Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File: egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier: IuWrKPSqysTvEAgYN0JnS8D3Z+cY9463zGTTBLAe1e0=
Subject key identifier: D0:65:85:8F:33:9C:25:B5:2A:47:A7:39:15:43:C8:58:17:4F:53:59
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 01967EA1A49053012A81439F69EC89C960A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number: 1520
Signing time: Mon 28 Apr 2025 23:00:44 +0000
Manifest this update: Mon 28 Apr 2025 23:00:44 +0000
Manifest next update: Tue 29 Apr 2025 23:00:44 +0000
Files and hashes: 1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: qDq4K/cQGdGVBt2fBY2liQQiMIZcflT5HQiEXZypWII=)
4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:a4:90:53:01:2a:81:43:9f:69:ec:89:c9:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Apr 28 23:00:44 2025 GMT
Not After : Apr 29 23:00:44 2025 GMT
Subject: CN=d065858f339c25b52a47a7391543c858174f5359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:18:33:6d:1f:08:60:21:76:a6:ab:89:fe:
68:ff:2e:c7:a2:8b:89:4f:52:36:e9:6d:ca:d7:4c:
de:72:94:3e:30:e4:f0:50:6a:a5:74:fd:33:73:7f:
dd:40:0c:a7:89:fe:a0:3b:c9:f3:1c:5a:62:28:d0:
10:f0:74:b3:f3:00:61:f0:93:8b:11:a7:73:9b:1e:
fd:45:df:b3:8e:64:79:e6:48:68:43:e4:66:cb:c4:
a6:c1:1a:90:db:e8:d7:c3:31:36:ca:47:4c:61:77:
af:0f:db:dc:ec:a6:3d:b7:f7:ad:00:71:bf:bb:02:
8a:46:2b:ec:92:42:01:5d:53:29:18:3a:25:d7:59:
8e:21:18:ea:26:4a:f5:b9:e0:9a:44:4e:f6:87:70:
ac:68:60:06:04:dc:4b:cb:59:8a:5d:48:b7:fe:cc:
22:eb:cf:3f:23:76:c7:a3:1f:3c:df:c1:69:65:98:
72:b8:91:17:f7:0c:4c:b2:67:9e:a9:7c:63:6f:dd:
e6:5f:a2:a2:28:cc:23:1a:65:4d:ab:58:5e:f5:b0:
2e:6e:2b:92:7c:f6:a9:17:d8:09:f4:de:bb:6e:8c:
ca:db:14:79:23:63:f6:de:ac:5e:1d:aa:83:7b:88:
b0:d2:63:cc:24:91:e8:c5:77:ed:f9:73:9f:0e:18:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:85:8F:33:9C:25:B5:2A:47:A7:39:15:43:C8:58:17:4F:53:59
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:c9:51:3a:c9:df:46:98:86:21:c7:b2:a3:ee:c5:f1:69:
41:d9:cf:ca:67:fa:19:19:79:b9:e0:6e:89:e1:7e:c9:46:33:
06:b3:67:07:cc:4e:0f:dc:1a:4d:ad:97:7a:ed:f8:a5:9b:20:
0b:9b:6c:00:57:6b:c9:85:ea:29:f0:5a:f2:1b:e5:ae:f8:61:
35:5c:ae:59:c6:ec:2d:4c:51:62:95:dd:ac:11:8b:a5:67:b5:
d8:d9:40:da:90:30:9a:40:25:8c:bf:c3:60:61:df:ad:dd:64:
e5:ba:25:54:93:a9:b7:17:b8:ef:d9:59:57:ec:b2:76:36:64:
7f:d8:bc:a2:6c:49:2e:4c:89:67:53:81:b5:a6:01:64:43:e3:
61:59:92:bc:70:a4:f0:7f:68:a2:b0:e8:04:a4:7b:bf:0f:30:
76:97:1c:53:c3:9b:81:92:26:df:6c:0d:11:69:f9:ee:2d:6c:
0e:24:07:9f:36:ee:d6:83:a9:fe:f4:6d:21:10:80:a0:ae:c1:
3a:d2:f8:f5:95:2c:03:e0:e0:a7:b6:ca:8a:3f:1e:74:e5:06:
dd:59:39:7d:12:d1:c0:97:38:6a:9b:7e:44:ef:1c:c3:d8:61:
08:d7:4c:f4:93:a8:65:66:8e:fc:b6:4a:9b:d7:ab:2a:c8:47:
cf:e0:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:59 2025 by rpki-client