Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: nEEXG5D6+NVe/i4KRUzTolPIhhxYDm/T+3rnZHe9ECw=
Subject key identifier: C5:02:D4:30:3E:AE:1A:DD:29:B3:8C:3E:33:B2:09:18:08:80:33:E1
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019686C93C2A39441BCF2F3D3C549C639FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 0D5A
Signing time: Wed 30 Apr 2025 13:00:57 +0000
Manifest this update: Wed 30 Apr 2025 13:00:57 +0000
Manifest next update: Thu 01 May 2025 13:00:57 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: XE3mxb7apTFxWegxN6iuOqzMI08X5NLS2Gtb/ojAbv0=)
2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:3c:2a:39:44:1b:cf:2f:3d:3c:54:9c:63:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Apr 30 13:00:57 2025 GMT
Not After : May 1 13:00:57 2025 GMT
Subject: CN=c502d4303eae1add29b38c3e33b20918088033e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:af:e7:78:25:fa:31:47:40:ea:8b:9b:07:
22:cc:97:82:e4:61:37:f4:57:36:5d:65:69:87:16:
48:27:a3:bf:43:d8:d6:8c:83:a5:a3:e0:2a:6f:02:
84:54:8f:7c:b3:5e:4f:9c:d8:43:2e:3d:4e:00:01:
6d:8e:f9:06:16:38:f4:be:98:a5:65:c9:74:ef:0d:
3f:39:64:4a:f1:c6:b8:d2:f1:32:dd:96:0b:2e:db:
f9:ce:f1:00:b5:b8:28:7a:f8:53:ea:08:4d:09:f8:
02:38:c4:7b:8d:ae:af:51:bd:51:1e:b2:6d:09:05:
48:66:48:d1:b5:44:0d:72:48:0b:7b:d7:d2:50:69:
51:69:6d:2c:4a:50:c3:2b:18:e5:d6:c6:db:d6:d5:
72:41:af:04:6d:f8:44:7c:8d:5d:db:4d:c7:3c:c4:
db:aa:eb:81:b1:dd:26:87:a8:25:9e:aa:77:70:cf:
9c:c7:d9:4a:49:19:f3:94:5d:de:c8:7b:d1:1b:51:
63:32:03:93:fe:46:a5:9f:3b:b8:c4:c5:70:91:d6:
91:c2:e0:8c:ef:4c:66:10:d3:90:e8:51:d3:8a:42:
6b:4e:ac:61:b3:0f:65:b0:58:a8:ea:a8:7f:14:dd:
cf:91:53:e0:f9:a1:87:b7:19:ef:f9:57:47:71:ed:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:D4:30:3E:AE:1A:DD:29:B3:8C:3E:33:B2:09:18:08:80:33:E1
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:1b:19:9b:69:a8:7d:87:2d:e8:88:f2:aa:c5:a9:c2:f7:
9e:d6:ef:16:44:61:06:d7:fa:bb:41:69:c6:04:bb:52:3c:9b:
9e:fd:f8:f8:38:33:af:1d:d8:b3:d2:8d:dd:e3:aa:28:2b:e7:
56:89:59:ad:f1:a5:9f:d1:f5:c9:03:8b:28:61:30:bf:6b:9d:
cb:58:a7:99:76:0c:b0:fb:ee:8e:9c:b2:c9:d7:4a:2b:35:68:
8b:be:69:b3:12:f8:51:75:50:95:25:aa:71:fb:6e:f3:8c:e5:
3f:5e:1c:d1:9b:d8:85:ad:98:9e:b6:e6:3c:a8:f4:66:c9:c8:
e2:69:55:c6:7d:cf:8e:3f:c8:80:86:e2:3e:84:a0:83:88:6d:
2f:de:9c:28:e4:83:95:ba:00:85:ac:b3:20:87:54:3b:3c:be:
6d:0f:31:3f:9f:ea:ea:98:79:26:a4:90:f1:90:5c:9c:21:9f:
af:22:5d:b0:80:a5:0d:c5:61:4b:69:6c:81:41:9f:0d:af:e6:
f9:b5:04:5f:87:ee:e5:6b:84:2d:87:5c:33:4b:6f:02:ea:85:
ee:ee:a7:fb:14:19:ed:a4:af:d9:83:9b:80:81:df:bf:3b:4d:
64:2a:f9:9b:fb:ef:8e:69:9d:9a:c3:1f:ac:5d:16:d1:38:c6:
46:e8:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:36:59 2025 by rpki-client