Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: jzHVQhKGWZLAqYZ4Av/n4yDTvROSskyGkC2dNgSuCDY=
Subject key identifier: 0A:5B:D0:64:20:B2:08:F0:0C:DB:A5:30:EE:34:34:E4:F6:2F:F0:F3
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019681A239998158EAB47F0FE96966DE1865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 03A8
Signing time: Tue 29 Apr 2025 13:00:14 +0000
Manifest this update: Tue 29 Apr 2025 13:00:14 +0000
Manifest next update: Wed 30 Apr 2025 13:00:14 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: DMRRzdscZOrks9sQdNLyXxTMeJJMnF9mrURpVGcTPu4=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:39:99:81:58:ea:b4:7f:0f:e9:69:66:de:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Apr 29 13:00:14 2025 GMT
Not After : Apr 30 13:00:14 2025 GMT
Subject: CN=0a5bd06420b208f00cdba530ee3434e4f62ff0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:9d:9d:d0:98:11:5c:42:dd:d5:85:59:d5:
63:20:c6:34:44:b7:53:2f:f9:9d:9e:4c:11:cb:35:
90:f1:24:c9:34:af:00:c9:3b:af:7b:3d:7b:42:22:
81:19:b3:0b:07:04:d0:c7:f5:80:21:b4:22:ba:79:
eb:3b:59:ba:c4:a5:7e:9a:5f:1c:4f:bd:33:7b:e7:
a3:b0:b3:bd:06:a5:63:91:fa:b4:76:8c:32:3d:e4:
77:b8:70:52:0f:0c:a9:df:7a:64:58:39:cb:c3:1a:
c3:5f:85:77:89:bf:a4:b7:79:4c:69:ad:8c:bf:fc:
7a:3b:98:1c:02:62:c0:6e:4e:77:8a:57:0d:74:d5:
9f:75:a4:6c:ec:2a:75:73:89:ff:4b:c7:f4:83:ba:
cd:3f:b6:52:d4:ca:aa:72:b8:34:5e:be:f1:bf:f5:
3a:b8:11:f9:7a:08:9c:a0:38:49:b8:c1:8d:ee:b5:
f3:48:d6:b6:aa:21:e8:5b:6c:85:8c:db:06:98:d3:
86:d4:1a:b2:e0:c7:af:4e:e9:69:d3:72:ce:09:51:
e4:4e:b5:bc:14:ad:75:f2:f0:ff:5a:30:4a:4a:af:
2a:75:9f:76:37:5b:13:a0:72:da:10:35:3f:79:8d:
18:12:8d:03:e2:ba:f3:0d:6f:3a:12:6e:7b:75:b9:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:D0:64:20:B2:08:F0:0C:DB:A5:30:EE:34:34:E4:F6:2F:F0:F3
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:56:3a:b2:3b:b3:51:a0:9a:52:bb:ee:e3:bf:41:0d:aa:
23:ab:7a:88:58:61:6d:c9:47:bc:3e:ad:09:ac:57:f0:23:36:
79:47:78:09:9b:fc:e9:22:2d:85:f9:ab:ef:26:87:a4:9e:ca:
f3:9c:af:f0:29:08:16:df:cc:b1:46:90:3a:f2:74:cd:36:ea:
a0:c5:ff:23:a9:a0:89:79:1b:eb:18:8d:b1:ab:6e:75:30:2f:
42:b2:4c:f9:d2:ea:37:81:08:72:7b:5d:e9:5c:28:19:6c:18:
15:0c:e1:b6:08:b8:6a:89:5e:0a:4c:47:8f:0c:5c:58:87:4b:
d2:68:5c:ac:36:b7:57:72:5c:d9:2d:a7:6e:fc:95:5d:fc:1a:
04:96:63:9c:f6:2e:9a:8d:25:bc:31:7b:be:a6:e5:b8:c0:37:
d4:d4:2d:49:6f:78:39:1a:b4:08:0d:99:b1:93:4b:bd:11:89:
81:74:ac:5c:e9:89:35:bb:04:87:15:03:44:db:6f:c2:83:61:
87:ef:d9:8c:91:20:d6:8d:3a:68:05:ec:52:11:b5:e7:f0:b9:
e8:95:58:01:14:55:5e:10:cc:7b:bd:e8:4d:30:49:a8:b5:3d:
68:f0:30:c0:99:76:32:c6:a4:ba:50:34:50:cb:bf:85:d1:7b:
91:af:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:59 2025 by rpki-client