Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: alNBXpIg8AZ01yA13mLOqjlPHgtI7bb3e9ZKNUNm908=
Subject key identifier: 84:C8:21:00:52:29:B2:7B:3A:0E:6B:A5:49:50:BE:6E:58:6A:95:B6
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 0196895BD0F8B9CF809062003CAA08D2EF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 01:00:17 +0000
Manifest this update: Thu 01 May 2025 01:00:17 +0000
Manifest next update: Fri 02 May 2025 01:00:17 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: OgCfBokg0XSNgjksykR6Y3uMaki8zpfVmJj+BrbE2N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:d0:f8:b9:cf:80:90:62:00:3c:aa:08:d2:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: May 1 01:00:17 2025 GMT
Not After : May 2 01:00:17 2025 GMT
Subject: CN=84c821005229b27b3a0e6ba54950be6e586a95b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:35:9d:be:97:fc:e3:3d:fa:1e:7d:d9:3c:
4d:61:d3:95:ed:6e:30:11:51:23:83:bb:f4:3e:7c:
4d:fa:ff:46:3d:b7:a0:0c:68:ec:d7:45:3f:ea:69:
25:6e:1c:2a:df:52:a0:95:6c:d2:cf:47:23:1b:e4:
2f:37:d6:15:09:87:ef:86:d3:a1:de:9b:a5:3c:92:
08:a2:4d:e6:5d:9c:81:4d:8c:8f:ae:8f:07:f3:53:
36:a0:56:c5:1c:d0:c6:99:8d:89:d3:e5:2f:54:1f:
be:19:d3:f7:78:9b:d0:a7:44:b5:e2:3a:58:74:b0:
04:7d:96:5b:4a:03:8c:4f:b6:84:a3:e1:ab:42:b1:
c0:97:1b:f9:6b:fc:07:68:a1:95:05:0e:df:8a:8a:
89:32:45:72:f3:dc:ad:92:14:10:bf:70:78:79:4f:
54:81:d1:56:3f:fb:6f:f3:d0:92:01:11:31:bb:34:
5e:e9:80:b8:d9:ea:f0:51:01:39:4a:64:46:0f:c7:
7e:a2:93:7a:10:aa:c6:c8:51:3a:26:80:36:d4:83:
e1:98:35:43:e9:4b:37:2c:e0:c8:8f:21:b5:46:b7:
9a:af:da:83:9e:4f:a2:b4:a8:27:3e:67:6d:93:8f:
5b:63:f7:94:f7:ee:1f:80:c7:aa:ea:e7:59:1e:2b:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:21:00:52:29:B2:7B:3A:0E:6B:A5:49:50:BE:6E:58:6A:95:B6
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:77:bc:42:8b:89:f2:50:b4:61:f3:45:fa:12:11:e8:90:09:
c2:db:55:3f:a8:74:8e:f5:d7:3f:b8:89:0b:01:f4:59:8f:a6:
c2:8e:24:48:d7:c6:38:61:45:dd:5b:56:97:38:5e:c5:c0:bb:
6b:a7:ae:83:1a:f9:9d:99:56:72:f4:e0:c9:c3:54:c1:e3:92:
4b:ee:91:b5:59:3e:b3:6c:df:72:a6:aa:98:20:51:f1:d9:03:
36:fd:f5:33:1d:0e:a5:41:ea:51:bc:0a:ba:ee:bb:a6:f2:50:
1b:f7:37:1b:44:86:25:7d:c6:07:fd:4a:c1:bb:1e:ab:82:b2:
34:ef:f6:1c:de:ae:a8:d4:2e:af:43:2a:48:e2:d8:37:39:6f:
ac:1c:3b:dd:cd:76:42:c7:89:98:0f:0c:49:66:f7:77:f1:22:
be:a2:21:51:a5:5e:69:40:d9:b2:a6:63:5c:05:a1:f0:62:f8:
d3:cc:58:d4:73:1b:40:da:e6:b2:8b:3f:ee:a7:7c:b1:7a:72:
be:fe:66:c3:f2:a6:a5:4f:31:c4:6f:a6:56:bb:d9:54:45:a0:
2f:73:2b:32:6a:15:b1:92:96:94:f0:65:22:c3:5e:06:6d:74:
3e:19:4e:52:b6:fb:ce:1d:e2:cb:f0:c1:3f:0b:a0:ed:31:f4:
3b:5f:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:26 2025 by rpki-client