Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: iSg7QWL4J0oiEhU6Quqj2siyYldAIrDmHeUFp2rvh6A=
Subject key identifier: 99:28:37:A6:B5:D5:CD:F8:20:6A:22:83:60:CB:BF:A3:02:27:2C:67
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 01967A8DC68BBB776A042E224246FDC9B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 12DB
Signing time: Mon 28 Apr 2025 04:00:33 +0000
Manifest this update: Mon 28 Apr 2025 04:00:33 +0000
Manifest next update: Tue 29 Apr 2025 04:00:33 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: wwzSUIvetAedCxptkhKvuibc3012o9hD4YPtMN9RPW0=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:c6:8b:bb:77:6a:04:2e:22:42:46:fd:c9:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Apr 28 04:00:33 2025 GMT
Not After : Apr 29 04:00:33 2025 GMT
Subject: CN=992837a6b5d5cdf8206a228360cbbfa302272c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:00:b1:45:cb:88:04:de:e1:f2:92:05:ed:
cd:b1:bc:cd:d7:12:db:2b:66:bd:d8:a6:6e:65:ce:
16:b5:33:42:af:6e:46:19:45:a5:64:fc:c2:72:31:
77:e5:14:02:45:d4:ce:15:71:5f:48:d8:be:f6:ae:
55:c0:ff:ea:46:15:4d:20:06:02:92:e8:5f:03:05:
64:b4:2d:d6:57:2a:73:0f:d7:f7:2c:cf:a7:05:c5:
70:0f:5b:68:42:68:31:22:fc:5a:ee:ae:90:c8:86:
b9:5f:ca:d8:cc:b2:53:d9:21:c0:c5:12:90:e1:c0:
30:f2:47:49:65:7b:be:86:f6:d6:19:7c:98:0f:b0:
63:e2:9e:62:c5:84:13:a2:72:1b:98:fb:41:0b:e4:
94:c2:52:60:2f:d6:69:cc:2b:7e:cd:dc:5d:35:84:
40:ea:e9:3c:1a:ab:ee:eb:5b:fd:e5:9b:e9:6a:ac:
e2:8d:13:de:6a:d3:5d:6c:1d:5c:90:81:d7:e1:62:
ca:86:16:17:b0:ed:d7:3e:8d:56:93:98:24:5c:53:
51:50:d4:60:04:84:bd:d7:c3:1c:1c:d4:9b:e4:54:
5f:b6:47:a0:da:9b:28:27:a1:36:6a:3f:e8:68:92:
c4:f2:2c:f8:84:a2:02:0f:98:57:bc:96:94:04:cf:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:37:A6:B5:D5:CD:F8:20:6A:22:83:60:CB:BF:A3:02:27:2C:67
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b3:70:00:94:f8:be:b8:f8:6b:d7:7e:2b:5c:69:b0:54:17:
02:e0:70:70:e2:4d:ae:a9:29:c2:2c:bc:bb:99:3c:35:01:fe:
67:b9:f7:7b:0a:92:38:50:2b:f6:af:a7:0b:45:25:23:5b:6d:
1e:88:9e:b0:1d:7c:dd:52:c1:6f:7a:bc:ec:1f:fc:ba:2d:41:
d0:13:d9:b1:6b:1c:97:15:f3:54:26:a8:26:ee:f3:fd:30:c1:
10:51:95:9c:6a:9f:10:75:fe:c4:76:ca:8c:5b:a6:6a:37:45:
53:13:b6:58:b4:89:57:c4:ab:91:ea:54:6b:b9:f7:0a:64:42:
b6:e7:b7:21:4f:5b:42:9b:e6:94:d9:47:5b:9c:22:c5:5c:d0:
4e:7a:cc:45:2f:78:19:0f:39:f4:d8:08:e2:fd:38:6c:8f:c8:
ca:8d:24:3e:1f:89:4a:32:67:6e:42:56:f0:93:ab:56:65:21:
8a:58:0b:72:34:c1:5e:4e:0b:0c:d5:59:e2:b5:a1:41:95:5a:
e1:a7:a9:e7:fc:d3:64:7a:9a:39:b7:a2:15:4d:c0:14:1e:e3:
47:41:37:bc:93:4c:2c:0a:91:22:a2:6c:04:68:6f:c2:f3:44:
6c:b4:3d:f4:93:20:7a:12:8e:e9:b0:7d:74:c0:0e:e1:eb:7a:
50:04:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:32 2025 by rpki-client