Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: dSFIrk88RRDI8LJwtTZvamcGshdkVQcWHk+qv4AKnls=
Subject key identifier: F7:D5:C1:24:6B:1F:C1:25:CA:EC:1B:B2:CF:F9:77:12:05:6C:CC:52
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019672D41AB0F1CFA37672CFBD3E03E8D84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 03B3
Signing time: Sat 26 Apr 2025 16:00:25 +0000
Manifest this update: Sat 26 Apr 2025 16:00:25 +0000
Manifest next update: Sun 27 Apr 2025 16:00:25 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: TaxA7AqEjjbMBKCw4H/8QPE4kwa1e3U/Yf0DiJQnMWs=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:1a:b0:f1:cf:a3:76:72:cf:bd:3e:03:e8:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Apr 26 16:00:25 2025 GMT
Not After : Apr 27 16:00:25 2025 GMT
Subject: CN=f7d5c1246b1fc125caec1bb2cff97712056ccc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:1d:b8:f2:f5:b0:75:fd:ff:bd:86:0c:12:
0f:65:e6:fc:16:e8:da:c6:02:22:21:13:67:61:ae:
2d:3a:cd:18:35:26:81:92:e7:15:0d:13:df:78:c5:
0c:2e:15:fe:7b:7e:f2:d8:09:3c:42:2f:b4:25:96:
7b:0b:0f:38:8d:b9:14:50:ce:71:89:ea:8a:be:61:
70:8f:e2:0d:50:7a:f7:be:60:f2:61:43:fa:a9:3c:
c5:d8:e9:54:e3:1a:e2:8a:f5:90:c1:79:80:0b:ef:
a5:83:6d:1f:25:63:ee:1f:97:a8:8c:f2:a4:3a:2f:
a3:a6:43:1b:26:49:b5:6f:ec:6a:ec:86:75:dd:c5:
c5:02:a9:3b:b7:3d:52:1e:b7:9d:2b:45:c2:f3:cc:
5c:23:10:87:cb:c6:45:2e:e9:c0:91:f8:16:0a:49:
7f:f6:75:f5:ee:75:be:8d:0a:24:8e:5f:ee:05:be:
ca:c0:60:95:be:b7:06:61:e7:75:1e:91:fb:16:19:
eb:67:36:51:87:eb:57:69:3f:03:9c:00:28:9a:fa:
28:7f:9a:61:75:60:dd:cc:2f:c5:26:1a:96:7c:46:
34:bd:40:aa:34:8d:b7:12:19:d4:f9:ef:cb:27:b8:
2d:2d:d1:95:9a:9d:5d:6c:68:9b:76:d4:dc:27:be:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:C1:24:6B:1F:C1:25:CA:EC:1B:B2:CF:F9:77:12:05:6C:CC:52
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:4d:49:a4:a6:71:1f:98:67:4d:48:f3:d2:e0:ec:f8:d4:
d1:56:fe:7d:5b:bd:a6:b2:77:31:bc:e2:c6:d8:da:4c:4b:67:
bc:b4:b6:c0:b1:e2:ec:ad:9a:eb:93:53:b4:65:ad:c9:78:7f:
63:66:2a:15:e2:bc:0d:17:98:c2:81:21:41:fa:07:df:1c:10:
44:20:7b:23:78:3f:81:c0:c9:ff:3a:da:6e:d1:43:3d:67:c7:
d7:ef:10:12:ce:b9:a1:a0:be:bd:08:52:97:52:c4:7f:17:e3:
7b:98:ad:3c:18:0a:6b:ac:ea:5f:d9:70:e1:3f:9a:fd:65:08:
1d:c9:eb:5c:09:e2:25:4a:3d:4d:ea:12:68:a4:29:d7:ec:98:
f1:7d:c6:7a:c8:47:cf:6b:b9:2a:c8:5f:39:0d:b4:c9:45:61:
e4:b6:1d:52:5f:52:5c:90:95:90:ba:cc:51:2c:26:a1:49:cd:
81:39:0b:35:7d:59:96:e4:e2:57:36:48:2d:7e:30:69:6d:64:
ea:9a:b4:71:8b:01:b0:0d:7b:44:a5:74:da:aa:b5:cc:ca:cd:
a0:df:ff:1d:a8:67:b8:f6:95:40:cf:4d:d9:d7:6d:c8:d5:da:
79:c8:ca:ef:9b:b9:02:74:8a:20:06:98:95:47:22:35:36:db:
09:5c:72:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1Bqw8c+jdnLPvT4D6NhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzU5YzZhNjJlMjc4ZGE4MzExYWZlYzhmNzY3N2M0MTM2
M2QxZjgwHhcNMjUwNDI2MTYwMDI1WhcNMjUwNDI3MTYwMDI1WjAzMTEwLwYDVQQD
EyhmN2Q1YzEyNDZiMWZjMTI1Y2FlYzFiYjJjZmY5NzcxMjA1NmNjYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmoduPL1sHX9/72GDBIPZeb8Fuja
xgIiIRNnYa4tOs0YNSaBkucVDRPfeMUMLhX+e37y2Ak8Qi+0JZZ7Cw84jbkUUM5x
ieqKvmFwj+INUHr3vmDyYUP6qTzF2OlU4xriivWQwXmAC++lg20fJWPuH5eojPKk
Oi+jpkMbJkm1b+xq7IZ13cXFAqk7tz1SHredK0XC88xcIxCHy8ZFLunAkfgWCkl/
9nX17nW+jQokjl/uBb7KwGCVvrcGYed1HpH7FhnrZzZRh+tXaT8DnAAomvoof5ph
dWDdzC/FJhqWfEY0vUCqNI23EhnU+e/LJ7gtLdGVmp1dbGibdtTcJ76qZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfVwSRrH8Elyuwbss/5dxIFbMxSMB8GA1UdIwQY
MBaAFBB1nGpi4njagxGv7I92d8QTY9H4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4Nzkt
MmVlNGZmOGIwYTgwLzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4NzktMmVlNGZmOGIwYTgw
LzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+pNSaSm
cR+YZ01I89Lg7PjU0Vb+fVu9prJ3MbzixtjaTEtnvLS2wLHi7K2a65NTtGWtyXh/
Y2YqFeK8DReYwoEhQfoH3xwQRCB7I3g/gcDJ/zrabtFDPWfH1+8QEs65oaC+vQhS
l1LEfxfje5itPBgKa6zqX9lw4T+a/WUIHcnrXAniJUo9TeoSaKQp1+yY8X3GeshH
z2u5KshfOQ20yUVh5LYdUl9SXJCVkLrMUSwmoUnNgTkLNX1ZluTiVzZILX4waW1k
6pq0cYsBsA17RKV02qq1zMrNoN//HahnuPaVQM9N2ddtyNXaecjK75u5AnSKIAaY
lUciNTbbCVxyqg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:22 2025 by rpki-client