Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File: B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier: Jj9h2RXc2MTBgxDoQEzrB39TjECWwTtehspSpfNUYGM=
Subject key identifier: E9:0B:59:A9:98:FF:1E:4B:3B:0C:E8:8E:AF:C6:58:77:ED:43:E0:E6
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 019677C3CFF2A9C5A481E6EE8B3D458EBAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number: 0301
Signing time: Sun 27 Apr 2025 15:00:43 +0000
Manifest this update: Sun 27 Apr 2025 15:00:43 +0000
Manifest next update: Mon 28 Apr 2025 15:00:43 +0000
Files and hashes: 1: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: Gbukf98q+LxZT2ENK1dOmbgZIkX5Sz8OMjqElI/lsro=)
2: BEs4jr5ihG6iRqRU5cUSDL5kRog.roa (hash: cWYPPJkN2Kgx8P4ZXPtPBFDG5DzBZcOtlwsZBu+Q2cQ=)
3: ReM7E0Ct8Is2t6gxw6bBURtAJ3I.roa (hash: PorOfRQoP4oTBL/MW3C7RSgIC8L1gHDvURWlRM6jfmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:cf:f2:a9:c5:a4:81:e6:ee:8b:3d:45:8e:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Apr 27 15:00:43 2025 GMT
Not After : Apr 28 15:00:43 2025 GMT
Subject: CN=e90b59a998ff1e4b3b0ce88eafc65877ed43e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:f7:c6:fc:c4:16:6d:7f:54:23:ba:fb:f6:
59:d4:47:0c:32:e3:ab:da:3d:e6:6c:e9:06:08:e3:
b8:37:19:1c:c5:cb:ea:58:25:7e:56:55:87:92:eb:
05:05:fd:f6:56:62:37:62:78:99:98:62:a6:9d:db:
1b:3a:1f:f6:01:e1:5a:0f:4e:cb:f0:55:71:94:cd:
00:be:1b:00:86:33:d0:fc:38:8d:40:0e:3f:cb:f3:
9b:80:ff:0f:a9:c6:85:2b:ab:61:b4:9a:24:06:e5:
0e:0a:09:e8:2d:96:72:14:f0:2b:fa:99:f0:60:4c:
a0:92:32:6c:ae:b6:01:9a:83:cf:b1:c8:71:b0:d9:
bb:38:e7:95:27:4f:50:b4:01:f8:c3:da:c0:ff:ce:
a2:09:3a:2a:0f:c1:02:a3:3f:3f:50:04:8e:4b:b2:
64:b1:33:5f:84:b9:cd:ea:78:99:fe:4f:ca:76:c0:
6e:35:a6:15:30:e6:3f:40:91:b6:74:33:96:e2:6f:
db:d2:61:2b:d2:87:fb:63:96:e0:99:6d:37:52:62:
72:3e:53:ee:63:dd:6d:5f:15:68:2e:0d:31:42:0e:
f7:2a:81:50:c3:a1:94:58:5c:87:20:65:0c:ab:b9:
1d:2e:1f:ca:df:89:38:1c:ea:0f:d0:ae:f9:5c:71:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:59:A9:98:FF:1E:4B:3B:0C:E8:8E:AF:C6:58:77:ED:43:E0:E6
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:3b:f7:f0:d3:dd:91:81:38:26:3a:55:22:56:90:a6:83:
f6:fe:1a:74:a4:ae:df:cc:9e:a5:79:6f:13:ac:94:2f:ea:7e:
5e:24:4e:58:b2:35:e1:14:b0:7c:dc:92:e8:d2:e8:58:8a:ed:
71:8b:51:04:c4:bc:30:f3:50:b4:f6:5b:1f:13:3a:71:e4:26:
b7:28:81:1a:bb:d4:dc:5a:68:bc:6f:1b:14:df:ef:cf:86:e3:
fc:8f:8c:6b:df:d4:65:b5:cc:b9:cb:8c:96:42:a4:92:6d:66:
4e:fa:79:6a:5e:b5:0e:97:1a:00:51:4b:fa:a1:56:91:ee:2e:
be:54:ff:e7:20:9b:42:8b:2a:1b:1f:ea:0e:be:1c:e9:75:19:
7c:aa:eb:3a:08:e6:da:d5:9d:ac:ee:a7:be:e5:b6:ef:ec:d0:
fc:90:44:5c:06:d4:b7:84:7f:eb:bc:82:05:a7:23:84:39:95:
51:a2:47:73:eb:8a:80:43:33:7d:1b:14:04:28:1e:c0:4c:02:
2c:e3:cc:d4:3d:ac:4f:3d:ad:71:df:b3:ec:a4:c3:f0:fa:7b:
7b:1f:80:f4:0c:d2:c9:0f:29:0d:77:96:ca:93:2a:32:c7:13:
6c:0e:7b:0d:64:39:05:9e:88:d2:48:b1:a8:ae:13:e2:39:a7:
91:ff:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:08 2025 by rpki-client