Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: ZkpNEBZam09+Rqjbd6+6OCOA2S9jWq/noGD1H0W5Uqk=
Subject key identifier: AE:68:BA:8A:F7:94:D6:79:62:04:66:97:B1:18:E5:C6:79:A1:D5:3B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 0196827E8D773D40BBFE6E40EDAE8924EE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0488
Signing time: Tue 29 Apr 2025 17:00:53 +0000
Manifest this update: Tue 29 Apr 2025 17:00:53 +0000
Manifest next update: Wed 30 Apr 2025 17:00:53 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: 9yoOMEZ4mOlqInBGGnBXvUjRd2Asa99RS+AYJI1DjZE=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:8d:77:3d:40:bb:fe:6e:40:ed:ae:89:24:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Apr 29 17:00:53 2025 GMT
Not After : Apr 30 17:00:53 2025 GMT
Subject: CN=ae68ba8af794d67962046697b118e5c679a1d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:b1:5b:38:e9:d7:dc:7b:2b:87:c3:b6:aa:
36:35:8a:74:a8:9b:20:4b:09:83:da:5d:db:cd:72:
9d:fb:a4:42:fa:7d:3f:00:ef:8b:32:4c:f3:6e:cb:
93:6a:51:e7:88:31:a2:d1:2b:92:2a:99:d5:1b:6c:
b9:d4:cb:45:89:3c:d7:01:59:38:df:97:7f:a1:03:
e5:1d:5f:82:78:26:fd:b9:47:1f:fd:b7:37:e9:1a:
48:80:99:6f:ec:ef:29:81:d8:31:bd:c0:73:e2:f6:
bb:2e:2d:fd:44:95:3c:1a:a4:96:48:4f:1c:06:93:
3f:df:e9:34:60:0d:15:5a:88:8f:6e:0f:4e:f9:e9:
40:4b:99:c9:90:cf:7f:42:9b:5e:c4:ac:c4:1d:9e:
7a:1b:20:fd:d5:13:9c:dc:c4:05:32:b8:28:37:40:
21:a1:e1:77:ac:a2:64:12:19:0c:8a:96:07:8f:e4:
79:ff:be:d1:07:54:d0:04:c3:54:5d:70:e8:4e:13:
03:a8:c1:f3:c4:8f:e0:41:06:5a:4e:42:74:3b:78:
40:7a:f5:d4:ea:16:f9:f7:56:09:56:28:9d:93:89:
9a:f1:3c:ec:3f:3e:a0:2a:f8:dd:6e:68:98:1d:ee:
ab:af:6f:c7:ab:43:e6:1d:6e:6b:fd:03:80:ce:6b:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:BA:8A:F7:94:D6:79:62:04:66:97:B1:18:E5:C6:79:A1:D5:3B
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:e1:7a:97:58:a2:c6:8c:0b:89:1b:ef:5c:b7:83:91:0e:
b0:81:eb:55:38:3d:e9:a3:96:ba:92:e0:d7:f3:13:cf:12:3e:
e8:b4:0b:92:1d:6f:d3:b5:0a:cc:d1:aa:04:46:11:a6:53:d2:
63:f5:66:70:8e:b3:b7:13:99:97:a8:9a:85:d4:45:c1:a1:d3:
da:51:92:1c:34:dc:08:0c:6d:8a:7b:43:10:23:ba:3a:e3:15:
08:81:ca:9a:ab:a1:f6:90:af:4e:5c:ad:55:92:41:cd:3e:fd:
6e:06:72:94:7c:d5:92:9b:c6:96:bb:b7:22:9c:8e:50:3a:89:
c4:a1:5f:b2:fa:e5:47:2c:86:25:9f:fd:f6:1f:b4:85:d6:61:
f9:4f:e8:49:3e:b3:93:5e:c8:fb:13:59:98:00:39:b4:53:39:
4f:3f:38:38:0e:1c:96:0c:31:c1:52:69:ec:4c:19:b6:13:60:
d2:b0:84:17:ba:dd:63:b8:d5:88:e7:fa:0c:66:05:6d:dc:d6:
80:da:47:b4:7b:dc:03:3c:80:b4:00:5f:5e:4b:2b:0b:70:69:
81:d7:e1:63:ef:be:f6:39:f6:ba:72:ec:1c:6e:9b:25:24:d0:
f2:aa:a5:bb:cc:89:48:36:f4:f6:e4:d5:ef:3e:32:4f:92:16:
bd:58:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:50 2025 by rpki-client