Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: QX1h4d6rOMsO+EobgQPOkakh+6z+eJjUpAKuhNqY8ok=
Subject key identifier: 2B:08:B4:B8:6C:C1:81:CB:97:74:36:D7:5B:2E:D4:E2:3B:F3:8B:01
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 0196760C3712B80917BF8FEAF0DBA07C7191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 07:00:34 +0000
Manifest this update: Sun 27 Apr 2025 07:00:34 +0000
Manifest next update: Mon 28 Apr 2025 07:00:34 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: ksMrvXWDN76p/QKKv6QOOWrGaoppQ0Gdn4dm20fmbao=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:37:12:b8:09:17:bf:8f:ea:f0:db:a0:7c:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Apr 27 07:00:34 2025 GMT
Not After : Apr 28 07:00:34 2025 GMT
Subject: CN=2b08b4b86cc181cb977436d75b2ed4e23bf38b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:01:49:21:0b:27:2e:49:ec:a2:18:24:0a:
c1:96:13:73:63:62:95:93:b7:85:c9:3e:d1:10:9c:
ad:ec:7f:e5:d4:09:58:ac:8f:04:18:30:bc:85:12:
f9:24:d2:6d:20:1d:d2:09:a4:5e:ba:82:d1:3a:0d:
bb:4b:ca:6a:ef:23:ca:d8:47:63:f7:b5:e4:1b:c1:
32:36:0b:b1:c7:39:ee:8a:93:22:8a:ca:2f:4d:47:
96:20:b5:45:d4:0b:e1:12:2d:34:c6:7e:46:da:b5:
6c:92:ca:9f:30:4d:31:98:b5:3e:83:15:2d:3f:2b:
59:5a:93:e4:ff:3e:4d:19:89:92:55:77:e4:49:3c:
a1:44:9b:49:f3:54:71:4e:43:b7:30:a3:b9:95:88:
26:80:43:ac:50:0b:f7:8f:53:a4:5f:12:6a:61:0a:
e0:4d:04:5f:81:c8:c7:28:6a:e9:58:db:e8:5f:bc:
d2:1e:a6:58:c7:9e:0f:1c:5e:ef:f3:69:b1:58:3c:
ab:e4:d8:f6:3e:68:80:9f:74:d6:d2:ba:38:f8:0d:
ed:53:b3:83:8b:52:aa:e0:b4:e1:f3:37:9a:3a:1b:
2c:98:7d:f1:12:90:65:a0:b4:b6:c5:3a:c3:79:c7:
a6:d4:67:43:e7:a2:21:35:d2:5b:2b:04:c0:dd:12:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:B4:B8:6C:C1:81:CB:97:74:36:D7:5B:2E:D4:E2:3B:F3:8B:01
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:34:5b:94:19:3b:90:32:d7:aa:2b:fe:e9:9c:a5:53:2c:
8a:e0:9d:c0:29:9d:42:e4:f9:a8:ad:cf:10:b1:bb:37:e2:69:
3c:b4:3a:83:44:7a:8b:21:58:1f:e9:0e:dc:11:f8:1b:9b:2c:
35:49:2a:70:98:b6:2d:27:9e:e2:17:a7:bf:f5:b0:8a:90:29:
76:67:c9:b1:0d:d8:b3:08:64:d4:a8:c3:77:93:33:44:1d:bf:
ea:6b:53:c0:a5:d6:30:0e:43:4e:df:5b:16:4f:2b:b4:ac:0e:
39:69:d5:8d:f2:35:f7:19:62:de:de:76:21:a2:7f:bf:2a:61:
fb:4a:7b:d1:40:e4:c7:57:0e:c5:6b:52:06:76:6c:47:88:76:
af:e8:26:84:72:48:7f:93:33:60:a4:05:20:5f:24:60:5e:f3:
8b:a1:6c:c3:00:71:42:f8:17:a7:67:04:5b:b6:38:58:77:51:
0c:4a:ba:5a:20:10:9f:6e:d4:36:f2:44:7f:a6:dd:4f:ed:46:
f9:b4:cb:87:ec:d5:f6:57:89:67:b1:95:7f:da:72:81:8b:e9:
ee:3c:ce:4a:ba:ce:ac:35:23:8b:26:62:3d:2c:83:ea:c3:e5:
19:f3:13:7b:69:c2:89:17:c8:49:6f:f2:98:51:0a:33:6b:d5:
55:1a:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:55:13 2025 by rpki-client