Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: FaUXh0CCxjyTrqlnXuyHX4zJBQOpyWL7mojjIxdTQgU=
Subject key identifier: DD:87:49:32:2C:61:4D:D4:40:DA:18:A1:9F:86:9F:70:E5:4B:48:D0
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 01967CB2ECC4C19887321B31D6BBD77BE6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1253
Signing time: Mon 28 Apr 2025 14:00:22 +0000
Manifest this update: Mon 28 Apr 2025 14:00:22 +0000
Manifest next update: Tue 29 Apr 2025 14:00:22 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: ywL6KO7fx0J0VJi0Jo2s4qPWfiMaHjftgWNbvAcgIN0=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:ec:c4:c1:98:87:32:1b:31:d6:bb:d7:7b:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Apr 28 14:00:22 2025 GMT
Not After : Apr 29 14:00:22 2025 GMT
Subject: CN=dd8749322c614dd440da18a19f869f70e54b48d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:9e:22:99:50:8c:29:31:59:d3:1f:cd:f5:
7d:d8:eb:33:99:b6:53:e4:50:4a:57:55:ea:35:e0:
61:f6:65:33:34:19:0f:86:9e:88:11:1f:48:d9:76:
23:c6:65:e8:d1:cf:b8:9c:0c:23:44:25:42:fe:1b:
90:91:87:28:be:00:63:54:bc:76:7f:45:4d:8f:e2:
0e:ef:08:65:4d:0f:c5:c2:8c:c5:f8:41:28:86:89:
d7:58:ff:37:14:54:45:c6:46:4b:84:65:78:73:e8:
b4:2f:da:d2:f3:ab:2e:91:6e:8d:43:19:1a:5f:c4:
84:38:c2:41:6b:20:e9:25:85:47:51:71:ba:56:45:
a9:46:1c:c8:78:8d:de:12:64:9b:0f:54:7a:29:86:
84:39:8d:57:ec:36:ea:a2:f4:d6:04:62:4c:33:07:
1d:11:72:ee:d6:7b:e1:95:81:34:ca:54:3c:b5:b9:
64:e0:8d:e9:3a:b3:4a:0e:a8:0f:c6:96:28:bf:5b:
c5:27:d8:9e:30:27:58:62:ea:57:48:a1:18:d8:85:
a1:8d:f8:36:4c:cc:0c:26:a8:26:8a:f6:8f:d3:49:
f5:65:2b:6c:15:1a:7f:e6:39:73:cb:75:c6:7e:f8:
79:f3:83:5e:4c:8f:96:e9:00:37:fe:4d:40:3a:87:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:49:32:2C:61:4D:D4:40:DA:18:A1:9F:86:9F:70:E5:4B:48:D0
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:91:41:36:68:77:19:9b:bb:3b:ee:b7:b3:3e:58:45:ae:
c9:f9:4f:dc:86:06:a6:89:bc:1f:9f:bd:05:ef:41:08:fa:12:
20:f6:9b:04:b1:cb:50:fd:76:5d:88:c9:17:54:d5:29:63:4a:
96:b8:8b:99:ce:68:07:3f:9c:95:27:4b:82:78:d1:59:dc:c5:
b8:75:d6:09:2b:d7:34:28:03:44:ee:76:2c:48:79:57:44:12:
ba:c5:85:af:d7:03:ca:4b:c8:14:aa:e9:04:8e:6c:48:5a:96:
10:91:39:e6:8d:d4:08:3a:f1:53:74:3a:ec:45:3c:66:54:23:
fa:af:07:7d:65:86:d6:46:8b:f6:99:ef:b3:67:6e:8d:ac:2d:
d2:85:c5:f8:9c:bb:b8:95:8f:03:d5:1a:39:e1:7e:bf:80:c4:
27:22:3e:27:3e:e9:1c:7b:13:aa:f5:5c:78:09:1f:0d:23:2c:
c3:7e:35:db:4d:84:04:af:d7:9a:62:ba:3c:38:2e:0f:a1:6b:
39:4d:89:87:96:11:0b:91:16:86:4a:84:c6:92:b8:f0:3f:e3:
f6:e7:ad:5b:d1:72:54:58:63:50:0f:f9:26:4e:e6:8d:02:c2:
4c:d6:62:5d:17:42:84:bb:8f:79:45:62:36:e0:bc:5c:a6:19:
0a:6f:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:54:17 2025 by rpki-client