Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: cTjncPIZXzjL59nB7CnBwyb5t/p/1QCZ/82blZWGxJQ=
Subject key identifier: 5E:D6:7B:FA:1E:65:6F:C5:BE:26:0C:1D:8A:1B:EC:DA:F7:A3:BB:9D
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 01977C42C923D23E9183B54DC2A9AAAE3A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 01E4
Signing time: Tue 17 Jun 2025 05:00:40 +0000
Manifest this update: Tue 17 Jun 2025 05:00:40 +0000
Manifest next update: Wed 18 Jun 2025 05:00:40 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: c63133HhflX9qIR75fvMkHuvZu3brh3XrZziDguyetw=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:c9:23:d2:3e:91:83:b5:4d:c2:a9:aa:ae:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jun 17 05:00:40 2025 GMT
Not After : Jun 18 05:00:40 2025 GMT
Subject: CN=5ed67bfa1e656fc5be260c1d8a1becdaf7a3bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:45:9d:ff:9c:52:9b:63:b9:d9:eb:04:9b:
32:f4:15:7d:b2:54:ec:1b:3d:c1:a3:45:0d:de:e3:
43:80:72:69:16:f0:14:eb:e3:76:8d:5f:91:73:67:
02:93:ab:5e:a1:f5:a3:2d:1f:7d:f4:da:3a:09:f4:
33:6f:7a:83:46:9c:98:1e:65:e5:f8:16:42:93:9e:
69:90:f1:ca:dd:8e:3d:22:a2:69:f2:36:b0:46:73:
9f:f9:d6:78:cb:34:29:44:bc:cd:fe:3e:1e:16:41:
10:8c:cf:94:0a:ac:fc:28:1e:1d:a3:1e:bf:c1:0a:
3a:a7:a8:73:3d:7f:a2:9a:43:f7:69:54:7b:54:d4:
17:dc:48:23:22:c3:34:c0:b7:a7:1d:18:a6:f1:83:
a0:18:b2:46:41:7e:a3:be:e3:2e:8d:d8:4f:a3:3d:
4d:6d:15:09:f9:08:df:1e:9b:30:7d:cb:7b:27:7e:
02:4b:73:9e:35:d0:81:b2:a1:51:83:30:17:da:00:
55:86:c0:fe:9a:88:b2:81:cb:d6:30:66:c9:de:23:
f1:de:d8:db:05:0b:9e:76:0a:3b:51:b5:9c:ac:d8:
28:4b:cc:27:41:b1:5a:bd:e8:d9:67:6c:78:61:e9:
4d:48:3c:2c:40:90:56:37:13:99:98:bd:8f:c9:1d:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:7B:FA:1E:65:6F:C5:BE:26:0C:1D:8A:1B:EC:DA:F7:A3:BB:9D
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fc:49:4b:a2:ba:6e:2b:60:05:4a:4a:6c:f5:f7:81:33:8d:
1b:f3:fb:a5:76:b2:8b:77:57:77:1a:73:29:a6:b9:9b:0a:e8:
33:e0:27:43:c1:cd:11:dd:9d:a9:93:aa:85:c9:b2:e8:5a:67:
b6:fe:e9:a7:45:ce:93:5d:45:6c:9c:4e:42:dc:53:39:06:95:
95:9d:d9:8a:e3:fc:4c:4e:e5:20:88:ec:81:a6:61:74:20:96:
aa:70:3b:f0:dc:7a:9a:92:44:5a:5a:23:56:9d:e7:07:0f:95:
a8:00:2d:8e:24:6d:b2:2a:13:1b:2f:7e:70:66:8c:43:36:7c:
90:ca:d0:5d:cc:6a:7d:27:6d:51:76:d6:74:ba:3d:f6:2a:60:
57:fa:1b:43:ec:4d:76:10:f6:c9:67:41:39:80:e5:4b:80:50:
14:f0:83:c6:7f:f1:a5:d2:c5:b5:9d:0f:bd:53:28:7a:a8:51:
18:bb:c1:48:b5:bf:a2:7e:5f:68:63:f2:6f:b8:a0:dd:79:6f:
12:be:95:3f:a9:94:c1:3c:03:d4:8c:38:bf:34:51:4e:0e:51:
c0:ae:d4:ca:f4:2b:1d:38:4a:db:38:75:92:1a:58:90:fe:20:
10:a0:41:c3:e2:ba:c7:ff:1a:6f:30:d1:76:55:fa:94:f9:51:
55:d6:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:32:19 2025 by rpki-client