Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: CIxQbUOktiQMSDBvQ4n3Oy0FBRHM9QEdqA5PJfwAEIw=
Subject key identifier: 16:28:39:77:6D:F9:9B:1F:D8:8F:FC:2E:40:FA:5F:51:C9:C0:86:55
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0196797B5DC872D08FFC0D11F3FEA45A7897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0BD1
Signing time: Sun 27 Apr 2025 23:00:50 +0000
Manifest this update: Sun 27 Apr 2025 23:00:50 +0000
Manifest next update: Mon 28 Apr 2025 23:00:50 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: UuNEFrqtHlhqYFGSqhynn1nC/PMTtvqLDjW11sI00K0=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:5d:c8:72:d0:8f:fc:0d:11:f3:fe:a4:5a:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Apr 27 23:00:50 2025 GMT
Not After : Apr 28 23:00:50 2025 GMT
Subject: CN=162839776df99b1fd88ffc2e40fa5f51c9c08655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:5d:86:f0:ec:16:45:85:a8:a2:36:0a:d4:
59:bf:6f:1c:a9:3f:2c:69:21:c8:0f:99:7d:f2:24:
8e:08:91:7f:0d:8f:31:60:5e:35:64:01:30:d6:7a:
08:ac:e3:f4:f4:97:24:80:8d:d8:23:94:1e:c3:3b:
ea:45:fb:75:7e:e7:b4:16:cd:1b:ff:13:c8:17:42:
79:30:89:42:d5:7b:c0:99:54:43:cc:c8:61:8a:bd:
7e:72:f7:ac:98:f1:c1:da:18:cc:cc:56:53:74:ed:
6a:1f:86:dc:df:f2:58:eb:d4:45:35:b8:9b:e7:23:
bf:4a:96:b2:02:d7:b0:4d:2b:c4:7f:95:80:6a:c4:
42:f6:a1:8e:cd:84:76:bd:f4:f3:33:0a:b4:20:87:
f7:b7:82:45:53:e8:06:f6:f6:55:a7:6c:f8:3f:ef:
4c:25:0e:7f:a1:61:af:a5:61:3b:6e:e3:ec:d0:4d:
64:c0:99:67:a9:68:22:c0:02:88:1b:4f:17:1a:d5:
22:bd:71:4c:15:73:7f:44:4d:99:8a:98:e9:c8:57:
fc:f0:4e:7e:ea:8b:6e:f0:c1:13:66:e5:25:9f:11:
8a:20:1f:50:b6:6a:d5:95:3b:a4:63:63:e6:ba:bd:
67:75:57:df:ff:44:81:3c:ac:c2:93:4d:7f:6d:5e:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:39:77:6D:F9:9B:1F:D8:8F:FC:2E:40:FA:5F:51:C9:C0:86:55
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ed:9b:cd:66:4a:c4:85:d5:9f:d7:1c:60:9a:60:21:92:09:
fa:de:24:3b:20:d0:9e:0f:95:17:88:63:65:10:e7:ba:d7:ce:
87:30:c2:c7:02:e0:e7:d3:38:3e:64:c4:a7:5c:32:4e:2b:4f:
19:e0:d1:23:fb:6d:2c:54:b8:00:13:e5:cb:bc:d4:d1:0f:d9:
5a:d1:b7:4e:5a:6b:a1:69:4c:b3:5a:0a:ab:a1:9d:6e:3e:b0:
3e:5a:80:40:f4:e7:a0:5d:24:26:0a:6f:96:28:06:88:f4:c0:
63:98:f0:0f:69:44:53:41:fd:f8:f4:7d:3f:b2:d8:57:43:82:
e2:8c:0d:e1:7e:b3:ad:60:b5:e7:48:68:87:98:9d:d0:49:18:
80:57:c7:dd:7d:b6:bc:9f:05:8b:bd:25:be:ff:e1:ec:8b:42:
54:d1:11:c8:e3:f0:9a:8e:1d:d3:25:02:11:25:9d:74:e2:02:
fa:ca:3c:53:1d:8f:8c:4f:62:1d:46:b4:f3:1e:40:3e:ca:97:
ce:1b:65:3e:36:6e:b9:88:41:39:23:94:96:9b:08:b3:ff:b9:
f4:54:38:f5:c5:9e:ce:8d:be:f5:99:4f:0b:1e:4c:9c:cf:70:
94:af:da:f8:5f:16:53:65:71:69:5b:50:df:6b:75:aa:d8:bb:
bc:66:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:24 2025 by rpki-client