Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: 6xxUYcGKByEcUI2gTgXxeqXb6FVupQ2n9KKNUGU9oIQ=
Subject key identifier: 99:3B:58:34:11:85:49:50:20:CC:A6:68:BC:67:15:F7:70:BA:6F:95
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0197722CE9C7E978225D1B7B10F95747877A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0E04
Signing time: Sun 15 Jun 2025 06:00:35 +0000
Manifest this update: Sun 15 Jun 2025 06:00:35 +0000
Manifest next update: Mon 16 Jun 2025 06:00:35 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: TfPgJKX4S6D57UKx05fs3uzZypAX1GUebJ41EVTWiQQ=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:e9:c7:e9:78:22:5d:1b:7b:10:f9:57:47:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jun 15 06:00:35 2025 GMT
Not After : Jun 16 06:00:35 2025 GMT
Subject: CN=993b58341185495020cca668bc6715f770ba6f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:dd:ba:eb:c1:ab:e0:bb:36:2e:dd:b7:a4:
64:40:f0:4b:f5:81:5a:a7:5b:57:0f:59:6f:c8:0e:
20:f4:9a:0e:cc:61:f1:6a:04:73:8f:84:76:d1:32:
e9:91:31:74:14:b0:5c:33:64:0c:f8:c3:4a:fb:12:
70:01:d9:20:eb:82:41:0e:61:75:d6:13:45:f3:b9:
0f:4c:7a:08:2c:d1:c2:23:0b:fb:8d:c9:ab:88:9f:
97:4c:5c:38:23:a4:ab:fd:59:14:36:56:de:e3:1c:
cb:4c:0f:61:d6:b1:32:81:6a:ed:33:b3:fc:36:62:
e8:55:9a:07:23:30:0b:91:18:b7:29:75:b0:3e:c1:
a7:e4:c9:c3:48:9d:a7:25:46:fd:a9:e3:7c:c5:1b:
d4:1e:59:49:8d:9b:5f:16:89:7a:56:a5:74:b3:ae:
43:2b:24:57:ad:07:96:e0:2d:dd:fe:19:f3:86:7f:
7c:c8:de:4b:d1:77:5b:ca:8a:9b:e0:a7:7f:29:cb:
e6:a5:ee:3a:b9:ef:3d:6f:1a:a7:73:5b:8a:da:ec:
84:53:ae:c6:4c:bc:8d:1a:32:75:a6:96:c7:36:10:
4d:62:bb:c2:2e:2e:d0:ca:ca:67:c0:fa:e5:c4:de:
64:f0:53:b5:d5:f7:44:49:3c:4e:93:2d:53:d4:e7:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:58:34:11:85:49:50:20:CC:A6:68:BC:67:15:F7:70:BA:6F:95
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1f:1c:4c:56:bc:93:ab:42:d3:4d:51:75:d0:a4:ac:85:2c:
44:cf:19:82:94:29:93:dd:2c:f3:64:27:04:c8:55:22:80:26:
b6:e3:9a:91:ba:80:35:b0:6c:ce:3e:3e:11:aa:3f:21:0b:f8:
00:5c:e3:0e:65:57:5b:e0:d5:35:f2:25:50:a1:57:fd:e1:ed:
b3:d9:f9:c1:f9:57:20:c1:f6:f5:60:07:5c:48:88:d7:b1:3c:
d9:60:29:e8:3c:c9:32:40:3d:20:7e:ac:b9:a9:83:d3:b6:06:
99:29:1a:5d:55:25:38:9c:38:e9:12:8b:ca:8a:c3:65:5e:c2:
67:57:2e:da:d3:53:9c:69:3a:24:75:cc:01:60:16:22:a5:d0:
c7:12:03:18:71:aa:7b:81:46:6b:69:31:fd:82:11:d3:0e:ff:
0a:b3:59:71:a8:25:34:91:e1:78:50:c2:1d:7a:64:89:e4:20:
ce:0d:fb:39:72:f5:c8:38:69:c7:89:a2:99:24:a9:5f:c7:f0:
d4:2a:d0:bd:0d:21:87:a2:22:cd:58:cf:05:21:ac:10:4c:2d:
69:58:17:0f:5e:9d:0a:c3:16:b1:bf:c8:be:2b:5e:cb:58:89:
e1:84:92:de:52:54:24:83:f0:13:98:51:51:9a:44:de:c4:b5:
ec:14:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:18 2025 by rpki-client