Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: z7csqFw0M08BqRz5hF+4ReKWt+/r0cI1Lo3f4FijwJM=
Subject key identifier: 29:6C:BC:54:F1:ED:BF:1B:7B:4C:DF:E7:EE:C6:0E:5B:30:C8:F4:5E
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 01976BF3EDCBFC88603F9F75E5E7EB71EC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 0434
Signing time: Sat 14 Jun 2025 01:00:37 +0000
Manifest this update: Sat 14 Jun 2025 01:00:37 +0000
Manifest next update: Sun 15 Jun 2025 01:00:37 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: PfaNm0qN0+mr3ZC9XUi4uJRpeSicGDZlC1OXHGu6qow=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ed:cb:fc:88:60:3f:9f:75:e5:e7:eb:71:ec:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Jun 14 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=296cbc54f1edbf1b7b4cdfe7eec60e5b30c8f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:72:91:7d:81:23:00:5a:fe:f5:19:76:42:
81:d1:57:2c:f7:17:4d:10:bc:e9:fd:b2:0e:d3:11:
bc:c7:64:d9:ef:32:2f:a3:79:ba:4f:be:39:94:b8:
b2:d3:f1:85:38:0e:de:22:18:64:4d:ab:62:e4:5c:
23:72:96:c9:ad:b5:5a:65:df:9c:b4:ad:45:33:37:
b4:86:14:51:14:77:7d:03:62:23:7e:9f:54:e6:ae:
c9:82:02:e8:ff:a5:96:bb:0f:b6:1c:2b:25:af:f4:
57:e0:f3:f4:52:42:1b:39:11:81:8c:dd:6b:cc:59:
cb:d8:f2:84:00:54:f8:6e:1c:0e:3f:69:b2:5c:b9:
42:29:bd:04:20:53:d6:c3:7e:e2:e6:f1:de:fe:8a:
f7:a0:2e:dd:43:ca:6a:df:8a:e0:18:16:89:16:52:
8a:45:c4:90:0c:e5:3e:b3:77:33:cc:78:19:15:86:
ad:49:5d:49:cb:bd:57:b6:6d:f8:c0:89:b4:75:1d:
88:21:7f:e2:1f:1f:29:89:67:e6:b3:d9:33:28:b1:
04:cb:e1:ac:2f:d6:5d:92:6f:2d:55:19:4b:8a:06:
f9:a9:56:7a:27:68:0d:ee:2a:b3:10:c3:98:dd:02:
d0:d2:f6:eb:6e:40:60:b3:20:cf:35:f3:9a:07:0c:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:BC:54:F1:ED:BF:1B:7B:4C:DF:E7:EE:C6:0E:5B:30:C8:F4:5E
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:b3:a4:f0:85:e3:c2:ab:23:06:3f:3e:03:2a:dc:6b:23:
04:f4:4a:32:3d:b1:23:7d:7d:f0:17:0c:99:aa:a8:32:a0:ce:
d4:04:55:c4:c3:66:8d:c3:dd:f1:b1:0b:99:ae:50:5a:da:47:
a3:4e:fa:e1:0d:79:6a:cf:1c:c5:5f:e8:75:00:5a:c8:2c:53:
e7:ca:c0:93:71:7e:cf:d7:a2:10:bf:93:f0:0d:8a:a6:47:22:
7d:ad:5a:bd:d9:79:7a:9c:4a:9a:81:c6:b6:35:9f:5f:af:b7:
75:63:80:ef:73:3d:15:ab:1c:35:ca:0a:6a:e4:24:68:8f:c4:
ff:70:f1:34:fb:d9:7f:ed:1f:43:48:26:4c:4a:66:bb:c5:7b:
09:b6:18:5f:8b:12:66:bf:30:a3:f7:1a:6b:85:a9:e4:2d:0b:
c7:77:79:88:da:36:12:ed:0e:90:58:79:f6:01:a6:a4:86:13:
93:81:6f:26:40:04:c5:1c:32:4a:35:5d:70:5d:38:21:fb:95:
de:36:e3:91:77:5b:d1:1a:81:88:47:6c:dc:c0:c6:40:ad:78:
a6:c3:d2:af:3f:b8:99:b2:d8:f9:73:43:81:c4:8f:a0:6d:de:
d0:da:f3:28:8c:f5:65:4d:8c:e8:be:0d:40:1f:9e:f1:d2:84:
a4:72:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:26 2025 by rpki-client