Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: tshhT2tMxBVnIJmjCCBe5nmLEKbYoq5eeonJLGNczJM=
Subject key identifier: 6D:1E:19:5F:21:1E:2C:45:43:B2:1E:F0:D9:05:D6:88:94:23:64:B5
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019684DA74AC924B4710F298B55956240377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 04:00:31 +0000
Manifest this update: Wed 30 Apr 2025 04:00:31 +0000
Manifest next update: Thu 01 May 2025 04:00:31 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: YbrxFlFElQRHRe5mfSwka15u2aqrX0IeKTViQmEb9dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:74:ac:92:4b:47:10:f2:98:b5:59:56:24:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Apr 30 04:00:31 2025 GMT
Not After : May 1 04:00:31 2025 GMT
Subject: CN=6d1e195f211e2c4543b21ef0d905d688942364b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:8c:b7:24:e6:44:30:6c:9d:03:3b:ae:ef:
5b:8e:87:61:6b:62:7a:85:54:b9:83:2f:2f:5f:27:
f3:54:62:3a:19:bd:6f:24:42:e9:ef:14:95:66:39:
01:d4:e8:92:d6:97:6c:38:0c:a0:fc:06:8d:d4:70:
a8:d0:a5:b5:e1:e9:eb:2c:a8:d0:8d:18:5d:c6:f9:
b3:cb:54:4e:7d:b4:ca:9e:7a:1e:d4:f1:77:25:97:
2e:b2:4b:4b:9f:e0:dc:43:fc:91:b6:0c:c7:08:1d:
18:45:85:0f:09:a7:4a:79:5d:ea:26:d9:8a:b3:d1:
c6:a1:1b:e3:79:b7:d8:75:54:07:07:fe:59:5d:e1:
cb:da:4d:69:11:fe:a3:7c:2a:ec:d1:9a:f3:7f:ec:
7b:86:73:b3:15:2a:22:58:92:65:92:df:84:0a:3b:
e0:94:8e:cc:33:62:19:94:6a:ea:ec:44:9f:c0:1d:
2e:b6:1b:3a:5b:29:26:d4:e6:ed:68:1f:ba:07:a9:
63:b4:d0:dd:c3:f0:74:78:0c:7e:d4:49:c1:6b:fa:
73:bd:2a:1f:28:55:5e:74:60:e3:42:96:37:c4:3c:
e9:a2:ed:76:16:b9:ff:cc:79:de:6a:93:51:6e:a5:
2a:9b:35:ef:04:2d:29:f5:02:e0:94:3f:77:84:1d:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:19:5F:21:1E:2C:45:43:B2:1E:F0:D9:05:D6:88:94:23:64:B5
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b6:e4:34:c3:89:6d:ee:f1:38:ca:75:aa:2d:9f:33:53:29:
3b:61:3f:56:35:c6:99:87:df:71:86:d1:14:14:b9:4f:74:c5:
d2:9c:39:3c:b8:af:b4:0a:49:44:78:f4:9f:62:d8:37:65:db:
a1:7d:f2:54:95:f6:62:c6:69:fe:24:e1:48:34:03:d2:d1:b2:
f6:a6:02:05:fd:79:06:d0:0f:3a:10:e1:f1:7d:70:32:1f:95:
d3:bf:b4:54:35:53:13:01:41:60:ac:3b:a4:2c:f6:90:7a:f3:
5a:7b:ef:7d:e7:bf:91:82:c5:c4:22:0e:24:94:4d:69:ac:cd:
69:de:d0:13:d4:50:70:d5:04:f1:89:3f:1b:ec:e6:42:37:2a:
18:06:82:ea:76:ea:e9:53:71:b2:5c:e0:54:47:c0:2a:40:f0:
18:79:c1:53:6d:44:77:f1:fa:e2:61:4e:7d:05:82:ce:36:14:
cd:fd:4f:5f:b9:f8:8c:04:51:71:00:00:70:c5:fd:3c:52:f4:
a5:ff:9e:7c:79:f5:89:ee:f1:20:9b:cf:ce:b3:15:db:67:84:
ec:22:08:5b:2c:f1:2e:d3:6f:14:5f:d5:af:97:81:1a:b0:01:
54:d9:9b:f5:20:b9:2b:72:f1:4e:29:00:1c:3d:26:3f:eb:e2:
77:eb:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:38:58 2025 by rpki-client