Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: qgiTrmKIy8stByajvR56HIHtr5IcHE3GIVcpG/zPpwY=
Subject key identifier: F5:73:F1:46:D4:BE:C6:9C:D8:74:F3:FE:87:7E:C4:6D:B4:E0:15:1A
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019676B143D1FECD4FF11D258558ED804B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0781
Signing time: Sun 27 Apr 2025 10:00:50 +0000
Manifest this update: Sun 27 Apr 2025 10:00:50 +0000
Manifest next update: Mon 28 Apr 2025 10:00:50 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: 9ks4RfZ0YRkh/LjxTNLSFg2PQTI+Ntkpdexob3HQTLs=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:43:d1:fe:cd:4f:f1:1d:25:85:58:ed:80:4b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Apr 27 10:00:50 2025 GMT
Not After : Apr 28 10:00:50 2025 GMT
Subject: CN=f573f146d4bec69cd874f3fe877ec46db4e0151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1d:0d:54:98:c7:6e:81:19:dc:b9:0a:f1:23:
db:14:75:a2:69:48:ca:33:43:9a:e1:e8:3f:f0:f0:
49:a1:e7:3f:62:02:48:e3:81:6d:22:60:0d:a3:a7:
47:a6:a1:cc:e3:ea:73:e2:16:15:d7:c1:f9:7b:eb:
77:a1:1e:d1:84:6f:1b:5a:22:1e:06:dd:6c:71:e3:
8c:70:b9:5a:b5:8d:50:55:03:ec:1b:3d:e2:db:31:
37:7d:8b:23:a0:c3:fb:1e:6a:93:b5:97:df:c4:1e:
eb:dc:44:f6:4a:7a:ce:eb:0c:a9:ef:20:06:05:68:
2e:ce:fb:24:bf:7a:1f:bb:8c:eb:9e:fc:48:2c:27:
26:b6:b1:94:b3:ef:5e:7c:67:ae:57:37:2b:2b:af:
5c:d0:71:d7:ff:e1:ae:63:5e:14:fc:4f:0c:fc:3e:
17:ff:39:58:08:f4:7b:75:bb:99:aa:81:95:09:f1:
e9:3f:20:97:ad:2b:1c:36:51:e8:d1:3c:95:bf:6b:
92:d1:26:cb:99:23:cf:6e:0f:a7:71:2a:0a:a9:84:
ad:ef:95:b0:19:25:c2:45:36:04:e9:0d:69:51:9e:
95:e2:0b:d2:7c:1a:00:64:0b:31:74:65:dc:00:f1:
cb:67:c1:b4:a4:8a:2a:4c:9c:04:0f:9d:95:22:70:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:F1:46:D4:BE:C6:9C:D8:74:F3:FE:87:7E:C4:6D:B4:E0:15:1A
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b3:29:63:0f:a6:3b:f4:c8:ce:8b:6e:61:c3:0b:ba:94:d1:
ac:f6:be:50:a6:24:bb:b8:80:f1:fd:e6:1f:04:f9:1b:86:b0:
83:9e:ec:21:0a:7d:e0:75:02:6d:7e:3d:b0:96:23:5c:95:9b:
f6:65:56:b4:10:65:29:64:12:99:bc:77:69:ab:1b:fa:18:ab:
81:cf:98:78:c0:dd:dc:a9:17:a8:82:07:da:c3:f1:80:fb:37:
e5:fc:ff:d7:7c:91:88:d6:ed:ad:c7:c7:7d:41:20:9e:f3:f3:
10:ce:2c:e2:8b:af:8b:25:d3:eb:22:95:f2:ce:f1:8c:cf:98:
15:81:69:01:21:01:8c:c6:47:ce:b0:e1:ad:b2:f2:5d:25:2b:
d9:47:ec:5f:8b:a6:48:ee:e1:1c:4d:54:8d:c1:25:1b:92:6d:
03:e4:c6:08:0a:fb:a3:24:7d:b1:ce:bc:95:bf:a7:77:74:56:
6d:d9:c0:e0:2d:b8:10:43:b6:64:b7:45:af:86:31:f0:ec:d0:
59:97:46:92:b9:6e:f1:a9:71:e9:42:c7:78:8b:f7:e6:67:f5:
d2:9d:8d:05:97:2e:fa:35:94:f0:34:52:9c:fb:f3:5c:aa:cd:
ef:c9:4c:ed:e9:da:5b:98:54:0a:08:3b:d0:53:7c:84:e2:9d:
92:13:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:46 2025 by rpki-client