Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: 72Dx49qj1tXJ7mKwSlRlVjRHByRlJj8rcdAkRMuFBmg=
Subject key identifier: 43:34:70:C7:FD:E2:61:05:27:19:85:62:A9:1D:15:41:86:15:1C:07
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0196760C423BAD0D1BAB8E73065886B42311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 07:00:36 +0000
Manifest this update: Sun 27 Apr 2025 07:00:36 +0000
Manifest next update: Mon 28 Apr 2025 07:00:36 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: 7tO0WV9fZpy0su0n9x1TrER4xCxDPunuNzsnJ1GQj4s=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:42:3b:ad:0d:1b:ab:8e:73:06:58:86:b4:23:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Apr 27 07:00:36 2025 GMT
Not After : Apr 28 07:00:36 2025 GMT
Subject: CN=433470c7fde2610527198562a91d154186151c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:db:5e:ae:93:93:ad:26:b5:f7:ac:c5:84:
06:e9:ca:89:0b:f5:46:aa:76:18:a6:05:da:71:e2:
5f:03:76:1d:e9:49:f4:49:b3:3e:39:9a:41:62:3c:
6c:1d:24:f7:a7:6b:b1:44:6e:54:45:89:34:22:04:
b8:b0:8a:53:09:8b:ef:75:5e:6b:1e:9c:ac:20:35:
90:12:30:79:7e:ed:ff:2e:64:ca:4c:fe:35:c0:7c:
e1:e9:de:b6:69:5c:ec:4e:cb:bf:24:85:ce:09:d9:
0b:6b:38:b5:4b:e1:9a:26:26:f6:38:ea:88:90:54:
24:c0:41:48:fb:83:be:e0:86:de:33:20:98:c1:e6:
7e:99:35:89:d7:18:72:18:d2:47:8c:49:d2:fa:d0:
ee:31:d0:9b:f4:b0:b5:23:b9:24:5d:37:e2:89:7c:
9a:9c:51:80:bc:cd:74:5e:2e:d3:14:d0:0d:98:d6:
37:87:3d:10:e2:6b:42:73:07:94:c3:60:88:1e:83:
23:9d:1d:89:15:36:14:b9:49:e9:b2:32:36:12:56:
9e:2b:ec:bb:b9:4d:4f:90:4c:53:2c:ba:bf:db:6d:
4a:ed:6f:dd:5a:3a:8a:b9:e5:02:31:be:13:ed:5c:
d7:f2:b1:30:ba:3b:bf:d7:52:12:ae:8e:66:d9:53:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:70:C7:FD:E2:61:05:27:19:85:62:A9:1D:15:41:86:15:1C:07
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:e1:1d:05:9b:56:57:00:a9:61:91:d0:44:44:e2:42:0f:
7d:35:ea:b9:8e:91:63:a7:84:ad:6e:2d:80:56:cb:fd:62:35:
d5:2a:d7:f2:e5:a9:bd:51:b9:08:91:d3:69:aa:10:ef:54:39:
fa:af:28:4f:ea:ac:37:74:5a:03:68:22:27:19:09:d8:e8:ef:
19:a8:ba:87:38:a8:a5:a6:1e:29:ad:74:08:b0:7d:da:0e:4f:
4d:7f:04:cc:4b:21:ad:68:87:2a:77:8e:e6:c3:98:ed:ff:1a:
29:af:04:f4:d8:db:95:9e:9e:80:9a:bb:72:51:37:ed:09:a2:
d2:4c:dc:ca:da:97:ef:ad:61:74:21:f5:19:7d:1a:ac:26:3a:
bc:e2:8d:a9:31:cf:b4:81:25:07:57:71:e3:6a:7b:6e:80:4f:
bd:c5:c1:6c:94:72:ce:26:fe:9b:41:87:36:a2:91:d8:9a:81:
a8:dd:f4:37:62:31:a2:f1:cc:72:d0:e9:f0:fe:2b:3b:b2:16:
95:b3:a9:be:0c:3b:fa:9e:d3:5d:77:8e:5b:f3:d0:6a:68:dc:
3e:c3:03:04:9c:2a:a2:a7:be:a6:18:d8:3f:6e:b9:a5:9e:95:
81:63:47:4e:f1:36:bb:65:16:c0:6f:18:72:f9:d6:c0:74:a6:
d8:5c:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:42 2025 by rpki-client