Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: ygtJD4Zt6RzzCr4EUgyb0Ydy32FmoiZDkUNfK4syE+E=
Subject key identifier: EC:F1:86:24:32:84:73:FD:94:2A:CC:58:C7:80:21:C5:04:FA:F2:95
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 01967869163E51702C2BD22D6A9516DAE47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0853
Signing time: Sun 27 Apr 2025 18:01:14 +0000
Manifest this update: Sun 27 Apr 2025 18:01:14 +0000
Manifest next update: Mon 28 Apr 2025 18:01:14 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: 4KR7RjYE4kQ2Jq9w/3Y8seecprsrZsU1eNOgrSuV86I=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:16:3e:51:70:2c:2b:d2:2d:6a:95:16:da:e4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Apr 27 18:01:14 2025 GMT
Not After : Apr 28 18:01:14 2025 GMT
Subject: CN=ecf18624328473fd942acc58c78021c504faf295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:d9:53:2f:f5:6f:fb:86:b9:79:ff:cf:17:
52:54:ab:73:b8:c5:69:2c:2c:3c:43:38:85:c7:e2:
4b:93:2c:9b:c6:e5:9b:58:15:a9:2c:91:a5:ce:25:
69:3d:1c:31:ae:c7:55:42:87:49:37:ca:e1:da:0d:
42:64:40:12:f2:ca:95:51:90:2d:57:16:f7:e0:68:
2e:b1:21:b0:d9:34:81:00:70:1b:e6:1d:12:b0:0e:
aa:d4:36:fa:fa:f0:74:0e:02:0c:ba:31:c0:7d:ca:
15:7d:31:fd:e4:da:7b:de:44:a2:8d:b4:73:1d:9d:
ff:e1:b9:9d:28:0a:f5:e3:b1:63:06:6d:86:3c:68:
6e:34:cd:5f:74:5b:0d:b6:36:90:ad:a2:63:47:bb:
a0:6b:88:fb:2f:98:85:39:4f:8d:af:b2:b6:50:a7:
77:35:7a:f4:99:9c:97:41:82:8d:af:d0:2d:92:61:
f5:49:35:bb:4f:1f:39:e2:2e:0c:c4:a5:68:9f:e8:
4d:a0:26:3a:92:96:6e:c4:64:9f:e7:73:68:66:70:
aa:c7:67:84:a7:b7:b4:14:f5:d7:07:b2:f2:43:4b:
03:31:1b:e3:7c:38:a1:e6:7d:63:04:00:97:9b:64:
38:0d:e5:7e:8d:61:60:5a:e2:c7:07:4b:b1:35:af:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:86:24:32:84:73:FD:94:2A:CC:58:C7:80:21:C5:04:FA:F2:95
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bc:54:0e:01:69:5b:c1:fb:44:a5:be:00:fe:6b:3a:ce:a1:
7f:80:c9:89:67:8e:5d:1d:f5:82:e5:f7:a8:4e:3b:82:52:25:
31:a4:64:17:a4:20:2a:a8:62:0e:91:68:b0:cb:dd:3b:61:ef:
1d:f1:92:34:23:49:5a:46:93:33:bd:9e:f4:bb:1b:c0:5b:28:
a4:c7:63:d1:08:55:f0:12:8a:3a:a3:e0:7d:e9:1d:16:2c:a8:
da:dc:13:96:2b:5c:15:03:bf:d4:14:30:c7:d3:ae:26:9e:82:
95:2e:5b:a9:21:8d:41:74:f4:0a:d5:9e:3d:0f:d0:54:c0:f6:
b6:7a:b7:ab:5e:05:50:08:22:95:81:83:3f:84:17:c5:8d:89:
48:70:3f:7b:ac:f8:a7:67:7d:77:b1:2f:c1:eb:9e:cb:c8:db:
ed:30:77:5f:47:c5:21:e3:37:65:ba:86:8f:c8:c6:ff:5f:da:
b8:d6:02:e7:fd:0e:27:42:43:02:dd:67:c4:56:2e:32:c8:88:
d4:6d:b8:01:0e:9c:03:da:96:6f:9a:9d:45:a9:b3:b6:88:13:
42:7e:f9:39:b8:0f:c0:3f:e5:b4:af:18:6c:0e:71:02:cf:08:
fc:86:ce:f2:2e:e3:f5:e1:40:a4:1c:77:26:2d:23:2c:c5:23:
4a:55:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:30:51 2025 by rpki-client