Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: sIWf4DhtQ8Ui076xrI824Hzf/O1F8v8ZRild6Du/qOI=
Subject key identifier: AA:9B:11:AB:33:90:24:2A:6A:9E:7A:46:1F:FC:5F:4F:80:7D:00:8C
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 01967ED84E731B148DD6D03A980C09E3B633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 14A6
Signing time: Tue 29 Apr 2025 00:00:27 +0000
Manifest this update: Tue 29 Apr 2025 00:00:27 +0000
Manifest next update: Wed 30 Apr 2025 00:00:27 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: 2EwPnhT/sylfUlYdZ/Lff80HQgrmsZoN4GpgO+am+ss=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:4e:73:1b:14:8d:d6:d0:3a:98:0c:09:e3:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Apr 29 00:00:27 2025 GMT
Not After : Apr 30 00:00:27 2025 GMT
Subject: CN=aa9b11ab3390242a6a9e7a461ffc5f4f807d008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:4e:e9:19:90:22:cc:4e:5a:f1:e7:15:08:
9c:a3:a1:12:d6:56:87:cf:6a:da:03:d1:63:22:51:
bc:04:d0:7b:6f:64:87:22:e0:15:e4:8d:dc:ad:ac:
3b:5c:8d:7d:f4:16:9e:ad:83:45:9c:23:fd:5e:59:
f7:83:f6:ce:3f:c3:47:1d:2b:7e:d8:c4:d4:03:a5:
93:55:f5:45:79:e6:cb:aa:95:0a:44:36:7c:c8:db:
fd:b7:04:2c:fd:c3:c7:42:2e:a1:28:6c:ad:99:6d:
d3:0b:9e:6a:f0:13:13:90:c2:0e:4f:3d:c5:1c:ff:
d0:3b:70:4f:61:b4:5c:33:7b:5d:99:1d:a8:d5:3d:
37:30:e6:2e:05:d2:b0:39:65:54:c6:93:ab:39:14:
2e:72:fe:34:06:63:ea:30:ae:ac:87:88:fc:1e:af:
d3:39:75:ea:e1:18:61:de:78:ef:b9:a9:73:58:6f:
0b:44:d7:15:66:d6:51:c0:34:19:59:e2:65:81:63:
e2:25:37:c0:e7:cc:af:e5:24:f3:ed:30:b5:47:38:
d1:a1:e6:97:27:ce:3a:40:9b:b0:2d:5f:77:83:53:
96:52:4d:a3:4d:e4:86:80:ff:07:84:27:86:f2:a3:
fb:b1:b8:c9:c6:da:37:e9:9b:3e:c4:33:96:9a:02:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:11:AB:33:90:24:2A:6A:9E:7A:46:1F:FC:5F:4F:80:7D:00:8C
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:62:98:8c:8c:e8:d0:9b:cd:ff:3a:6b:1f:ca:06:4b:9a:f3:
ba:46:81:b0:09:c2:51:c2:5f:51:65:e9:4c:62:76:ea:eb:4d:
5a:b8:18:79:6c:27:46:a8:c8:c9:07:80:be:d1:3d:27:ec:c7:
ec:bd:9c:d4:f4:c5:80:aa:6e:fc:ea:70:42:25:09:8f:26:06:
34:3f:91:92:ec:1a:55:fb:01:a4:dd:6e:c5:1f:6b:6b:30:2a:
6e:d1:75:09:ff:92:aa:8d:98:40:b4:34:21:bb:2b:7b:72:46:
89:3d:f5:0b:2e:9f:37:f3:73:bf:4e:8a:83:14:be:b0:3e:0d:
f4:c1:de:d7:19:ee:5c:8b:15:81:68:36:7d:43:ff:48:91:4c:
b9:18:e1:2a:c7:6f:39:01:7a:07:3f:7d:cd:b6:40:a2:b6:1f:
fc:b8:4e:d8:4f:12:42:3f:85:3d:d2:2f:bd:f2:ec:2f:54:b2:
8e:66:72:0c:d3:eb:95:cb:d6:d7:e2:18:90:f5:33:b4:d9:56:
bc:00:48:58:8e:ba:f7:60:d6:79:e6:9e:19:e2:c8:5a:d2:66:
d7:3f:dc:52:d4:2b:57:c4:e6:cd:fe:ac:81:c1:f1:83:76:e1:
79:a0:7c:68:33:17:0b:41:39:19:e8:6d:4b:97:c5:cf:3e:be:
c2:8a:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:09:56 2025 by rpki-client