Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: FImCO3H9VuuY3tFOA+xRbeNLRNHIFfZEeRY431ZAtGs=
Subject key identifier: 1C:D6:BD:04:07:4D:4B:C5:59:01:F8:10:97:21:DC:6D:54:6E:95:06
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 0196BF00C77BEA39AE55A3120935E0466909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1252
Signing time: Sun 11 May 2025 11:00:21 +0000
Manifest this update: Sun 11 May 2025 11:00:21 +0000
Manifest next update: Mon 12 May 2025 11:00:21 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: sfjLVnj8yjah1c+FnDUbOH7oWAdtFtIjRGUy2H8yJjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:c7:7b:ea:39:ae:55:a3:12:09:35:e0:46:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: May 11 11:00:21 2025 GMT
Not After : May 12 11:00:21 2025 GMT
Subject: CN=1cd6bd04074d4bc55901f8109721dc6d546e9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:5f:87:d0:f1:b4:54:c2:78:8d:e2:f9:cd:
42:44:b6:eb:d4:db:7d:ae:79:54:cd:b2:df:ed:fb:
eb:35:f8:ca:e9:1a:53:f1:c1:b7:81:5b:19:b0:f5:
54:03:38:be:30:0e:58:00:4e:0b:eb:bd:63:9f:87:
62:69:1e:66:1a:28:b5:e3:4c:8d:c6:0f:33:15:d8:
84:d5:d7:ce:ef:54:63:dc:78:24:91:c4:d4:b6:c1:
9c:a8:db:f7:e6:94:18:25:b1:53:79:a5:28:85:0b:
62:0e:38:c9:9e:bd:a2:9d:69:5c:e2:fa:c8:c6:2d:
b2:a9:6b:a8:f3:5d:c1:19:22:00:58:ea:7e:ca:a5:
50:4d:4d:00:28:54:de:30:1b:62:4b:02:0f:43:a2:
b3:36:b6:1d:c7:cb:bf:6b:59:d4:b2:8e:b7:0e:02:
5f:f0:30:0d:76:a2:12:02:41:2e:5d:07:89:45:36:
83:d6:10:f2:aa:cb:58:35:66:b9:f7:fc:ac:2c:b5:
85:14:4d:9d:35:61:13:ab:2b:4b:c1:1d:54:30:b9:
8d:ee:72:87:81:07:3b:61:e2:f6:72:e1:e5:e7:ca:
12:4d:cd:07:2c:2d:3e:90:2c:d6:3e:af:10:7a:69:
1c:31:5c:4a:6e:c3:a4:5f:f5:e0:8b:30:ee:ad:73:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:BD:04:07:4D:4B:C5:59:01:F8:10:97:21:DC:6D:54:6E:95:06
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:eb:fc:30:06:33:74:8e:ef:ae:c4:59:fe:16:85:f6:8f:
56:e4:7d:b6:d4:a6:e9:70:d7:78:59:19:35:47:ce:f1:25:5e:
64:8a:b0:5f:20:e2:0d:cd:d1:7b:04:68:b3:99:79:03:71:02:
81:cf:b2:49:9b:4a:da:3b:30:09:ae:ae:bc:06:9f:a9:b9:40:
58:55:71:d0:66:3f:28:50:0f:b1:56:a7:6f:c2:77:47:bf:db:
1a:09:69:7c:68:81:31:9c:49:8e:38:bb:d9:ce:f0:c6:c3:92:
07:33:f3:55:2f:43:24:5e:96:14:5c:e1:02:1a:6b:da:ed:10:
18:16:23:0c:68:d8:90:4f:2c:14:70:7f:32:4a:13:20:53:b9:
6f:2f:5e:83:93:6d:7b:c3:c4:74:56:81:48:59:26:cb:94:da:
0b:5a:a1:1d:5f:62:2e:c1:63:f4:d5:50:0b:50:09:81:54:9e:
5c:52:19:8c:1b:d0:22:ea:06:39:a4:cc:8f:ad:ba:56:eb:26:
f5:a7:0e:f3:53:a4:c6:02:10:b3:aa:44:f1:84:c7:47:90:41:
bd:32:02:54:eb:6d:9e:aa:32:86:6e:08:ab:cb:77:89:d3:e9:
c3:5e:ae:ce:87:24:d4:37:4c:c8:72:bc:96:2a:7b:c4:51:28:
fe:4f:1f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:50 2025 by rpki-client