Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: 07i1nfa6pYtqJJOjRvuVWxHRkdoijCzTbaRxAU/SNJk=
Subject key identifier: F2:B6:F0:72:B6:64:AF:BF:1E:75:53:85:43:5A:A3:D9:A5:86:EF:D9
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0196C0EF4914E05486040CD81928B28261A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0183
Signing time: Sun 11 May 2025 20:00:29 +0000
Manifest this update: Sun 11 May 2025 20:00:29 +0000
Manifest next update: Mon 12 May 2025 20:00:29 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: JKWQ8TWpPacviVkxgFf6X1XbsDjfhpBMJR0Q3QJz71w=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:49:14:e0:54:86:04:0c:d8:19:28:b2:82:61:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: May 11 20:00:29 2025 GMT
Not After : May 12 20:00:29 2025 GMT
Subject: CN=f2b6f072b664afbf1e755385435aa3d9a586efd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:e2:98:62:2c:b2:b4:a6:ec:7a:af:cf:0f:
e9:b1:33:bd:87:4f:73:c2:31:56:f7:7d:81:94:db:
61:e0:47:b9:46:ce:e3:88:26:d3:32:90:d6:7b:e9:
8e:fe:51:5e:77:1d:cd:cc:36:db:e5:4f:15:19:dd:
d4:8d:a3:0c:8e:1c:a6:98:5e:a5:6c:08:56:1a:0d:
3b:32:bc:ff:e1:40:51:39:92:30:a1:81:c1:61:65:
5f:41:96:38:58:c1:5d:11:b3:41:7b:eb:5a:35:b8:
b3:30:2c:fc:8c:f9:4b:ad:80:71:b1:25:6d:dc:39:
76:82:f4:b4:34:50:4b:b8:48:fd:0a:fc:c8:5f:92:
96:8e:de:76:62:b5:b0:65:2b:e4:d0:a8:29:10:13:
cf:c1:26:79:91:1b:49:cd:88:b6:ea:56:42:25:8e:
3a:61:f1:4f:ea:b0:c9:c2:e2:71:04:2c:41:1e:ed:
73:a5:3d:f8:c2:98:ff:52:88:b4:a0:56:cd:cc:5b:
7d:97:73:46:e2:4f:3e:1c:28:00:84:82:a3:a1:c8:
d0:22:e0:cc:3e:38:a3:3f:d8:4f:1a:56:9e:cf:d6:
ad:36:25:2f:ab:b1:47:01:7a:bb:df:28:f7:a9:b7:
d2:58:e4:7e:c4:ff:cc:56:ff:6e:db:79:87:f3:16:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:F0:72:B6:64:AF:BF:1E:75:53:85:43:5A:A3:D9:A5:86:EF:D9
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:1f:d4:a4:23:b1:0a:8c:8a:fd:76:c0:cd:95:23:f1:88:
ce:47:1d:62:bf:a7:db:4d:17:44:fd:f7:0a:89:0d:a6:4c:8d:
a0:f6:2a:29:c8:93:ef:12:91:6b:88:a9:e4:f5:51:18:bf:62:
a2:43:3f:79:e2:c0:98:77:03:a3:6e:84:e0:66:4d:22:16:e0:
2a:68:02:19:9f:1d:4c:c3:58:e6:c0:14:54:ce:bb:46:7b:1a:
90:da:53:8b:4e:d3:91:d8:e2:21:d2:d7:b0:a8:be:a9:d0:1e:
a1:7c:81:d1:dd:61:12:6e:31:43:89:28:71:fe:40:a7:0e:c5:
93:04:f2:64:d4:f9:05:53:35:79:bf:c6:69:05:94:31:8c:36:
17:fc:e9:9b:22:64:e5:39:58:f0:29:40:5a:d5:d7:9d:d4:f6:
e1:b1:5c:53:51:a7:b8:d0:80:ae:6b:37:e9:01:3c:bd:d0:61:
ef:17:cf:4f:f1:e3:99:32:85:2c:af:89:5e:91:ce:82:e1:5e:
ae:f2:7c:7f:4a:c9:c8:20:f0:58:a6:b1:72:d4:db:ba:cb:a0:
e0:c3:36:fe:08:d0:ba:fb:05:5f:a3:8d:ef:06:78:b2:8a:fc:
4a:ff:22:5e:3a:05:e7:10:7e:95:e5:3e:02:e1:9a:a3:18:4d:
4a:88:c1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA70kU4FSGBAzYGSiygmGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTczZDFiM2UyMzFjNTdiMzUxOWU4ZDRlNTQ3ODY4NjA2
YzRmZDMwHhcNMjUwNTExMjAwMDI5WhcNMjUwNTEyMjAwMDI5WjAzMTEwLwYDVQQD
EyhmMmI2ZjA3MmI2NjRhZmJmMWU3NTUzODU0MzVhYTNkOWE1ODZlZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHbimGIssrSm7Hqvzw/psTO9h09z
wjFW932BlNth4Ee5Rs7jiCbTMpDWe+mO/lFedx3NzDbb5U8VGd3UjaMMjhymmF6l
bAhWGg07Mrz/4UBROZIwoYHBYWVfQZY4WMFdEbNBe+taNbizMCz8jPlLrYBxsSVt
3Dl2gvS0NFBLuEj9CvzIX5KWjt52YrWwZSvk0KgpEBPPwSZ5kRtJzYi26lZCJY46
YfFP6rDJwuJxBCxBHu1zpT34wpj/Uoi0oFbNzFt9l3NG4k8+HCgAhIKjocjQIuDM
PjijP9hPGlaez9atNiUvq7FHAXq73yj3qbfSWOR+xP/MVv9u23mH8xbyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK28HK2ZK+/HnVThUNao9mlhu/ZMB8GA1UdIwQY
MBaAFBIXPRs+IxxXs1GejU5UeGhgbE/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEt
M2Y4MzcyZDk2OGQwLzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEtM2Y4MzcyZDk2OGQw
LzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvwf1KQj
sQqMiv12wM2VI/GIzkcdYr+n200XRP33CokNpkyNoPYqKciT7xKRa4ip5PVRGL9i
okM/eeLAmHcDo26E4GZNIhbgKmgCGZ8dTMNY5sAUVM67RnsakNpTi07TkdjiIdLX
sKi+qdAeoXyB0d1hEm4xQ4kocf5Apw7FkwTyZNT5BVM1eb/GaQWUMYw2F/zpmyJk
5TlY8ClAWtXXndT24bFcU1GnuNCArms36QE8vdBh7xfPT/HjmTKFLK+JXpHOguFe
rvJ8f0rJyCDwWKaxctTbusug4MM2/gjQuvsFX6ON7wZ4sor8Sv8iXjoF5xB+leU+
AuGaoxhNSojB5g==
-----END CERTIFICATE-----
Generated at Sun May 11 21:43:42 2025 by rpki-client