Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: m7gPOIT9643qQiU39yEG54GDF8wYW5Oghql77m8MRvM=
Subject key identifier: 7C:A7:D6:7F:FE:21:17:11:26:BE:C1:D9:CF:F5:9A:D9:04:2D:C4:D0
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 0196AC55E5C783FAB41476E64DE013BF673D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 11EB
Signing time: Wed 07 May 2025 20:00:32 +0000
Manifest this update: Wed 07 May 2025 20:00:32 +0000
Manifest next update: Thu 08 May 2025 20:00:32 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: mvMai62eiBIi9w47xKBGyY6r5hxyQAK4mrvdZLaQWm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:e5:c7:83:fa:b4:14:76:e6:4d:e0:13:bf:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: May 7 20:00:32 2025 GMT
Not After : May 8 20:00:32 2025 GMT
Subject: CN=7ca7d67ffe21171126bec1d9cff59ad9042dc4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:ad:68:59:1b:07:67:5b:eb:68:d9:30:e9:
24:94:2a:b1:d3:6d:53:e6:1c:63:38:76:d7:38:46:
95:e2:ec:18:9b:11:87:d3:ba:4c:c0:ad:27:37:48:
b7:6e:39:e1:35:d0:c9:5b:12:d9:56:d1:05:b5:21:
ad:b2:b0:61:ba:85:de:17:d7:20:b8:ec:fb:18:9a:
c9:6d:99:42:89:d4:d2:05:ef:57:d3:82:9a:31:5d:
22:3a:df:ef:0e:13:2b:2e:db:5c:02:c5:75:bc:bc:
c2:dc:92:35:97:a1:87:e6:c1:fd:a0:90:2b:e4:52:
11:8b:82:ac:89:38:41:3e:7b:41:57:68:4a:32:e0:
21:00:36:67:99:57:36:db:bb:f6:77:d1:7b:94:de:
d9:55:b6:fe:75:c4:7a:f8:30:03:45:b5:80:48:4a:
64:aa:67:e9:08:9b:11:7a:cf:0e:86:7e:31:55:8b:
ec:17:9e:f7:d0:53:f6:42:7f:70:9d:fc:08:e2:bd:
35:6d:7d:12:0e:7a:c7:ac:18:04:b9:15:43:f5:52:
e0:b0:47:fd:4f:b1:70:51:07:3e:03:e1:85:0b:05:
9e:e9:23:08:ff:84:20:4f:c9:98:5a:ed:dc:56:af:
6d:03:5b:5a:34:2c:cd:be:a2:04:9d:f9:2c:f5:b5:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:D6:7F:FE:21:17:11:26:BE:C1:D9:CF:F5:9A:D9:04:2D:C4:D0
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2c:13:5a:88:5d:6a:8c:ed:bd:9f:74:57:2d:0b:d0:d7:a7:
73:3f:4d:32:ac:aa:4f:14:78:ed:04:80:9d:f8:71:96:3d:15:
bd:1e:8d:5b:be:f1:e0:97:a2:8e:d1:eb:98:ae:7e:f8:c4:38:
4b:b9:fb:82:7b:eb:14:dc:d7:ea:83:a5:23:44:47:70:48:b8:
ba:bf:40:7b:d4:78:a8:03:25:c3:98:19:f4:8a:c7:41:d8:c7:
e3:45:51:77:4a:46:f1:5b:b4:09:ec:9a:c9:e2:96:a9:d3:51:
d5:21:8d:0e:8f:1f:50:22:9a:12:85:80:2c:41:d4:96:42:c5:
7c:e1:fb:8c:a4:49:98:46:58:a7:cf:ff:31:97:bd:1c:64:b9:
35:51:c6:96:42:be:32:ba:ab:b5:2d:a5:ba:8b:b2:2d:b2:4b:
fc:9f:dc:8c:cb:c9:f3:15:32:8d:7f:93:dd:c9:12:7e:67:83:
9a:5f:14:1c:83:bf:2d:3d:4f:bb:f3:f3:f3:b5:82:71:cf:e9:
6f:19:53:a9:0a:68:0b:63:1c:8d:12:6e:0d:66:fe:f2:cd:05:
1c:01:ec:43:bc:ff:97:8b:3e:c3:ab:14:72:2b:18:58:c6:67:
6c:71:49:e4:af:60:d3:52:da:2e:07:87:cd:7c:a3:67:85:63:
a7:69:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:06:47 2025 by rpki-client