Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: 0cyAbvCPSpCKkEwvADSrSaPyPOJw0cqXfep2fqYsstc=
Subject key identifier: CA:62:0F:AC:B6:38:98:D1:CC:11:8C:DE:6C:C1:56:98:E4:C1:04:4E
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 01969DBE5EED2ED848ED5902E875A520808C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0D96
Signing time: Mon 05 May 2025 00:00:21 +0000
Manifest this update: Mon 05 May 2025 00:00:21 +0000
Manifest next update: Tue 06 May 2025 00:00:21 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: bmAGniwAFkH4Fs80bUwLYipqrKP/vw5nlGBO6dBZA2k=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:5e:ed:2e:d8:48:ed:59:02:e8:75:a5:20:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: May 5 00:00:21 2025 GMT
Not After : May 6 00:00:21 2025 GMT
Subject: CN=ca620facb63898d1cc118cde6cc15698e4c1044e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:0e:33:71:bc:00:5a:f9:2b:96:69:79:25:
b1:fc:a7:6f:ef:d5:1c:7d:fb:a4:01:2e:d0:a5:64:
b9:b2:24:ba:cc:7c:80:63:39:cb:d3:20:3f:1e:67:
58:94:4b:63:f5:24:a3:c4:37:2a:d4:c7:f2:96:4c:
5c:18:0c:fc:cf:85:b2:ef:d8:ac:ea:d2:bb:c6:23:
8c:40:1d:c0:a3:39:6f:90:8e:46:8e:e7:d6:34:7d:
6d:94:22:b4:bf:cc:be:b4:f2:d4:0e:fb:fe:5a:0f:
e6:fd:2b:94:12:ce:ab:8c:68:d9:19:39:f4:52:44:
7c:f7:3b:7e:63:f8:bc:d4:e2:d5:6d:c3:32:60:08:
f3:5d:9d:86:83:ef:84:16:45:f6:67:bb:e2:18:9d:
78:74:65:03:69:ee:5f:b4:30:c0:76:fe:71:2a:19:
2f:ed:a7:84:21:3c:ac:55:15:aa:6f:e4:78:77:14:
ea:f9:2e:d5:19:5c:6b:37:45:01:29:07:2f:45:61:
33:bb:31:d4:88:6c:8e:1b:22:0e:79:11:1a:46:4e:
b7:d7:e1:07:e7:27:e8:3b:81:a0:9f:99:b9:36:3e:
be:74:3b:4c:10:ff:80:54:a4:ef:28:79:5c:b0:20:
a5:72:f6:07:56:64:b5:5a:20:02:87:30:2a:ef:02:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:62:0F:AC:B6:38:98:D1:CC:11:8C:DE:6C:C1:56:98:E4:C1:04:4E
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:a9:63:67:9c:2b:cc:c8:9c:1c:d1:f9:f5:a9:54:3f:83:
4d:e0:05:bf:af:f9:98:3d:49:35:c6:8c:fc:9c:ce:8a:07:72:
ed:b5:09:87:d9:90:a8:2c:52:a0:9d:9a:0b:d8:41:ab:77:ba:
d3:54:26:88:76:24:36:6c:b2:d2:ab:a9:47:3d:e2:bd:7b:f1:
5d:8e:11:00:0a:33:81:a6:31:a8:ab:3e:0f:80:40:31:d9:0f:
28:29:50:dc:d1:a0:c9:c9:e3:1d:50:6b:5d:5d:7c:52:c8:0b:
56:ab:4c:58:43:3d:76:6d:b7:1b:2b:38:ee:f7:7f:5f:75:37:
f4:6e:35:b2:44:f4:87:3f:98:15:d3:f9:2a:64:dd:c5:2e:6f:
85:67:8e:28:19:07:69:a7:77:c4:87:9f:66:7b:1a:5e:6f:e3:
ab:3d:6c:bb:32:7e:28:34:f8:46:a4:20:85:28:78:93:54:6e:
63:1e:98:55:80:f6:02:01:cf:09:13:49:43:2b:bf:2e:30:cc:
12:53:35:85:4a:c7:b0:87:fa:78:4a:bb:c9:cc:35:dc:7c:42:
52:b0:00:26:4b:ba:0a:7d:e5:02:a5:a1:de:1a:19:a0:06:f6:
99:e0:26:09:96:40:5c:ad:ab:4f:17:b4:cf:66:9c:cd:e8:ff:
23:61:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:41:22 2025 by rpki-client