Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: JIYfAJUlwovul3ijv3JTh3LrBweTedyPTvIQNON1uDg=
Subject key identifier: 7D:3D:3D:98:01:93:FF:D4:C8:76:C2:1F:BF:A7:33:B6:CE:FB:4D:C5
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 01967CE9B184DAC0AB6D7F935EDD1D6CC5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0480
Signing time: Mon 28 Apr 2025 15:00:12 +0000
Manifest this update: Mon 28 Apr 2025 15:00:12 +0000
Manifest next update: Tue 29 Apr 2025 15:00:12 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: zuTE/GYKIBtmTMSMxj4likR50nEwKsjVe8J13+XCdgE=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:b1:84:da:c0:ab:6d:7f:93:5e:dd:1d:6c:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Apr 28 15:00:12 2025 GMT
Not After : Apr 29 15:00:12 2025 GMT
Subject: CN=7d3d3d980193ffd4c876c21fbfa733b6cefb4dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:58:df:71:0c:3e:d2:19:8d:cf:09:de:9e:cf:
5d:93:84:0b:3d:55:e8:a6:80:92:21:9f:63:d7:e1:
d6:00:99:cd:d1:2e:ac:21:de:a0:cc:59:f4:2c:08:
02:0b:04:18:69:92:1b:4e:de:d8:25:e2:34:60:fd:
ad:f2:96:6f:3f:7f:c1:58:88:e0:c5:75:96:51:88:
82:b0:b8:c5:a1:bb:fa:37:e7:69:04:6e:93:37:79:
02:d0:e9:3f:45:a3:59:fb:a0:15:f4:ce:bb:aa:fe:
96:a5:28:76:22:10:20:1f:60:3a:f9:b5:e7:27:79:
c3:c4:99:e2:50:ec:64:3a:f5:88:06:56:18:56:1e:
9b:16:38:57:ba:a3:8d:5b:3c:bc:7f:d7:94:96:29:
76:b4:82:3f:5d:2f:a9:f2:a3:e3:c9:05:e9:5a:70:
00:21:c5:f6:7c:42:b2:ae:2b:b2:ad:ef:41:a1:b8:
7f:60:b6:e3:7c:6f:d9:b6:7d:30:2c:eb:f9:2c:cb:
32:d3:5f:c3:74:15:59:6a:3c:90:f3:73:85:2f:cf:
83:cd:b0:2d:09:47:5a:a8:67:77:6b:cd:fc:a6:50:
b1:40:17:7e:70:35:c7:3f:b0:ca:e4:03:9a:ce:31:
24:ba:f5:d4:4a:94:cc:3f:f5:32:8f:88:46:1b:cf:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:3D:98:01:93:FF:D4:C8:76:C2:1F:BF:A7:33:B6:CE:FB:4D:C5
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:38:22:e5:8f:bd:a4:f6:f0:7a:7e:95:e7:90:dd:17:bb:
96:e5:84:a4:5e:90:cf:7f:d7:45:db:14:e1:f3:69:96:8e:31:
62:5d:a0:76:1f:4d:24:3f:0c:e9:0f:55:2d:04:e5:91:cb:4b:
4e:9a:d2:7c:96:e8:d7:60:ee:45:ce:b3:80:1c:45:10:5b:fe:
d7:9a:cc:a2:cd:f6:84:64:3e:5e:9b:63:98:b7:bc:31:d0:c0:
e7:70:c1:96:44:15:8f:6a:f9:0b:6d:0e:0b:94:2d:fb:9e:9e:
61:58:9d:49:2b:e5:43:5d:69:8f:d0:1f:e1:83:30:89:06:d2:
d8:ec:78:73:e7:2a:7a:88:33:ce:5c:cc:f7:43:30:51:24:13:
17:91:15:79:02:ae:09:22:fe:6b:9c:f5:66:62:8e:6f:76:26:
6a:6c:e0:d7:7b:95:ab:de:68:53:0f:f0:bb:f9:30:e4:6b:9f:
d1:6a:68:f5:57:54:04:06:57:c4:ca:2b:72:15:43:3b:e1:1b:
00:cd:43:ad:5b:70:ec:f5:76:5c:a2:ef:73:c8:d0:26:e5:2f:
72:4d:c0:23:20:02:87:89:c5:66:35:53:ba:3b:0f:93:60:ce:
cb:be:1f:e6:b3:9d:dc:13:e7:87:e3:76:9e:6f:48:c6:ad:17:
42:8c:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:34 2025 by rpki-client