Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: HK2vCKKqH+/cigjh+USglAIOfLsP7d45Oyogzg52gnY=
Subject key identifier: 47:02:3C:4F:29:A1:81:A7:E4:98:4F:35:A8:57:DD:28:BD:7C:16:25
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 0196748B5ADC626BF24D364EDF99EB900BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 00:00:11 +0000
Manifest this update: Sun 27 Apr 2025 00:00:11 +0000
Manifest next update: Mon 28 Apr 2025 00:00:11 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: vzK1HPXSgCGKap/S0K4APy7es2UO4sx6DFRUAO9LsSs=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:5a:dc:62:6b:f2:4d:36:4e:df:99:eb:90:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Apr 27 00:00:11 2025 GMT
Not After : Apr 28 00:00:11 2025 GMT
Subject: CN=47023c4f29a181a7e4984f35a857dd28bd7c1625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:2f:a8:e8:09:7e:c2:17:2c:30:74:0e:e4:
cd:70:7e:1c:55:10:78:71:65:80:43:62:29:ed:56:
e4:cd:86:20:52:ae:94:c5:61:e4:88:4d:17:47:23:
1a:34:d0:b2:13:9d:33:e9:a7:31:9c:67:91:82:5b:
1e:a4:2b:66:89:94:af:af:48:45:1b:5b:d7:60:7a:
b8:cc:d4:ff:63:e2:67:a9:57:c9:8e:76:18:a4:83:
4f:7e:29:aa:11:54:4e:a3:41:aa:e5:8a:e9:1f:e6:
08:3c:fe:19:5e:1c:bb:a8:aa:13:df:d7:0d:45:d6:
d8:0b:c9:9e:b9:f9:48:ef:d4:9d:93:3a:68:5c:40:
4d:b1:3b:ea:be:de:53:3c:37:50:f0:4f:74:b0:a8:
4a:fe:d7:b2:1d:b2:0a:7b:7b:06:43:df:22:33:ac:
99:6b:70:c1:18:09:f8:23:51:9b:a9:9f:59:9e:98:
4b:7d:cc:55:af:8c:d4:1e:25:fe:4c:3d:99:67:ab:
1c:3b:56:ad:ed:1f:39:24:3b:17:7d:0d:62:e4:dc:
5f:5d:56:79:3d:1c:b0:1a:97:6e:61:b3:24:e0:1d:
43:4d:8d:9e:47:2c:9e:d0:db:45:7a:52:a7:3e:7d:
1f:2d:04:28:a2:a7:f1:41:9c:63:8f:34:7c:25:d0:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:3C:4F:29:A1:81:A7:E4:98:4F:35:A8:57:DD:28:BD:7C:16:25
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:8f:9c:bc:ea:23:49:be:26:9a:06:a1:54:f3:55:ae:e7:
eb:71:75:fa:94:8d:f6:1c:ba:97:0b:ac:54:2e:fc:75:87:59:
32:fa:57:71:ae:0e:5d:8f:84:55:05:28:31:05:55:e5:7f:6d:
24:23:a1:c7:a0:ef:21:03:7f:41:6b:a0:e8:be:5b:ce:5b:0b:
0a:c5:fa:63:08:d0:b7:ef:35:64:8a:4f:a1:61:40:f8:4a:2a:
9c:82:95:42:1e:d5:5b:a3:1e:8f:ce:57:6c:91:a7:6d:3c:ae:
a9:d6:fa:59:31:57:d1:d2:f6:78:f2:2a:5d:b2:da:51:38:ad:
35:c1:c4:26:62:c1:02:62:1d:65:68:41:7e:da:09:f7:63:d3:
a1:bf:f1:d5:e6:41:82:18:52:e1:47:55:fd:e8:f5:d5:c9:11:
f3:cb:78:fd:eb:46:5f:f6:5d:d3:1c:ec:ec:30:17:f0:0d:35:
a8:97:9c:6e:3a:c1:9a:2e:de:25:a5:c2:e7:05:f2:f3:d4:e4:
8a:94:00:20:ad:17:83:db:9d:ba:b1:2e:8f:ef:85:fb:6a:98:
b5:c0:ff:44:cd:2a:8a:99:e4:8f:01:de:c5:d7:65:09:f8:a5:
2f:7e:ec:c7:2e:18:dd:96:6b:59:3c:f3:8c:14:1e:cd:00:cc:
54:f5:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:27 2025 by rpki-client