Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: PD1GqFiLayFukqt/YrrQMMB4yiiDbxbSdHmPEMBJ1xI=
Subject key identifier: 40:C1:FC:17:25:94:0E:90:0B:19:98:42:AC:D6:78:C8:D5:4A:6E:52
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 01976D744CFDDDA74871B5C1A368E8ABA3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 08:00:27 +0000
Manifest this update: Sat 14 Jun 2025 08:00:27 +0000
Manifest next update: Sun 15 Jun 2025 08:00:27 +0000
Files and hashes: 1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: XRV2r7Kdp1z5PNTj1SbOEeZowZLzrH2Did/1JEjSDzg=)
2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4c:fd:dd:a7:48:71:b5:c1:a3:68:e8:ab:a3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Jun 14 08:00:27 2025 GMT
Not After : Jun 15 08:00:27 2025 GMT
Subject: CN=40c1fc1725940e900b199842acd678c8d54a6e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:e2:fd:79:a1:40:17:f4:20:a0:7b:0e:43:
46:d4:de:98:27:a6:43:fb:cc:12:a6:86:03:b2:8c:
5f:ac:db:14:43:32:c2:ed:db:b0:f6:4c:89:97:ff:
29:a1:c4:71:06:63:08:1e:4e:bf:6c:84:69:83:05:
60:67:95:d2:7a:16:d8:31:57:14:49:dc:d3:df:2c:
48:d3:ac:61:93:b5:aa:13:9d:8b:5f:36:84:88:7f:
70:cf:5a:80:43:05:bb:41:0c:45:1e:2f:cc:97:35:
98:08:17:35:47:71:58:44:15:e0:41:d4:e6:93:40:
3f:92:d1:f6:18:c6:cd:f4:da:9d:88:fb:dd:3c:95:
5a:2d:41:5d:85:d6:9d:38:89:90:ef:57:53:c2:7d:
be:4e:36:5e:fc:37:1b:5b:e6:5b:57:7e:34:0b:72:
e7:97:9c:3e:ef:ae:25:f1:cb:e7:cb:c8:77:0b:5e:
9a:be:5e:9b:b6:00:53:1c:b8:16:a8:c5:d5:a4:2f:
c5:18:92:9e:d1:41:11:f5:f0:ac:6b:5a:f4:19:54:
0b:60:c2:41:03:43:b4:b8:95:70:28:29:d3:f9:15:
ae:4c:19:aa:78:20:9d:0a:c4:b9:78:e9:61:19:f2:
50:43:be:a5:18:42:7b:a4:be:1d:60:e4:b1:33:64:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:FC:17:25:94:0E:90:0B:19:98:42:AC:D6:78:C8:D5:4A:6E:52
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:47:34:a9:51:a3:09:bd:cd:21:df:78:49:3e:20:66:99:17:
cb:8a:6c:e1:4e:31:fb:25:7b:3f:d4:08:66:2c:b6:c6:e3:0b:
1d:07:59:4c:18:7d:78:8f:91:8e:1b:d4:ce:81:1d:2b:56:7b:
9b:b0:0b:c5:0b:9f:c5:fa:46:87:43:07:cd:13:d4:f3:4b:b1:
6a:91:91:20:6c:aa:d7:86:c2:27:52:2a:51:24:82:2e:62:70:
d5:4a:be:b7:08:d5:32:bc:20:ee:c9:8d:f8:5c:e9:0f:f0:d7:
13:76:c6:f0:20:92:67:17:71:3f:da:48:3d:51:bb:ab:3a:e0:
d6:40:33:69:ae:0a:90:f9:b1:6a:b5:e5:00:dc:92:a0:fd:7e:
0d:fc:7f:4f:e2:10:0e:4a:d7:77:7a:af:7f:3e:9c:60:c0:96:
f7:9c:31:46:b3:3c:4a:15:26:46:94:65:48:08:45:4f:80:79:
81:39:4b:7a:51:71:19:06:c5:18:76:49:f1:b1:e9:3e:be:9e:
18:4f:5c:44:76:82:3e:ce:be:54:a7:1b:2c:fb:29:0a:59:9a:
40:11:74:5c:68:5c:d9:af:55:74:63:6b:8e:dc:49:40:2e:88:
58:e7:1d:0e:b9:26:32:29:78:c0:f6:88:52:97:83:98:71:31:
79:82:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:30 2025 by rpki-client