30:fe:0a:b3:3a:2d:1e:39:ed:66:51:1a:04:fe:fc:
ce:cd:b0:03:33:8e:1f:cd:3f:83:c2:5b:b2:87:26:85:1d:05:
c6:e1:c1:29:6d:c6:22:06:86:cc:05:78:6e:31:c1:51:28:3c:
28:f5:b8:07:e4:dd:b3:06:61:1b:d6:4a:34:07:b5:c4:8c:13:
c2:46:af:05:e5:5c:bc:f1:00:9a:3a:98:0f:45:e4:8d:fa:dc:
7e:aa:2a:7b:d2:b2:a5:47:e2:59:0b:17:15:97:ac:1f:c9:9d:
b9:cb:62:4e:40:7d:5d:82:54:1e:e9:58:13:10:dd:24:cb:bf:
bf:3d:e5:da:64:f4:6c:e2:84:61:44:40:be:f5:17:b1:0d:e3:
fc:24:d5:f3:f8:2c:56:f6:08:15:c5:5c:bf:fd:23:50:56:c6:
1a:bf:93:9e:ab:4f:a2:9b:1b:3c:d5:98:c8:3a:6d:94:8c:d4:
af:c6:bc:33:29:48:d3:b9:8d:6e:85:4b:40:30:8e:fd:a0:71:
ca:88:7f:5f:a6:20:db:6c:78:ec:fe:df:91:ab:69:04:bd:81:
22:a9:32:42:32:b9:07:e2:95:32:28:8f:0a:04:9e:05:f4:d7:
f9:3c:9c:0d:07:33:57:e2:7d:f3:a1:ac:0e:40:25:6a:81:bc:
65:7c:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:18 2025 by rpki-client