Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: J9GPaWEPXC8FqsKv38q2fDP86K3qRT6L7vl3+1+CirQ=
Subject key identifier: DA:81:2E:22:58:09:5E:1D:38:F6:85:68:99:C9:20:42:2A:8D:8B:2A
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 01967B3274C9D62D4D0A2592AE72D517CDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 07:00:25 +0000
Manifest this update: Mon 28 Apr 2025 07:00:25 +0000
Manifest next update: Tue 29 Apr 2025 07:00:25 +0000
Files and hashes: 1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: H9U32aPQD9NeCvN+1Mbs3C41QRqM6MQuA3jJD5sHAoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:74:c9:d6:2d:4d:0a:25:92:ae:72:d5:17:cd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Apr 28 07:00:25 2025 GMT
Not After : Apr 29 07:00:25 2025 GMT
Subject: CN=da812e2258095e1d38f6856899c920422a8d8b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:be:a0:c2:07:22:e4:06:d1:6e:43:c4:33:a0:
0f:ae:30:51:93:12:fa:1f:a1:b8:1a:8c:bd:7e:45:
77:bb:f3:8c:87:ab:b3:b1:95:b8:70:c5:33:4b:37:
fc:12:2a:e3:a7:83:6f:f7:91:74:9b:63:ea:bb:92:
7d:7e:e2:e5:78:ff:a6:e8:32:49:c8:c0:f6:c2:dd:
80:f7:a8:a6:61:90:6b:f0:94:72:c2:b0:a4:9b:3a:
a6:23:6d:b1:3f:c4:5c:d9:6d:18:5e:b7:b3:d1:85:
8a:b9:ab:c8:1d:97:b6:b4:24:60:bf:a4:65:d8:d1:
92:a8:c6:5d:75:2b:a0:b4:95:75:58:53:8d:20:8a:
6c:eb:bd:20:1f:e5:a6:c2:92:e0:92:61:6d:dc:ba:
a6:bb:e9:85:5b:b0:8e:4f:bb:da:0b:8a:37:64:13:
75:d3:01:c0:f7:b3:6a:ea:ba:a7:9b:36:26:ca:a6:
8f:3b:1d:c4:24:1d:c3:a8:da:b7:8b:4c:8c:de:bb:
4b:f9:fc:49:75:7c:f5:ab:24:6d:48:db:a1:1d:48:
33:fa:e9:68:38:19:a8:d9:05:5e:d5:26:d5:95:ca:
df:93:93:fd:1d:f0:37:e1:b1:aa:12:cd:89:0e:9f:
70:70:a2:5b:eb:c1:a0:c2:12:a9:57:fa:42:8b:fc:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:2E:22:58:09:5E:1D:38:F6:85:68:99:C9:20:42:2A:8D:8B:2A
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:02:e5:2c:f6:ee:06:21:12:1b:e6:a5:b6:b6:04:ab:98:
e6:03:72:47:63:e6:4c:c7:52:10:41:0d:14:e9:bc:71:95:d3:
11:68:a4:b0:0d:b1:72:c8:57:0f:31:f5:d6:19:07:5e:f0:b7:
cc:4f:27:2c:f0:cf:55:02:68:36:49:6c:d3:6a:81:c8:d6:d4:
68:02:21:c1:ab:d3:fc:16:7b:7a:a7:fe:bc:9c:8e:36:ff:d7:
7f:74:d9:e9:08:a8:6d:fc:39:56:10:1e:47:18:5d:89:a5:f2:
c9:15:cc:df:61:75:83:da:94:4d:2a:1d:cc:48:3c:11:85:03:
0e:b9:b6:97:29:65:db:7c:7d:51:ed:51:39:b0:a0:da:53:7a:
94:26:7b:20:f1:36:1e:67:5a:d1:cb:29:4a:bf:59:64:37:a6:
66:3d:c1:68:df:33:b6:62:10:c0:3c:e7:22:8d:f9:2e:fc:b8:
11:7a:da:37:b9:d6:29:d6:1b:e1:81:aa:26:65:b5:07:da:c8:
f9:d7:8c:80:de:b0:87:6d:e5:41:4a:8e:9e:ee:d9:29:4e:fc:
de:0f:1c:d2:d6:23:17:e9:cb:20:91:09:d8:29:f1:60:2a:df:
90:15:98:cc:d7:c0:9e:18:1f:bb:98:e8:79:1d:2e:31:6a:85:
ed:1f:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:56:13 2025 by rpki-client