Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: FZQrBYHnIOOtdLGWbuHdWqiKvzJ6ouavfbwy5Fzc7sc=
Subject key identifier: 78:E3:53:52:11:87:48:D5:F2:CA:73:6C:68:27:D1:AB:86:1C:9C:FE
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 01967FEB2778F7D5CE511D03BD0DA584C9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 11D4
Signing time: Tue 29 Apr 2025 05:00:39 +0000
Manifest this update: Tue 29 Apr 2025 05:00:39 +0000
Manifest next update: Wed 30 Apr 2025 05:00:39 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: LQFkAesJug/3w0EmXmkfnms+E7GBD0O/MxypTw8ImPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:27:78:f7:d5:ce:51:1d:03:bd:0d:a5:84:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Apr 29 05:00:39 2025 GMT
Not After : Apr 30 05:00:39 2025 GMT
Subject: CN=78e35352118748d5f2ca736c6827d1ab861c9cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:f0:8f:37:9c:a0:9a:86:5d:82:f3:49:a5:
7a:94:b7:fb:7f:9a:9c:eb:50:d4:29:ae:67:66:4a:
73:a2:13:6b:dc:e7:fb:b3:8f:f1:60:13:28:3f:ec:
98:f7:29:56:f9:77:27:c9:d9:5c:0a:dd:3d:f4:2e:
93:17:32:62:ad:8d:ff:ba:93:68:4d:47:73:f1:5c:
7d:31:46:bb:1f:c5:20:4c:9c:20:d9:26:a5:4d:6c:
67:ae:ff:66:da:c6:05:59:ef:0f:69:13:31:8b:d7:
7b:e6:28:31:75:35:e1:fb:d7:48:ec:9c:1e:cf:a5:
26:2d:11:7f:12:d2:ee:40:7d:eb:79:52:a2:e6:22:
78:d7:20:08:dd:51:97:c0:bb:81:ff:ef:df:06:4b:
64:c9:4a:2f:15:4e:4f:1a:4a:61:a6:71:47:9a:90:
37:c7:9f:cc:5b:46:8e:46:9f:ea:74:78:23:aa:1d:
c1:d8:a2:dd:58:fc:d8:b7:ba:c2:b5:0e:74:8d:7b:
1e:ec:45:91:88:54:14:32:4e:f1:f0:b2:a0:53:4c:
f5:48:c1:b0:36:43:df:76:88:9c:46:73:23:70:a9:
e8:ed:b1:15:91:bd:80:fb:db:3b:12:86:39:1c:e9:
d6:16:be:d6:49:0e:85:38:5d:93:8d:c7:c5:76:63:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:53:52:11:87:48:D5:F2:CA:73:6C:68:27:D1:AB:86:1C:9C:FE
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:8b:6f:cc:ef:29:92:2a:a3:97:9e:1e:c8:93:0b:40:c9:
41:9c:aa:be:43:39:57:4e:93:b9:33:d5:6a:58:df:94:f5:3a:
af:c5:97:d5:c0:81:8a:1e:7d:35:e4:69:20:8a:cc:a6:3b:f3:
8b:1d:37:71:73:eb:90:fa:90:f0:08:74:da:26:46:52:e5:86:
a1:af:1b:08:58:9f:8d:6d:d5:92:4f:c8:8f:b2:61:af:9b:79:
2c:9f:2e:a0:2e:16:ae:08:75:e8:94:e4:3d:38:96:da:a1:64:
18:ee:de:d5:dd:10:65:42:cc:e7:f4:6b:7a:ce:55:82:11:a5:
a8:0a:06:fa:98:2d:79:b9:c1:5b:ed:43:b2:89:a2:c0:3f:7c:
12:0e:95:c1:31:a1:33:eb:58:bc:e9:74:01:24:4d:7a:1b:b6:
52:c2:7c:46:94:55:61:69:ff:ea:47:be:19:33:1c:77:8f:1e:
92:bc:2c:35:fc:d5:80:b9:69:28:25:88:38:b6:44:a1:35:63:
82:64:ae:49:3d:f4:a0:3e:bd:e1:eb:4c:8b:35:94:49:67:37:
ad:f4:b6:c9:7d:57:22:d6:3a:92:e0:fc:44:45:25:a3:f9:22:
2d:d0:a4:5a:18:ee:f7:9b:01:4e:8a:df:4f:6e:a2:c8:70:e2:
be:93:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:12 2025 by rpki-client