Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: 7+G6TlPYe8VhGZjWQQZIiXJWuK8kZx/2YbT+0ShqRQ4=
Subject key identifier: 05:C1:3B:03:8E:25:6F:C9:CA:56:F7:C5:4A:AD:90:59:1C:16:AA:66
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0196771EBE914F25429EBC84F56CF67A084C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0D82
Signing time: Sun 27 Apr 2025 12:00:25 +0000
Manifest this update: Sun 27 Apr 2025 12:00:25 +0000
Manifest next update: Mon 28 Apr 2025 12:00:25 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: QyuP7D1m2G6JodCKWXKPRdG5vM70ucvxuhVDejDmUwk=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:be:91:4f:25:42:9e:bc:84:f5:6c:f6:7a:08:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Apr 27 12:00:25 2025 GMT
Not After : Apr 28 12:00:25 2025 GMT
Subject: CN=05c13b038e256fc9ca56f7c54aad90591c16aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:0c:5c:18:d8:71:6e:0e:70:20:60:d8:fb:
78:10:7c:66:fd:3c:89:11:86:69:f3:ad:ec:b0:66:
6b:95:27:b6:09:5a:86:76:15:55:7f:61:b7:d8:f5:
78:a4:88:7c:14:95:67:0f:a4:ff:a7:0c:2f:cb:9b:
64:0a:36:47:21:09:64:ea:21:3a:16:cc:f0:fd:c7:
4c:08:f3:f8:41:31:0e:4a:6a:6f:52:78:71:ae:40:
ce:6f:b2:98:cc:40:db:51:03:fc:4a:f5:de:7a:cc:
ed:b9:c8:b1:53:29:1a:f9:37:a0:a6:89:65:7a:c1:
2a:6e:e5:cd:a2:97:43:e0:c8:7f:93:ae:01:09:8d:
3f:68:ba:ab:57:f1:63:a7:09:6a:48:7e:80:fe:47:
63:c0:35:a6:62:09:52:c8:e5:9a:db:37:f6:bf:65:
80:04:a8:25:ee:cf:d5:18:39:08:ea:02:71:0b:3c:
6d:24:bf:79:aa:db:f5:07:90:23:36:9c:56:50:a9:
8f:48:17:84:f6:1b:7e:f0:da:a6:2a:55:35:7c:4f:
d8:95:92:66:40:49:2d:77:70:0b:47:3f:9e:92:43:
ef:ab:b3:98:34:20:69:b4:26:77:cb:5e:56:82:55:
55:ae:8e:ee:f1:2f:e6:8f:40:a3:a4:86:62:7f:30:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:3B:03:8E:25:6F:C9:CA:56:F7:C5:4A:AD:90:59:1C:16:AA:66
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3b:65:e6:0e:32:d1:91:cf:28:2b:7d:1c:c6:ed:30:99:a8:
26:e1:16:42:4e:0b:d2:7e:32:ac:56:cc:b7:e0:df:dd:73:e4:
ec:dd:98:6f:0d:41:19:0b:6d:44:ba:40:70:60:f3:ac:9d:d8:
f2:11:ad:0d:4b:ea:dc:d3:17:ac:bf:8b:ef:74:08:21:22:d3:
7a:86:76:30:5c:82:71:3e:32:c3:de:20:0f:b6:5d:4c:71:c3:
88:43:f3:6a:95:31:b3:e4:2e:23:53:89:0c:c4:0e:5a:43:a2:
9e:3e:e8:09:dd:34:af:78:e1:2c:fb:d5:06:8e:15:d8:01:33:
b6:53:d2:4b:7a:c1:47:d7:db:c6:27:27:25:3d:6d:b9:1b:6f:
ee:69:2b:8b:3a:92:09:0e:e9:21:0f:5d:59:8b:c2:0a:7c:58:
04:45:c9:60:b6:16:94:72:1d:48:ac:92:01:30:f1:e5:25:9d:
8e:4f:3c:cd:a2:9d:6b:6a:bc:b9:3c:0f:ed:1e:5a:92:70:e0:
9b:89:52:fa:a9:ba:11:df:0d:be:4a:32:8c:7d:b0:fd:ea:04:
d4:ef:68:68:7c:23:41:9b:0e:33:76:90:5a:c5:5e:c9:89:19:
1e:52:02:96:cd:ee:38:cf:bf:0b:2f:e9:c3:3f:aa:d6:04:0c:
25:b7:ee:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hr6RTyVCnryE9Wz2eghMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4
MjgxZWIwHhcNMjUwNDI3MTIwMDI1WhcNMjUwNDI4MTIwMDI1WjAzMTEwLwYDVQQD
EygwNWMxM2IwMzhlMjU2ZmM5Y2E1NmY3YzU0YWFkOTA1OTFjMTZhYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0kMXBjYcW4OcCBg2Pt4EHxm/TyJ
EYZp863ssGZrlSe2CVqGdhVVf2G32PV4pIh8FJVnD6T/pwwvy5tkCjZHIQlk6iE6
Fszw/cdMCPP4QTEOSmpvUnhxrkDOb7KYzEDbUQP8SvXeesztucixUyka+Tegpoll
esEqbuXNopdD4Mh/k64BCY0/aLqrV/FjpwlqSH6A/kdjwDWmYglSyOWa2zf2v2WA
BKgl7s/VGDkI6gJxCzxtJL95qtv1B5AjNpxWUKmPSBeE9ht+8NqmKlU1fE/YlZJm
QEktd3ALRz+ekkPvq7OYNCBptCZ3y15WglVVro7u8S/mj0CjpIZifzBglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXBOwOOJW/Jylb3xUqtkFkcFqpmMB8GA1UdIwQY
MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt
M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk
LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARztl5g4y
0ZHPKCt9HMbtMJmoJuEWQk4L0n4yrFbMt+Df3XPk7N2Ybw1BGQttRLpAcGDzrJ3Y
8hGtDUvq3NMXrL+L73QIISLTeoZ2MFyCcT4yw94gD7ZdTHHDiEPzapUxs+QuI1OJ
DMQOWkOinj7oCd00r3jhLPvVBo4V2AEztlPSS3rBR9fbxicnJT1tuRtv7mkrizqS
CQ7pIQ9dWYvCCnxYBEXJYLYWlHIdSKySATDx5SWdjk88zaKda2q8uTwP7R5aknDg
m4lS+qm6Ed8NvkoyjH2w/eoE1O9oaHwjQZsOM3aQWsVeyYkZHlICls3uOM+/Cy/p
wz+q1gQMJbfu7w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:08 2025 by rpki-client