Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: AWSiw1bMlM7bGnQOsQbEPMlPRdP+53GaoVNzLZWb0Oo=
Subject key identifier: 1B:A6:9F:79:2A:5C:CD:61:31:15:37:20:A3:86:26:13:97:D3:41:BE
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 019675D54BE83015A9C58ED14F1650CA2022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 37
Signing time: Sun 27 Apr 2025 06:00:34 +0000
Manifest this update: Sun 27 Apr 2025 06:00:34 +0000
Manifest next update: Mon 28 Apr 2025 06:00:34 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: LzXy++y26WlMW5oH2Wz/DUKNfAiR+NItsOR5dsFGXU0=)
2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:4b:e8:30:15:a9:c5:8e:d1:4f:16:50:ca:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Apr 27 06:00:34 2025 GMT
Not After : Apr 28 06:00:34 2025 GMT
Subject: CN=1ba69f792a5ccd6131153720a386261397d341be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:15:37:97:2a:28:6b:1c:12:6c:cf:7c:da:
3e:68:e5:ad:f8:16:8f:ba:91:b0:fd:71:aa:7a:50:
36:70:b3:f9:3c:20:7e:5a:39:8d:26:63:b0:aa:88:
f1:b7:a9:44:cf:1c:60:b6:16:74:c5:cf:7c:58:46:
67:05:a7:89:3d:c6:7a:be:93:ca:1e:79:ca:46:94:
3a:cd:c4:0e:e5:c0:4a:97:3c:8e:38:4d:70:57:c9:
27:62:d1:b1:91:13:d0:b9:08:9a:86:a4:a4:6c:a1:
49:34:9c:59:4f:4f:e5:93:c1:d0:bd:8e:00:61:97:
b9:d8:89:84:2c:b2:56:b5:d0:49:21:64:03:37:a8:
b1:b9:42:5a:b4:53:51:d2:de:42:42:f6:31:b7:c2:
43:af:5e:6b:0f:65:96:f8:6a:46:1a:9e:54:96:a1:
84:29:73:08:d3:75:4d:61:6b:1a:f5:3d:67:c0:5b:
5b:2e:1c:67:85:29:90:5f:cd:ef:fb:5f:f4:d8:fe:
35:9e:a2:3e:c3:7c:7e:bf:75:ff:9e:39:7c:5f:10:
9d:7d:d6:2c:32:0f:ca:dc:47:d9:11:2d:8d:26:23:
50:cf:df:20:94:26:7b:27:ec:82:8d:3a:d1:ee:04:
31:1e:fd:3b:a1:c8:ca:93:68:86:65:b9:7c:b1:6e:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:9F:79:2A:5C:CD:61:31:15:37:20:A3:86:26:13:97:D3:41:BE
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:cf:43:9d:f0:de:fe:ab:4e:02:af:3e:a8:9b:9c:22:63:
ab:7f:4e:5e:7c:44:c9:b9:04:e1:91:f9:5f:23:ed:54:5a:00:
bc:07:6f:b2:d2:51:ca:33:0a:25:95:19:4a:ad:60:31:eb:13:
bd:23:c7:ce:28:93:0c:04:74:e0:ce:c0:75:46:04:8c:01:2a:
c4:0c:58:f2:44:23:1c:7a:95:4a:4e:d1:c7:16:d1:0e:72:67:
50:92:cb:66:be:84:5f:8d:53:62:77:2f:8b:db:5f:fd:02:75:
9d:2e:5a:5d:84:c8:22:f3:40:50:71:07:d8:b6:d8:df:fb:ce:
59:d1:65:b1:f8:be:66:8e:42:76:55:e4:0e:21:a0:43:c3:d7:
fe:54:71:bf:79:af:ea:07:84:96:65:1f:5e:23:70:03:a3:51:
f1:73:41:78:2a:c7:0c:1d:7c:4b:57:8f:97:ac:f1:26:a4:e7:
1f:11:b4:a8:94:b3:48:cc:0d:2f:a8:73:ac:33:ab:8f:d0:ea:
93:8e:13:c2:53:c9:eb:7d:6b:05:ff:c1:7e:bd:73:3b:b3:74:
fc:ab:45:be:c6:24:84:81:24:90:66:61:c0:61:44:92:36:59:
7c:f0:a3:25:cb:4d:eb:58:ed:40:cc:80:52:f0:45:57:e8:6b:
b5:c7:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:20 2025 by rpki-client