Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: TwSMh9l8a1nlTIDaLnmx1K9OSJ39ViKhGKNGmNC5lSc=
Subject key identifier: 7E:7C:DD:30:A6:1D:04:27:61:22:C1:45:65:A4:32:EE:04:37:D7:40
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 0196759EB371927E9A1262BF3BE4DABF6720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 05:00:56 +0000
Manifest this update: Sun 27 Apr 2025 05:00:56 +0000
Manifest next update: Mon 28 Apr 2025 05:00:56 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: FJdikCMqEGPk0MEv0I/hoUZs15V4LtGzIDPQrklhf38=)
2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b3:71:92:7e:9a:12:62:bf:3b:e4:da:bf:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Apr 27 05:00:56 2025 GMT
Not After : Apr 28 05:00:56 2025 GMT
Subject: CN=7e7cdd30a61d04276122c14565a432ee0437d740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:7e:fc:a1:32:a3:12:c7:33:0a:6a:cc:78:
a0:f8:fd:07:9d:46:27:d1:bb:38:5e:77:20:a3:29:
5f:ad:77:b9:f6:89:3e:27:08:09:03:18:b8:25:18:
25:76:2a:2e:8b:0f:8d:af:6a:01:7c:92:6d:ea:d1:
56:8e:ae:4d:8b:68:0e:e7:27:92:9e:d9:c9:17:bb:
54:0e:58:d8:8a:1b:97:ae:b0:77:19:ab:e2:c7:5f:
c7:8d:c0:27:4a:8e:b3:2b:5b:7e:eb:18:18:01:40:
15:4e:e3:75:d5:a2:74:b6:28:51:1a:11:21:03:01:
79:f1:03:c6:a8:dd:ff:81:c0:fb:c6:44:87:d5:97:
c3:79:5c:da:14:6d:04:4b:2a:29:ec:62:54:30:ec:
a7:72:a9:43:04:db:18:51:22:0c:16:06:e0:10:18:
0a:75:7e:27:22:2c:d0:58:5b:21:31:a0:18:5b:e0:
11:61:c3:da:11:8b:4c:6a:a4:55:3d:84:46:70:10:
17:14:82:a5:d4:82:1f:3c:29:cd:14:be:71:21:5c:
4e:29:c9:57:02:a8:b9:2f:db:26:46:a5:2c:6d:6a:
42:49:fe:df:fa:bb:29:73:43:1f:28:ad:88:f3:94:
57:25:2b:54:44:05:42:1a:b4:c2:66:d2:36:12:d1:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:DD:30:A6:1D:04:27:61:22:C1:45:65:A4:32:EE:04:37:D7:40
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:98:15:a6:6a:d5:b7:b4:c5:3a:36:97:3b:87:c1:a9:f5:
eb:d2:4d:a9:07:f7:63:77:d4:5b:4b:94:06:8f:96:9b:ab:9a:
a2:6a:c7:cf:58:d0:48:3b:94:7a:a6:32:16:ee:df:e6:68:43:
19:96:2a:e4:8d:26:cc:de:2f:07:8c:33:0c:51:3e:dd:1c:fa:
e3:90:c4:dd:8e:95:c2:12:e4:bf:1c:78:93:f5:78:bb:60:48:
f4:48:51:5d:b4:e0:8d:3b:a1:2d:da:a3:b0:d9:a1:87:b9:92:
36:d3:0d:d8:24:40:e7:51:c9:2b:f9:19:cb:17:cd:09:38:00:
1e:54:3e:41:ca:a2:a6:d3:98:46:2c:a4:9c:f4:f2:20:2c:40:
23:23:20:3c:5b:21:e8:9c:ca:db:ba:fe:2a:05:bd:e7:03:27:
e6:ab:22:91:67:55:ec:3a:32:5c:39:fc:c9:e2:8a:9f:e6:11:
0f:a6:75:29:d1:11:ca:96:34:b6:c6:68:30:d5:c2:c5:e8:eb:
04:a7:72:bd:90:1f:3e:bc:84:51:1e:22:5f:5d:e6:cb:fe:05:
1f:19:63:7a:0f:e8:a1:6c:b8:61:33:d1:c7:15:3b:90:fc:9c:
ec:67:c6:44:ee:17:8c:89:72:fe:b4:f5:23:d8:a7:b1:31:f1:
bd:1e:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:01:26 2025 by rpki-client