Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: ijIQHKMi2pI89mCNMVSDVUb08AgL74eR8YrKvdXdUw0=
Subject key identifier: 73:3D:0F:EB:B9:55:53:0B:C5:8A:EC:7D:6B:B4:DF:E5:79:99:27:6B
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 0196767A84F38DFBF064FE85372C34553115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 09:01:02 +0000
Manifest this update: Sun 27 Apr 2025 09:01:02 +0000
Manifest next update: Mon 28 Apr 2025 09:01:02 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: WnZHWm5C73FMepQEhaQyAy/E4PKduHyXNuS8BcwCN64=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:84:f3:8d:fb:f0:64:fe:85:37:2c:34:55:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Apr 27 09:01:02 2025 GMT
Not After : Apr 28 09:01:02 2025 GMT
Subject: CN=733d0febb955530bc58aec7d6bb4dfe57999276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:b6:af:83:c1:c8:c3:b7:12:b4:ee:fc:58:
89:35:07:98:bc:dc:6c:13:0d:a2:49:86:ef:a6:a5:
8f:88:03:49:4d:1f:4c:58:26:2d:75:94:bf:4a:1b:
ed:0a:7b:d7:e4:2b:e8:45:0b:24:7c:19:b2:08:54:
f9:8f:ca:db:55:8e:b6:b6:24:da:af:f5:78:28:58:
90:18:6f:29:d0:2e:86:eb:55:75:b2:ba:a4:ff:7c:
8c:82:ef:b2:15:51:b4:0d:ce:13:b3:ff:41:c4:c2:
28:2e:7b:2e:cc:fc:8d:e4:be:8e:cc:68:06:97:5c:
d6:45:38:29:13:f0:44:59:9c:e2:91:2b:cf:6f:dc:
31:83:f9:ab:ff:8b:86:95:e6:06:fc:23:95:9c:12:
12:c6:b0:9a:1f:15:fd:08:32:43:26:2c:e9:cc:c9:
17:5b:3d:34:d1:22:d2:b1:8c:ae:04:a4:bc:b6:b1:
4e:df:68:2c:5b:53:7f:76:80:55:dc:96:0c:90:a9:
25:b6:fa:6b:2d:e5:1c:01:9b:41:38:eb:4a:8c:01:
72:cb:f9:00:ee:3e:02:30:e5:c2:5e:f3:7c:a7:28:
ce:8d:ad:6f:8e:04:db:59:01:c4:0f:72:fa:96:5c:
fd:7a:cb:95:b9:16:d6:bc:40:56:60:84:93:21:90:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:0F:EB:B9:55:53:0B:C5:8A:EC:7D:6B:B4:DF:E5:79:99:27:6B
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f3:fb:bc:7f:11:80:97:0c:4a:b2:de:65:ec:79:36:27:e6:
35:b2:5f:0e:1a:80:b5:ec:4b:96:e6:0f:67:d1:47:75:aa:e8:
22:58:58:4b:6f:eb:23:0f:ed:4a:8c:2e:76:38:e3:75:f9:11:
21:12:c3:b7:ff:65:1b:27:0a:cb:73:6f:92:0b:5a:ee:ab:c2:
58:8e:eb:af:39:d8:16:a1:a4:15:f8:24:b9:3a:7c:51:13:9e:
3b:df:42:94:64:42:c5:1c:30:f3:da:40:fa:49:e3:6b:8b:45:
38:4f:4a:4d:09:37:81:4d:45:4a:e7:90:bc:20:a6:49:9e:d6:
36:8d:dc:d8:c0:99:ff:89:f5:64:66:b0:96:44:c7:87:85:51:
2e:1e:9a:77:f0:a3:ab:67:c5:7c:8f:e3:a8:fa:f0:eb:0d:a7:
04:e1:84:5c:e2:39:a0:c9:02:52:f7:71:38:af:f7:1f:02:ce:
6c:2d:6e:62:78:8f:e0:43:f7:3a:92:16:ab:7f:09:e3:1c:fc:
28:45:59:63:14:02:e8:99:dd:2f:2d:78:08:9b:5d:cf:6f:1c:
9c:42:25:ab:0c:e8:32:c5:85:19:0e:d1:c1:7f:c2:82:db:55:
f2:d9:52:b5:b5:5d:c1:f0:6b:db:84:57:ac:f2:2c:9a:32:91:
11:9a:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:48 2025 by rpki-client