Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: vVRLimgOtUYpHbwBx/QmFbWSelCvVmZIZ2RmNcc+EXw=
Subject key identifier: CB:08:00:6B:3E:DD:78:48:85:35:A3:74:6C:D5:7E:39:D2:D4:CE:89
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 019675306C7E9ECAAA33361FD0112E7954FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 03D4
Signing time: Sun 27 Apr 2025 03:00:29 +0000
Manifest this update: Sun 27 Apr 2025 03:00:29 +0000
Manifest next update: Mon 28 Apr 2025 03:00:29 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: 4vyyFiCtpv64kmcJjqkEEFAksqCrLeTFN+DLAbLv+hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:6c:7e:9e:ca:aa:33:36:1f:d0:11:2e:79:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Apr 27 03:00:29 2025 GMT
Not After : Apr 28 03:00:29 2025 GMT
Subject: CN=cb08006b3edd78488535a3746cd57e39d2d4ce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:db:36:55:ff:6c:f8:d7:b9:92:79:d8:79:
dd:10:a6:2d:13:a4:64:97:56:8b:83:3c:98:b5:3b:
24:64:87:fa:ef:d8:c4:b2:92:01:ff:14:23:67:d2:
38:ab:c8:be:9b:b6:2a:a0:aa:da:4c:db:99:22:04:
10:0c:3f:5b:4e:bf:0d:9b:81:b1:a5:8b:46:9a:79:
ef:7e:4e:d7:28:6a:ea:ce:fa:4c:57:58:4c:83:68:
96:c4:12:68:bd:78:87:69:d1:1c:5f:ad:f3:7b:ee:
e9:26:ba:71:51:9d:1d:74:8e:dd:7f:1f:1b:f1:c8:
dc:53:b6:3b:f5:ed:02:44:a5:40:96:af:e6:a3:b6:
cc:9f:15:d7:ef:21:07:e6:4b:ad:bf:2b:d6:b3:ab:
5f:e1:4c:5f:55:6c:32:a5:bb:ac:ef:40:7a:79:83:
b1:3c:91:f7:73:99:0b:86:82:2c:f6:cc:3e:88:5c:
49:3c:ca:f1:c4:02:50:3e:3c:c5:af:e0:33:c6:1d:
a0:ee:9b:7b:6a:ba:cb:39:4d:8d:19:e2:69:9a:07:
e8:ec:0d:23:29:57:d7:3c:1b:bd:d9:83:9c:b0:df:
fc:8b:74:25:9a:ab:a4:6d:2f:b6:e6:92:da:2e:8d:
6c:f0:e5:78:e8:bd:52:23:d4:61:fb:b4:bf:d5:1d:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:00:6B:3E:DD:78:48:85:35:A3:74:6C:D5:7E:39:D2:D4:CE:89
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:54:ab:b9:f4:90:31:a1:27:d1:c9:54:09:9b:a8:b2:9d:22:
2d:1f:73:cb:82:7e:7a:dd:67:2f:45:e9:9f:9a:84:44:30:fa:
e8:10:30:e4:23:4a:f3:aa:59:af:65:59:14:41:e5:87:51:48:
08:50:79:09:0e:22:91:6c:e6:b8:22:ad:47:44:8b:de:d9:85:
ab:0d:e9:31:d5:dd:a6:05:7e:37:4f:61:bb:f1:de:bf:a7:a3:
49:4a:e5:f2:bf:09:c2:14:74:f5:c5:10:cd:29:1b:9d:02:47:
b3:43:f5:ca:e6:40:af:cf:31:85:05:3b:5e:1e:8a:13:b0:b7:
d6:b2:b0:18:a3:49:b2:4c:8a:f5:27:f6:72:be:7c:cf:c6:72:
a3:a7:2a:4c:76:7e:d0:78:ce:52:8e:fa:59:f5:a0:da:b2:96:
0b:9c:4b:02:0a:d1:89:51:dd:c5:82:f0:d2:25:1e:57:43:a9:
db:b7:45:8a:d3:0f:f9:d0:ee:5a:bc:72:93:90:10:94:0e:4f:
9b:2d:ee:22:f6:7e:9d:41:d4:0f:83:59:85:2b:ca:09:6e:0c:
dd:ce:22:69:95:b9:7b:91:5d:d9:c2:82:fd:bd:1e:57:73:a7:
4b:d2:00:a0:66:3e:f3:11:27:3c:33:d1:34:1e:e8:bb:fe:f7:
d6:b5:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:14 2025 by rpki-client