Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: C3r7QP6OIJBdHkWia35E3mj2X5BUZqBNbsQqlKAaFJ8=
Subject key identifier: 60:85:5F:E5:0E:EE:92:9C:E4:27:5A:56:CE:75:5D:9E:74:83:30:DA
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 0196BC37488133A8934E8B84CE194056B4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 22:01:01 +0000
Manifest this update: Sat 10 May 2025 22:01:01 +0000
Manifest next update: Sun 11 May 2025 22:01:01 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 3HT7R06pDwtMDRtPK1Q/8McdT6oWMgkd94TRLN1NiY8=)
2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:48:81:33:a8:93:4e:8b:84:ce:19:40:56:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: May 10 22:01:01 2025 GMT
Not After : May 11 22:01:01 2025 GMT
Subject: CN=60855fe50eee929ce4275a56ce755d9e748330da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:98:65:b4:1a:38:76:aa:bb:5f:3f:9d:c3:
60:36:f4:06:b3:db:e3:49:9c:e6:73:d7:3a:d5:35:
6a:e3:6f:8c:88:65:aa:d7:63:0d:d7:89:2f:74:e0:
a0:af:e6:49:85:78:50:7f:c6:53:62:6f:d5:30:a1:
1d:3b:33:8e:66:5d:ef:53:8f:20:28:7e:88:0a:c4:
10:04:80:a6:d1:13:0b:77:ab:26:d0:c5:a1:93:4c:
20:a1:19:cf:ad:34:73:3f:db:0e:98:c5:b6:a5:88:
bf:60:65:1c:af:36:3c:a0:42:e9:ad:89:9d:47:7a:
ea:4b:d3:7f:63:12:08:95:a5:85:54:e1:fb:e6:2b:
4d:af:4c:76:46:c1:f3:ed:bc:af:3b:b3:3d:71:31:
90:aa:ce:92:73:7e:0a:1b:46:39:30:5b:c5:a1:4d:
b7:5e:f8:68:ac:ef:9a:49:ad:fe:be:11:1f:97:5f:
4b:30:47:58:8f:7b:e3:d9:38:6f:d5:ce:5e:f4:84:
25:5c:55:d5:ad:72:46:cf:28:30:98:5e:fe:3c:95:
09:49:fb:0a:28:9c:bf:97:13:cf:16:17:ad:bc:e3:
74:12:01:53:f9:d1:de:0b:6e:c6:bc:a6:0f:34:ad:
ab:47:b6:5f:36:d0:aa:fe:99:8c:67:7d:cb:0b:85:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:5F:E5:0E:EE:92:9C:E4:27:5A:56:CE:75:5D:9E:74:83:30:DA
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:57:d1:75:d6:b3:8a:79:35:b6:6b:f9:80:92:12:ac:9f:06:
7f:62:81:fc:3a:ed:2d:15:ea:00:0f:c5:a3:5f:b0:1c:e8:4f:
7c:d7:78:53:47:f7:09:52:8d:ed:51:85:bf:9f:a1:c1:d1:a8:
f6:bf:ae:ec:79:0a:54:b0:bb:22:56:93:fc:b0:69:ed:98:8d:
0f:cd:1f:42:a6:7f:fc:22:73:7c:4c:0e:c8:66:4e:7c:91:b0:
30:bd:35:be:a2:67:60:54:5f:cf:84:60:d0:81:d4:4e:8e:82:
aa:f5:10:9c:6e:29:5d:2f:f8:09:da:22:38:8f:b0:a6:01:48:
d3:e4:3f:04:c3:52:2a:04:26:41:19:96:f5:28:26:9e:53:cc:
a0:ba:a5:7d:85:48:e8:5e:f7:c7:f0:21:05:cf:07:5c:d9:c9:
05:6b:ad:9c:a3:de:76:15:fc:76:54:f3:5e:f8:4f:a3:4c:dd:
e6:ba:53:75:4f:ad:fa:2f:dd:02:3a:fa:8f:d4:36:96:1f:fa:
0a:94:59:26:a5:dc:dc:89:32:fe:de:f6:ad:8b:a0:e7:c3:1b:
7d:a0:8b:3f:90:05:0f:fe:7a:d4:34:f9:4b:f5:1d:70:2e:0f:
cf:a6:c3:a5:94:3a:77:7d:41:4f:29:63:f5:97:23:f5:47:2a:
9d:48:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:56:28 2025 by rpki-client