Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: oJb/8g0wGI/EipC6tDx4MocGxf9sOhDXlDSZcqPI7KI=
Subject key identifier: B7:CA:09:05:23:69:17:90:B0:16:5B:51:80:F0:E5:37:1E:C4:97:6E
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0197711AA1354906E6D35B86563FDF2D27AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 129A
Signing time: Sun 15 Jun 2025 01:00:59 +0000
Manifest this update: Sun 15 Jun 2025 01:00:59 +0000
Manifest next update: Mon 16 Jun 2025 01:00:59 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 9d/eiqbIA+ThRebn7lgzot1jAqGQQKAIzfQ2C43HtXY=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:a1:35:49:06:e6:d3:5b:86:56:3f:df:2d:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jun 15 01:00:59 2025 GMT
Not After : Jun 16 01:00:59 2025 GMT
Subject: CN=b7ca090523691790b0165b5180f0e5371ec4976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:7a:92:cb:4f:db:44:f7:7a:22:84:28:c5:
be:36:8d:0c:bc:47:3c:79:ea:8b:6e:bd:a4:97:3d:
03:ba:ca:7f:68:07:7a:6f:a7:6e:ae:ad:34:fe:3a:
d3:5a:0e:29:08:42:b9:9c:a3:82:03:5f:25:be:3a:
e1:05:83:86:71:f9:e0:73:e5:ee:8d:17:30:30:4d:
21:13:09:f6:ee:25:d8:72:b0:cd:4f:b3:ce:d4:73:
df:0d:3b:dd:55:9b:82:7e:1a:de:1d:e5:0f:53:6e:
c4:4e:54:9a:03:25:2f:1e:5e:b8:aa:f4:14:a2:5c:
34:02:ac:58:f7:97:e2:78:5e:e6:e7:85:c9:77:ff:
d1:36:69:7e:37:e7:12:23:9e:30:d0:b1:aa:da:91:
f1:6c:1f:51:e2:5f:cc:e4:4f:ab:ed:68:b4:ad:ec:
8b:84:54:af:c8:98:00:28:0e:ab:a4:d5:cf:d1:4a:
d2:59:4d:cd:93:32:de:7c:0c:cb:fa:60:ca:6a:55:
2d:ce:09:9e:d7:64:d0:84:b0:ee:e3:0d:88:50:7f:
ed:3e:f2:bd:5d:24:9f:96:11:c4:cd:44:d7:ca:30:
f1:f0:08:a6:e9:0c:bc:e3:85:0d:74:b2:a9:a4:1e:
2a:aa:91:33:e2:3f:ba:33:bb:2b:1b:6c:bd:14:4e:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:09:05:23:69:17:90:B0:16:5B:51:80:F0:E5:37:1E:C4:97:6E
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3a:d7:1e:35:8c:db:5a:61:a5:22:c2:26:2f:c8:ba:30:bb:
41:34:3d:93:33:60:9e:8a:e6:fd:2f:92:bb:fa:14:9d:da:cb:
34:8b:db:6b:71:bc:91:52:bd:78:c4:02:52:47:7b:94:62:a1:
40:4f:a2:bf:2e:7a:5b:43:c3:1b:db:19:dd:cf:c4:07:b9:36:
82:cd:6c:d1:e0:7b:b8:05:5a:db:d9:62:0a:43:fe:bb:84:26:
52:66:7c:52:8c:73:d4:d7:0d:35:55:5f:c4:63:b3:19:a1:31:
91:71:e7:13:3e:60:a6:90:ac:f9:59:7b:04:5f:98:85:da:ad:
02:bf:ea:7e:cf:0f:cb:93:14:8b:42:d2:f5:e3:de:4d:cc:6e:
9e:90:9a:05:19:1b:5b:22:f6:26:22:29:1f:c4:bd:79:8d:8b:
18:f1:59:68:3c:e6:17:ce:a2:54:46:e8:a4:3b:1d:4c:6c:b6:
7f:49:90:1b:65:56:87:b1:ca:37:5c:f7:83:c2:7f:b9:d2:b0:
aa:ed:5c:db:76:a0:7b:61:aa:a1:ef:44:ba:c7:86:84:f1:eb:
e2:94:c9:20:df:64:c7:b9:70:a7:df:77:93:ec:d1:6e:09:4e:
5b:1d:23:df:89:93:be:57:56:b0:48:13:e6:09:8f:11:cd:15:
7d:b9:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:05:33 2025 by rpki-client