Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: NNSn6NRwq/CeejY9VdTmeljd0Xf1jUBDSutRTbkzDPg=
Subject key identifier: E4:3A:D5:6E:82:AB:F3:55:92:6D:6C:FC:A3:17:C1:BC:DC:6B:39:E4
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 019673E6E3A59F4AF4C374A9D8040D456340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0B8E
Signing time: Sat 26 Apr 2025 21:00:33 +0000
Manifest this update: Sat 26 Apr 2025 21:00:33 +0000
Manifest next update: Sun 27 Apr 2025 21:00:33 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: X3EEAbJkRbq4JZrezUBW0zwnZBMmM6QYxwsKJd16L3w=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:e3:a5:9f:4a:f4:c3:74:a9:d8:04:0d:45:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Apr 26 21:00:33 2025 GMT
Not After : Apr 27 21:00:33 2025 GMT
Subject: CN=e43ad56e82abf355926d6cfca317c1bcdc6b39e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:6f:7a:83:39:8f:5e:db:50:86:2d:55:73:
e9:35:a4:fb:93:79:7e:36:2f:8d:4d:25:05:cb:1d:
1c:cb:dc:61:33:b3:33:dc:56:ed:be:3c:f0:03:49:
8b:d7:e4:25:3f:a0:9c:d3:52:b7:06:e2:54:d7:2f:
81:03:25:4c:c7:82:1e:84:96:18:18:05:dd:00:43:
50:78:c4:a4:38:e5:1e:90:f8:38:50:5f:7e:6c:41:
90:1e:a0:01:7a:c1:ce:a6:0f:da:7f:0b:27:84:85:
57:a6:2b:9f:6b:d9:ad:84:26:01:7e:b9:8e:ce:98:
3f:63:54:bd:55:f7:20:7b:0f:e1:34:21:6d:94:ed:
7d:69:f5:36:00:06:87:3d:52:88:de:5a:2a:30:9d:
29:48:f7:31:33:7d:72:5f:4f:16:d5:c8:c8:3d:71:
a5:64:6d:99:2e:f9:8f:6e:13:ef:fa:ca:e4:ed:81:
58:ef:6a:fc:16:87:42:a8:70:66:bd:68:1e:df:6a:
66:2e:ce:04:63:7a:f8:8a:76:f0:45:18:24:c6:8e:
92:8f:88:7f:6a:4d:c0:86:eb:b5:d7:6a:2b:b8:c2:
66:49:7b:48:e9:62:9b:2c:17:b0:c1:5d:3e:c6:de:
16:30:1e:51:a3:9d:40:07:b1:8c:a2:79:0c:b9:ee:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:D5:6E:82:AB:F3:55:92:6D:6C:FC:A3:17:C1:BC:DC:6B:39:E4
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:95:9e:1c:27:f0:b0:25:4b:93:6c:64:84:69:c8:02:1a:
f4:a0:6f:8a:c4:02:64:84:bd:c1:89:8a:b4:8f:c6:23:ff:b9:
11:37:ce:c9:64:a8:05:8a:fb:9a:99:5d:97:e3:c9:c5:c4:85:
9a:40:64:9b:56:86:38:15:d4:64:c1:83:61:42:fc:e6:ac:a7:
e6:31:c7:f4:9b:db:58:82:26:32:58:f3:77:fb:9a:70:04:c2:
01:0c:af:4d:6e:d9:d1:32:3d:a1:6f:fc:45:8b:c1:84:19:c4:
eb:c1:4a:87:bf:ba:5f:75:bf:c4:21:7c:3b:9a:eb:f5:00:f3:
53:a3:65:0d:24:17:29:7f:44:2f:f0:8c:f4:ff:72:ef:5d:96:
40:2f:7a:04:b2:4c:87:37:f2:c3:52:20:d8:6f:79:56:51:c1:
41:ba:7f:3e:74:88:ce:76:41:f0:c4:06:a6:9b:b3:fe:5e:61:
35:61:96:e1:46:e5:80:c9:f5:2f:22:cb:bb:43:fa:3e:eb:a0:
d8:f2:70:dd:f2:66:60:7f:4b:df:72:6b:ce:44:10:d1:a8:e6:
74:60:d5:0e:c1:2f:da:71:a9:2d:f5:ce:90:71:13:c8:d8:ee:
66:f0:e0:8a:66:6c:ba:ff:e5:2c:44:2f:35:f9:ba:ce:91:5f:
91:10:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:04 2025 by rpki-client