Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: rV/F2G9D2fBPnklq2qRYTbS6tk5wAqVc8iZ/WZbp45I=
Subject key identifier: 66:62:D6:9C:48:92:45:94:7E:EC:4A:ED:C6:0C:32:29:6F:FB:1F:5B
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01967679F83931DA7252704842843C6BE8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 09:00:26 +0000
Manifest this update: Sun 27 Apr 2025 09:00:26 +0000
Manifest next update: Mon 28 Apr 2025 09:00:26 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: nNfv9awRnmAPi++VK6ESoL/2aZF6Tm31crFK9etcSNM=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f8:39:31:da:72:52:70:48:42:84:3c:6b:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Apr 27 09:00:26 2025 GMT
Not After : Apr 28 09:00:26 2025 GMT
Subject: CN=6662d69c489245947eec4aedc60c32296ffb1f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:69:cf:81:bf:82:ae:57:8f:16:84:33:f7:
d0:50:63:7f:28:a2:13:ac:59:f8:fb:ed:a4:d1:0e:
f0:e0:82:94:d3:5c:47:55:0d:69:d3:52:a7:20:34:
dc:e6:f8:27:09:86:f9:ad:64:bd:95:2a:46:a0:7a:
57:6a:bc:e3:e8:90:84:d1:51:fa:24:03:db:df:87:
70:6b:a1:8a:ad:e0:58:11:72:6e:9b:69:80:7b:e4:
a4:07:cf:0d:c7:5b:f5:40:6e:71:d9:1f:2f:ae:fa:
fd:82:cc:7f:3b:5b:56:ef:cd:62:bf:de:e7:94:be:
1d:19:04:ed:29:50:93:4c:c2:b1:2e:4a:10:7f:eb:
64:3c:d5:4e:0c:bf:1f:61:69:68:fe:aa:53:b7:1a:
f0:b3:a8:85:78:09:85:d0:d2:01:a2:ba:f6:27:82:
01:45:d0:9f:07:39:c2:e9:51:03:ed:05:b0:ca:67:
e8:f9:fc:fe:80:6e:57:6d:65:75:db:d7:6f:9f:94:
66:17:c2:26:7c:12:ff:db:d0:7d:93:0a:bd:77:15:
40:d2:54:49:f8:54:ed:71:84:cc:67:cf:81:81:ff:
3a:5d:67:10:28:ac:89:33:8d:bc:0a:34:41:00:d6:
50:54:a3:26:30:37:31:f3:bb:f1:b6:a7:86:83:cc:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:D6:9C:48:92:45:94:7E:EC:4A:ED:C6:0C:32:29:6F:FB:1F:5B
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:63:85:ac:aa:3a:3b:ad:17:f1:0b:14:fd:5b:37:c0:30:
20:24:06:12:8a:df:4a:f3:3c:ae:38:7c:ee:bc:97:5c:a3:02:
f6:4a:ac:12:60:5a:1f:df:18:ee:49:3d:d3:eb:73:f2:c9:4e:
aa:ce:89:d0:cf:dd:65:2a:d7:cf:83:c6:83:82:a5:48:f7:39:
7a:ff:16:23:ea:90:11:73:d2:1e:24:b1:ad:2c:a8:a0:0b:f9:
ab:62:e5:da:aa:42:a2:44:b1:e2:be:e6:1b:90:9f:ed:ef:97:
36:10:5b:66:61:1d:5e:61:67:e6:10:18:f9:7f:fc:25:7f:83:
52:91:00:f2:d8:6a:d9:5b:53:c7:93:56:74:88:8b:00:0e:d6:
b7:bd:c7:86:0f:62:12:54:3b:11:eb:86:ad:e1:0f:be:83:a9:
2b:8f:6e:87:11:2e:87:6c:99:a2:01:ab:03:db:ba:2d:5a:c6:
17:82:5d:02:8d:33:91:de:8e:8c:a3:e6:9e:b8:d3:6e:b5:48:
15:47:ab:59:44:61:ca:89:3b:d9:7f:50:e8:07:ab:eb:5a:f5:
77:03:32:3c:93:e5:69:6d:ef:4e:5f:34:30:b7:70:0c:22:7a:
ef:a4:73:68:fa:28:3e:10:65:89:cb:03:dc:0c:e0:95:d9:e6:
7e:89:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:26 2025 by rpki-client