Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: H9mL4zN6eLdZJgC9nGgN5HyGoL5Y50QFSuDlXHeVFhQ=
Subject key identifier: 11:97:98:60:4D:21:7C:45:47:40:DE:EC:4D:4E:B3:1D:21:DC:3A:3F
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 01967EA128F937164EC50E0D800F3482FBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0CD4
Signing time: Mon 28 Apr 2025 23:00:13 +0000
Manifest this update: Mon 28 Apr 2025 23:00:13 +0000
Manifest next update: Tue 29 Apr 2025 23:00:13 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: JQKFrLPUBYZBFMZ3FUUkMXZ618uSGjaxW8NhPd+tdNk=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:28:f9:37:16:4e:c5:0e:0d:80:0f:34:82:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Apr 28 23:00:13 2025 GMT
Not After : Apr 29 23:00:13 2025 GMT
Subject: CN=119798604d217c454740deec4d4eb31d21dc3a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:fe:f3:7b:d9:c6:ac:68:a6:92:87:32:dd:
d8:bf:c1:b4:a9:c4:18:fc:a2:ff:33:b9:a4:60:11:
b4:7b:20:af:f6:a0:c9:ea:5b:28:9b:60:d4:fa:cb:
25:55:aa:5f:b0:17:55:b6:c6:19:83:2b:0c:75:56:
d5:da:0e:38:9b:a3:3e:36:96:c0:83:07:d9:cb:9d:
e2:30:e4:4d:f6:ad:5b:36:4c:3d:2e:14:b1:c7:36:
bd:36:cc:9d:ba:16:01:98:33:ec:15:14:20:51:dd:
98:2c:67:49:56:0b:c4:06:08:93:18:81:78:a5:ed:
f5:a4:28:0c:be:b0:df:c8:6f:a5:72:4e:0f:12:46:
ba:fe:61:6e:b4:a3:7c:f6:a0:a3:5a:7b:7e:a3:01:
cd:e0:d6:3d:e2:af:20:68:1a:c3:68:ae:aa:4f:7c:
8c:4c:56:3c:4e:48:bf:f3:6f:25:bb:43:f5:ec:b7:
a3:29:c1:c4:97:ae:66:7d:80:f7:9c:61:fa:31:0e:
d7:c4:e4:a9:b1:29:aa:aa:b7:70:43:ae:62:48:c4:
fa:7a:db:1c:a7:fa:ee:04:71:fc:0f:a7:c9:89:8e:
27:a3:25:97:05:1d:c4:30:6e:e9:87:a0:25:06:34:
0d:8d:d8:1b:84:32:a6:e9:e7:63:f8:d4:af:89:39:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:98:60:4D:21:7C:45:47:40:DE:EC:4D:4E:B3:1D:21:DC:3A:3F
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:86:e0:81:c2:0b:76:e8:9e:ee:cb:4c:d7:d1:c1:16:16:
34:75:a6:3d:98:60:29:7c:46:c9:16:9a:46:2b:ef:e8:af:8a:
dc:ed:ac:9f:ba:6e:3b:67:44:50:4f:2f:4a:69:5a:ee:e7:fe:
b6:c2:34:3e:22:56:94:d8:30:0d:be:33:da:91:70:92:79:e5:
56:35:fe:f3:6a:98:3a:92:15:99:72:4b:07:fb:08:c0:5f:9a:
0c:0c:76:25:3c:9c:71:ea:8f:28:85:f4:57:6a:75:77:cd:de:
59:b0:65:06:bf:79:8d:05:5d:f6:80:d4:75:7b:fe:70:9f:f6:
c7:28:32:5c:fd:d1:ee:dd:42:c6:62:24:03:86:85:c7:5b:a6:
2c:27:c5:c8:23:08:a7:05:d2:8d:2b:f8:34:02:09:f9:73:89:
85:e1:a1:27:7d:9b:76:15:47:db:83:76:a6:ff:5d:40:32:b8:
38:40:11:65:36:4b:60:e4:37:75:5e:ed:f7:8f:be:7e:88:40:
0d:1b:51:9e:fe:74:2d:58:13:2e:a6:d3:d0:96:1a:81:2e:8a:
f3:79:19:29:97:28:35:97:a6:87:72:ac:66:72:bd:fa:6b:4d:
be:66:13:ba:0d:41:c2:86:e6:2d:96:01:03:39:4c:5b:8e:a9:
6b:0e:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:14:19 2025 by rpki-client