Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: fWP37g/9zuoo5Flw8vJ7SKRE0ZLN2aXDJ+bheu39ixU=
Subject key identifier: 4F:AB:01:D1:4B:80:5A:56:B8:AB:D5:1E:91:5D:98:C7:86:6D:41:FD
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 01968511796B9692DDB461B1C5208C1B4D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 05:00:37 +0000
Manifest this update: Wed 30 Apr 2025 05:00:37 +0000
Manifest next update: Thu 01 May 2025 05:00:37 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: HTcRTu/J+KL53/PDUQDHosau/rqU7RT79NKrlA+Su0c=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:79:6b:96:92:dd:b4:61:b1:c5:20:8c:1b:4d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Apr 30 05:00:37 2025 GMT
Not After : May 1 05:00:37 2025 GMT
Subject: CN=4fab01d14b805a56b8abd51e915d98c7866d41fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:2b:5e:35:49:fd:9f:dc:ae:c2:e2:0b:8b:
be:a1:aa:8f:6a:19:42:db:f4:6b:7c:8c:3e:3c:cb:
5d:8a:a1:45:c1:f5:45:2a:e9:09:55:2d:db:05:da:
62:61:ec:70:e0:3a:98:b1:f9:4f:3d:1f:aa:f7:5f:
c4:3e:10:61:a4:77:81:7d:0a:e3:3c:7e:e0:55:a4:
c9:b8:a1:94:6a:c6:0c:09:b0:a1:fa:6a:02:77:af:
51:a9:95:69:74:16:1a:b7:31:f8:04:5c:db:1b:3f:
cd:d8:45:b0:37:66:28:b8:1d:81:35:7b:34:35:88:
52:4f:8b:7e:53:bf:e4:e4:eb:56:bd:76:dc:c9:16:
72:1d:69:43:57:e5:ed:ce:af:63:15:73:cb:f7:25:
3c:a7:1f:7b:74:4e:e4:e1:f6:4d:64:8c:28:3e:9d:
90:7e:6e:ab:92:f3:7a:89:d3:53:d1:21:cc:e1:c1:
da:e8:f9:21:22:74:f7:40:53:4a:a7:e3:a7:16:8d:
d1:fb:d4:4e:ab:39:c9:dc:40:0b:74:da:4c:31:ae:
6a:4a:a9:26:82:bb:97:7a:29:4c:e3:90:5f:df:84:
0a:8b:2e:99:b3:c5:fe:ff:90:40:6f:c2:82:68:01:
20:dc:c3:f8:68:40:2b:9c:f0:c9:a7:4d:50:5c:86:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AB:01:D1:4B:80:5A:56:B8:AB:D5:1E:91:5D:98:C7:86:6D:41:FD
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:fc:52:79:20:d9:25:ad:0c:4a:b7:b8:fe:3b:b8:dc:2b:
a1:6b:0c:99:eb:ec:b7:8e:03:0c:34:59:ef:83:7f:f4:64:98:
16:40:51:79:21:e6:a7:10:02:7b:ed:2a:98:52:04:ad:bc:92:
65:f9:1a:39:23:97:f1:58:e1:c3:67:62:a4:9d:42:24:b1:e5:
05:8a:8e:3e:f1:92:2b:0d:4b:5c:9d:de:88:55:31:2b:19:b1:
fb:6f:76:80:67:ac:18:c0:ac:6d:ef:a4:51:03:67:fa:b0:a7:
e1:2c:3a:c1:e4:7e:2a:22:dc:be:7b:f8:42:60:c9:bc:02:b7:
03:71:92:9f:01:74:d4:67:f0:f7:ea:b2:3f:ea:95:a5:a4:8c:
df:46:89:c8:5e:c2:dc:0f:b5:d7:1d:7a:da:83:53:54:b3:09:
bf:a9:1f:6c:6c:ed:24:6c:8d:9d:52:80:e4:06:d9:38:ae:9c:
94:11:f4:19:c3:1f:54:bf:fc:ee:b0:4b:0f:b3:59:1d:13:0d:
7d:79:5c:ef:4f:7f:f6:c4:90:33:ec:60:17:29:35:cd:af:1d:
16:ea:91:68:01:7f:18:59:2b:41:85:d7:22:1a:b2:d7:2e:3d:
3c:53:92:e2:68:4e:dd:43:44:07:30:b6:95:f9:2a:2a:64:35:
b8:0e:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:52 2025 by rpki-client