Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier: Pf515Yj3865OTU4/lMBJC+BtpJ2i2wxssNw1dDQpyN8=
Subject key identifier: 20:F4:EC:13:34:2F:55:A1:4B:37:29:E0:CE:60:28:88:A0:9A:5A:93
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 019690DE8393113407E0DA84A5605C743188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number: 0413
Signing time: Fri 02 May 2025 12:00:23 +0000
Manifest this update: Fri 02 May 2025 12:00:23 +0000
Manifest next update: Sat 03 May 2025 12:00:23 +0000
Files and hashes: 1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: z+HNg154yksg/wyfNGvEdAmAIipfq1zjhSM2VegjfmA=)
2: JFdpz4qHx_4cniX3BWWOLLPVqtE.roa (hash: p/0kdoGRXrffXN49KkQkmbIDXM/4wVxkOOygBUu78vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:83:93:11:34:07:e0:da:84:a5:60:5c:74:31:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: May 2 12:00:23 2025 GMT
Not After : May 3 12:00:23 2025 GMT
Subject: CN=20f4ec13342f55a14b3729e0ce602888a09a5a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:47:6c:02:51:36:e8:08:09:1a:79:23:d6:
9b:52:1e:cf:08:13:6b:0d:ad:8e:90:84:8f:e0:4b:
7d:bf:5d:f2:f3:a6:79:79:e1:e8:1f:de:f5:4c:95:
c7:fe:09:0f:c4:ea:57:31:d1:ac:81:46:f6:8e:f3:
02:47:57:80:c8:af:74:5c:55:5e:ef:04:d6:30:5e:
04:b9:0a:0d:86:1e:c5:55:4c:43:6b:7a:6a:87:1d:
66:4d:44:f5:f0:64:8d:58:e2:e9:79:7f:3a:ef:3c:
3f:97:06:d9:ec:e6:d6:61:39:6b:5f:3e:4b:13:e5:
3d:88:24:82:2d:73:2f:72:57:e1:3c:35:bc:2d:bb:
3f:d0:e9:07:89:d8:3c:d8:5e:7e:46:66:a7:32:d3:
e3:69:2f:4a:58:75:a8:03:29:32:af:13:e0:18:b7:
5a:1b:8f:c7:22:52:ed:bd:f8:11:40:ee:3d:26:02:
9e:49:20:9f:6c:2d:83:81:7b:d6:8b:d2:4e:60:2d:
5e:07:01:ac:c7:15:dc:fb:d9:e0:81:95:61:fb:a0:
5b:b8:a7:b6:c3:81:67:78:f9:c4:c4:2d:fb:3e:22:
d1:9e:ec:a0:8d:d5:c8:9d:df:fb:36:eb:79:b8:fa:
85:69:10:fc:58:70:01:8a:f6:64:99:65:a3:04:29:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:EC:13:34:2F:55:A1:4B:37:29:E0:CE:60:28:88:A0:9A:5A:93
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:58:9e:0d:20:c1:92:76:d6:1a:20:d7:17:5e:b5:cb:5f:
19:18:b3:5f:50:a1:7c:49:f6:c3:76:d6:ed:e9:4d:f7:70:5d:
a0:bb:20:89:ec:c4:1f:fe:f1:9b:22:a4:fe:17:b0:58:55:c7:
06:8f:bf:86:e9:29:6b:e5:f0:0e:67:42:59:59:73:20:15:4b:
fa:77:e7:0d:49:e0:3f:7e:14:42:4f:06:21:c6:95:c5:98:a4:
88:7e:8e:82:1a:88:f7:ae:87:00:71:0f:5f:5e:d3:a0:d4:32:
0c:72:c8:5b:75:8e:7b:2a:7f:94:98:f6:86:74:41:1a:a6:5b:
da:8e:65:08:02:34:47:26:0c:60:e2:6a:9f:ca:ee:32:d5:ed:
49:8d:8f:76:51:54:57:fa:38:c7:19:b2:c1:87:03:16:76:17:
c2:67:7e:5a:3a:1d:ca:eb:4c:79:34:d7:1d:9e:39:d0:79:69:
85:08:dc:01:ce:dd:8e:e1:a9:cb:65:26:c8:29:a7:ca:e2:19:
ec:49:0d:82:d7:b3:37:6e:dc:be:05:b5:80:7f:c6:4b:72:e6:
29:35:57:d6:54:77:ff:a1:08:db:6b:36:2f:d6:3d:7b:a8:d9:
bc:6a:35:bb:e1:ac:62:cb:35:f0:47:cc:b9:b1:9f:25:16:50:
2b:fe:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:11:42 2025 by rpki-client