Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: OD+UQfH/DQxlYank9eyd47/95Z5OLwEnVJpV+7Z+hCw=
Subject key identifier: 19:62:14:0C:22:0B:30:11:4D:30:3B:D5:83:50:EC:F9:8B:75:8C:C5
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 019677FBD56D49D5B83D3D4665ADD8674B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:54 +0000
Manifest this update: Sun 27 Apr 2025 16:01:54 +0000
Manifest next update: Mon 28 Apr 2025 16:01:54 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: ZXemnNp7LE8MTgoaoEgLAU9mTCF9jb2pOaKncLGvmyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:d5:6d:49:d5:b8:3d:3d:46:65:ad:d8:67:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Apr 27 16:01:54 2025 GMT
Not After : Apr 28 16:01:54 2025 GMT
Subject: CN=1962140c220b30114d303bd58350ecf98b758cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:70:72:bd:bb:6d:eb:98:5c:1e:54:b0:79:
0d:67:3d:7c:7c:a1:33:06:d9:4c:c7:fe:66:c6:2a:
62:fb:32:7e:7a:05:d9:48:53:c5:0c:17:7c:43:82:
9d:db:3c:f7:52:ca:67:2e:40:60:81:31:b7:8a:f6:
dd:f1:f8:be:aa:da:8f:69:23:52:e3:3d:17:1e:46:
f6:b5:07:06:4a:31:04:a7:70:2a:3f:59:74:4c:45:
77:04:6c:fd:1a:05:50:05:3c:93:53:60:ab:5f:84:
43:3c:a9:9a:93:b4:51:53:80:a3:1a:5b:f6:7b:38:
34:bf:5f:c5:41:96:cd:b2:36:bc:61:6a:dd:e0:df:
08:83:1f:b1:28:7a:e9:70:6d:bb:f8:c4:27:fb:c2:
ef:0b:26:a7:9c:ae:c6:8c:0c:08:c6:90:0d:2f:8c:
bb:7c:b5:7f:99:46:f9:38:95:35:32:fb:cd:cf:9a:
ce:ec:cc:1b:fe:68:37:97:43:31:01:4c:21:a3:10:
f6:d5:89:be:c0:50:48:0a:7f:dc:7c:8c:f3:b1:c3:
43:58:e2:d2:f2:9e:b8:20:4f:88:48:84:ab:46:d8:
9f:c5:7f:9a:34:3a:36:68:4c:0c:1c:75:f1:7b:61:
0e:20:02:cd:ee:a1:d4:8d:07:da:16:e5:3e:e4:76:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:14:0C:22:0B:30:11:4D:30:3B:D5:83:50:EC:F9:8B:75:8C:C5
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:b3:d6:e5:ec:54:26:60:7a:af:d6:ba:d6:ea:ee:5f:6a:
04:9a:10:be:6b:34:56:c5:3f:d1:90:d5:b2:4b:b2:de:31:d7:
63:73:8c:a1:44:8e:23:6f:b5:6e:90:07:c6:0e:d7:62:af:52:
e6:0b:b3:a7:d7:f6:86:01:7c:64:85:f0:0b:d0:94:ce:87:dd:
00:62:92:cb:a5:5e:44:3b:f7:d0:48:2a:6d:65:30:f0:d2:7f:
59:71:5e:d0:cb:fb:7f:79:76:a1:e5:a9:13:28:03:64:56:94:
2d:8e:aa:61:02:17:32:ea:b0:5c:8a:f8:c3:f3:b1:8d:5b:6f:
ee:bf:19:f5:c8:5d:e9:c3:29:2d:85:c4:70:26:58:27:2f:ae:
1b:b0:3b:f5:cb:bd:4d:45:76:89:14:4c:ec:f1:1a:99:6f:f1:
f9:ab:7e:83:6e:46:23:90:28:44:b0:f2:ea:8b:d8:b7:1d:be:
55:3d:6d:e1:2c:58:ed:b6:6b:07:8e:a8:d2:26:c2:71:49:7c:
b9:e1:03:27:48:df:4e:ce:e7:8f:00:87:d0:ff:2b:b3:84:77:
32:b9:47:56:52:6f:c9:c3:ba:6c:37:1f:3b:62:87:fa:8e:32:
c1:9a:ee:59:05:c5:87:e7:23:96:95:cb:fb:70:ac:1a:71:9a:
a9:f5:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:21 2025 by rpki-client