Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: U1Y6Y5OoStQl4doBc0F46RVvet10tUi2Z8WGjjQ0wmg=
Subject key identifier: D3:54:34:87:23:C1:AC:C3:C7:CA:9D:01:26:A4:6D:94:50:55:10:ED
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01968B818573872AC6A8787D6A6581CE2ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 11:00:43 +0000
Manifest this update: Thu 01 May 2025 11:00:43 +0000
Manifest next update: Fri 02 May 2025 11:00:43 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: nWOEwKW1knf19vaN/glzj+XB83pSUdeDYbJrfwDZ8ug=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: jPA51IVoNgHj7WtWvD3gzuO1ESo.roa (hash: 1OIwLVWMLOnuWB49hstWycn0Dp3PUqU3H2e7UthawGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:85:73:87:2a:c6:a8:78:7d:6a:65:81:ce:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: May 1 11:00:43 2025 GMT
Not After : May 2 11:00:43 2025 GMT
Subject: CN=d354348723c1acc3c7ca9d0126a46d94505510ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:10:ad:4b:47:b8:c8:bb:e8:8e:15:b7:25:
f4:a5:d5:dc:3b:f9:03:b8:08:29:03:52:30:86:28:
e5:dc:4d:2f:a7:23:be:af:53:54:6a:ee:6b:3e:95:
31:6f:c9:24:55:70:e1:36:e8:cb:b2:f4:af:72:0c:
99:5b:a5:ec:38:78:ac:9f:cd:55:30:7b:e4:fb:bb:
38:e2:85:6b:ee:05:14:f6:e8:f5:d4:32:d2:d3:ea:
7d:80:bd:9b:42:05:98:1d:7c:7f:25:6b:5e:88:fb:
f5:67:ed:b1:c4:7d:0a:c8:df:47:93:1c:ad:10:d9:
97:98:e0:fa:be:a3:6c:91:6a:7c:8e:b3:f2:84:cb:
4c:af:1d:a4:8a:50:ea:86:a2:f5:6c:33:ee:1e:14:
a9:be:b0:5d:e0:45:6a:85:09:b1:12:9d:d2:11:12:
1f:79:4e:2e:22:10:4c:3d:14:87:13:70:16:70:bd:
8f:69:71:c8:9b:02:da:d4:7a:ca:67:5e:46:08:81:
f1:64:eb:e2:69:e0:82:3b:e7:f2:63:13:3b:e1:0a:
c7:d6:0d:ec:b5:7f:58:84:9d:f0:46:97:5a:c2:b7:
7e:e2:f9:ac:94:09:0a:20:57:2f:f1:60:b9:90:1d:
a0:f5:29:c8:d9:7d:83:39:64:87:31:cc:8a:b0:15:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:34:87:23:C1:AC:C3:C7:CA:9D:01:26:A4:6D:94:50:55:10:ED
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:a8:45:93:97:ca:86:f3:b4:0e:a0:f6:28:70:74:1e:fc:
e4:2a:cb:70:62:d6:e2:27:cf:83:86:38:85:8f:89:a7:a6:4d:
bd:d7:38:21:1b:e1:21:c0:de:8d:7d:f1:41:81:28:86:02:ae:
ea:4f:03:10:8f:92:a4:74:e4:0a:3d:8b:f0:3b:90:97:07:6b:
dd:89:27:bb:22:fb:13:7a:9c:4e:6a:be:a7:9e:37:c5:40:72:
b1:02:04:c3:34:bd:34:ef:b7:a1:7f:08:64:af:68:59:6f:97:
20:19:e6:80:1c:5b:be:73:e2:40:86:87:5e:1a:55:8f:23:19:
8a:81:2a:53:fa:8a:d3:60:a3:f2:0e:3a:3e:9b:5d:ec:fe:6a:
e2:ce:c4:3c:6d:cc:c4:c4:f3:ae:c4:f5:d0:40:d1:45:0d:8a:
5d:f4:79:f7:c3:df:85:43:74:8e:f2:da:25:eb:ea:5e:5d:4a:
1a:8b:7f:f3:d9:cc:15:58:ae:4f:a3:a7:c1:05:1c:1e:7b:48:
9b:c4:22:2d:49:7a:93:39:82:6a:a9:ce:70:8d:3c:d5:3c:c0:
c6:28:e6:72:54:f9:8b:60:d8:b9:87:01:73:b4:72:4b:06:e4:
86:4a:18:7c:d3:5c:db:4f:66:89:36:46:08:7e:7e:7d:11:a9:
f2:02:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:50:48 2025 by rpki-client