Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: wajv+3i8ngTn74UJJ0pNdP/xS1/WC8mIJwivEh9FY0g=
Subject key identifier: 1D:65:14:DD:6A:0B:F7:C4:45:CE:73:D0:65:57:88:80:18:D4:68:B9
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019675D555092E9261D83CD1370FC4FB84BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 56
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: CavyJvqxS1Y0+tr6Yo/nGHIqwCOY6kAnOpNSRFEDav8=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:55:09:2e:92:61:d8:3c:d1:37:0f:c4:fb:84:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=1d6514dd6a0bf7c445ce73d06557888018d468b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:59:75:ea:8b:d5:75:15:72:41:8a:c0:95:
25:92:7a:d8:55:cb:e3:53:76:63:60:ae:e8:9a:b2:
1f:48:2b:ba:50:7c:44:f5:fa:42:2f:ce:8c:47:7b:
08:2e:d2:70:98:2e:8a:3c:b3:59:d8:64:18:7a:be:
12:12:68:8b:81:97:7a:8f:3e:2a:c8:e0:a6:2b:6c:
c8:2a:67:1a:8c:48:59:9f:84:fc:c1:ee:d7:f8:1c:
94:1c:b0:e3:dd:b9:ae:0c:bd:d8:72:b5:8f:8b:07:
3b:34:6b:7e:6e:2b:6d:95:f3:79:c3:c8:75:c8:2c:
89:a5:4d:ee:5c:df:fa:f9:37:17:a4:bd:62:38:00:
eb:fe:9c:2a:e6:45:7a:40:89:d6:97:03:94:c6:cc:
93:8d:c6:49:8a:5a:a2:a7:98:bb:31:43:36:71:33:
e7:ae:ce:10:28:8e:12:3c:75:eb:e9:87:11:02:b9:
b7:e1:aa:7a:99:6c:43:d2:38:c9:db:73:07:b3:a5:
6e:13:0a:f7:9c:c1:07:9b:28:9a:ac:93:9c:7f:e6:
3f:3f:96:5b:61:16:32:e8:d3:36:c7:e7:13:c0:83:
6b:86:e6:41:cb:b3:51:5c:ca:4f:67:68:54:12:fb:
fe:c2:ac:c6:7e:e0:7e:8a:81:ca:52:f6:8c:90:e7:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:14:DD:6A:0B:F7:C4:45:CE:73:D0:65:57:88:80:18:D4:68:B9
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:85:bb:63:e3:60:2d:88:8b:bd:ba:d8:38:21:e6:47:4f:33:
de:4d:11:10:d5:b2:37:7f:9d:e6:cc:52:dd:1f:f7:6f:cd:6c:
1e:43:f6:1e:ed:be:4e:3e:84:93:54:6b:76:f5:82:e1:01:d6:
b7:dd:7a:f6:f8:00:af:16:8c:e8:63:69:e9:e6:23:7c:b6:a4:
0f:37:29:09:51:ef:6e:59:01:27:6f:7f:b3:60:d7:34:9d:91:
c9:8d:9d:a1:69:d3:31:24:c6:3a:7a:c4:85:92:1b:b1:eb:d0:
7c:c6:04:8f:8b:75:42:e0:60:ca:55:ec:21:1c:a0:36:e0:ab:
84:d9:38:06:9c:78:7e:7a:99:ba:92:a6:d8:4f:53:9a:ac:a8:
c6:d6:25:a6:ff:60:f6:37:b0:43:60:a7:db:18:33:7f:33:b6:
c9:35:35:f5:4c:68:7c:11:b4:1d:dc:65:82:b0:26:38:d8:08:
91:a2:a8:04:44:ec:00:ff:76:5c:d5:9c:21:48:4e:c1:c6:d3:
1b:62:b5:ce:bf:69:f7:4f:5c:b3:43:77:72:3e:22:11:09:f6:
7b:25:89:d9:f3:0b:a6:05:8d:01:3e:67:59:44:05:e5:b6:df:
d8:4b:ca:fd:dd:86:43:5d:22:70:9b:ba:12:c2:00:58:bd:d2:
5e:cc:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:08:36 2025 by rpki-client