Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: 9TPvcJdcG4yXtC1rj+R/Sc2PTKI5i2bFc44H93KTjsU=
Subject key identifier: 60:43:FF:DD:4B:46:86:79:51:DE:AA:ED:AB:E7:AA:DF:7A:98:55:CC
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0196797B30B10229FD2BF7432664E23CA9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0B25
Signing time: Sun 27 Apr 2025 23:00:38 +0000
Manifest this update: Sun 27 Apr 2025 23:00:38 +0000
Manifest next update: Mon 28 Apr 2025 23:00:38 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: kF/xqJkINsboRuscZVKRXHWYpHY+wYCHSEMJX7Fq8DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:30:b1:02:29:fd:2b:f7:43:26:64:e2:3c:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Apr 27 23:00:38 2025 GMT
Not After : Apr 28 23:00:38 2025 GMT
Subject: CN=6043ffdd4b46867951deaaedabe7aadf7a9855cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:42:5e:2e:a9:1c:2c:cc:01:8a:2d:4f:71:
d2:7a:07:37:4b:7e:5b:ba:de:77:5b:b1:0a:75:6d:
d9:38:d8:e4:83:c6:44:01:77:d3:7b:81:93:85:e2:
58:17:f4:a4:46:30:3a:ad:94:eb:90:42:06:08:5b:
4b:b4:d6:44:76:5a:11:5d:7a:ec:18:05:24:33:a4:
dc:45:06:d4:10:39:02:f2:f8:39:ae:4f:c5:24:8b:
19:55:b8:2a:c6:95:57:70:4a:5b:fe:04:34:84:d2:
88:b9:06:9a:e9:2e:61:ba:18:80:56:48:c5:82:d4:
c8:79:6b:1c:a4:a5:6d:a5:40:cf:dd:85:44:47:da:
2b:ae:60:b5:2d:e6:f9:d6:b4:a9:29:a9:2f:cd:1f:
d9:37:c8:58:f8:e9:7a:66:08:9a:36:34:07:eb:35:
bb:cb:60:16:06:89:18:e4:89:77:fd:9a:76:bf:10:
91:c3:a8:45:33:83:e9:a1:df:b2:fc:17:e2:0a:1e:
28:92:a7:7f:6c:36:6f:90:26:dc:40:1e:ed:92:3e:
1f:8b:36:a9:3e:fb:b1:e7:db:c1:c4:bb:b1:75:e8:
d0:de:f6:3c:35:71:89:56:53:40:92:e7:1d:36:ee:
59:90:9d:a9:a6:ff:5a:3e:c9:6d:9e:08:dd:28:7e:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:FF:DD:4B:46:86:79:51:DE:AA:ED:AB:E7:AA:DF:7A:98:55:CC
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:ca:12:02:19:f8:92:93:b4:66:b9:f4:c0:6d:d1:26:e4:
21:82:e2:ec:27:bd:29:93:c7:86:78:cd:df:7b:b5:89:55:ed:
2c:8e:56:d5:d2:25:61:5b:be:03:3b:05:4a:54:f7:4b:c4:3c:
5e:63:7b:c9:cb:d4:e2:2e:92:d6:b6:4f:46:82:5e:11:b6:eb:
62:cf:d2:f6:e8:cf:fa:03:bb:0e:46:b2:d1:3c:e8:46:3c:0f:
d6:de:a0:86:ef:33:67:2c:7e:9f:dd:43:2a:38:03:33:e6:8b:
50:0b:de:1e:49:da:f6:02:f0:27:7a:2f:b7:bd:32:39:83:94:
7b:f6:13:fe:e9:30:9f:b8:21:12:75:9c:52:1e:96:62:d9:ca:
2c:44:a5:df:3a:00:82:31:eb:87:bd:47:af:e9:02:ef:e0:b4:
16:0b:17:e8:40:a0:d2:b2:a4:40:d6:3f:10:1f:06:f6:3f:52:
7f:44:63:14:bc:94:04:65:b2:63:1c:22:dd:a3:ab:53:bd:72:
54:5f:c8:df:7d:14:84:88:5b:5f:d4:c3:75:7e:7c:6d:85:01:
bc:2d:7a:5f:6d:da:32:4e:d9:e0:9c:e7:60:a9:58:f7:f1:a6:
2e:c1:5c:0f:3c:ff:68:54:09:f9:f9:e3:56:8c:de:88:14:15:
ad:e1:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:11:46 2025 by rpki-client