Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: cNFJixPxrlSbZZ1iO2FNaOim4LkLVok0jLJfBgtpQ2g=
Subject key identifier: D4:EF:28:EE:A7:DC:3A:F1:D8:44:92:3F:9C:1A:D1:38:AB:FE:65:01
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 01967F0F2E619221A9C5FB31AEFA2469CE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 1007
Signing time: Tue 29 Apr 2025 01:00:23 +0000
Manifest this update: Tue 29 Apr 2025 01:00:23 +0000
Manifest next update: Wed 30 Apr 2025 01:00:23 +0000
Files and hashes: 1: MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa (hash: egDRYIAZQALBoXOeweYBGNjd967GtxTo0GiRgWPGusU=)
2: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: kQOR5K7Y9qHev8eDjina3YsKddgA6C08IxrqsPnhDwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:2e:61:92:21:a9:c5:fb:31:ae:fa:24:69:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Apr 29 01:00:23 2025 GMT
Not After : Apr 30 01:00:23 2025 GMT
Subject: CN=d4ef28eea7dc3af1d844923f9c1ad138abfe6501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:51:38:34:af:b7:d0:d0:95:a2:e9:30:50:
74:23:1f:fa:2a:12:aa:1f:f9:19:9b:6e:f9:00:9f:
cf:ef:6a:dd:51:a9:b1:36:a2:c0:15:1d:91:04:ab:
f7:ff:50:97:fd:66:44:79:bc:58:a4:4f:59:22:2c:
07:66:76:bd:0b:ba:37:d7:ea:98:f9:24:44:a5:c9:
e8:27:f8:25:1a:bf:f6:28:44:40:e6:50:5c:dd:22:
0b:1f:05:4e:b7:43:f2:f9:14:6e:12:f9:96:52:de:
38:4e:e4:f6:d8:01:4d:fc:4d:0d:2c:b5:f4:44:c3:
5d:15:38:08:6c:61:87:90:06:38:42:78:70:f1:0f:
cb:0a:9e:53:ad:07:83:18:ad:56:2b:58:7e:4d:16:
17:80:76:02:e9:98:88:1e:77:23:13:08:77:63:f5:
ea:a9:3c:cb:47:26:c8:0f:9d:71:f9:80:74:47:6e:
25:6b:60:f0:bb:ae:cd:56:a2:d9:cf:25:d2:fb:67:
12:c3:1f:f3:a7:cb:6f:32:c7:5c:e2:65:e8:d8:a3:
f9:09:4b:39:37:d9:77:97:5d:c1:97:40:c8:ef:eb:
a5:0e:a1:88:ba:0c:77:09:1e:59:7d:a5:b1:bf:33:
df:34:02:6b:81:78:f0:ab:d7:47:46:e0:7d:14:ad:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:28:EE:A7:DC:3A:F1:D8:44:92:3F:9C:1A:D1:38:AB:FE:65:01
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9d:bc:53:f7:dc:47:d5:f6:6f:f4:68:a3:18:51:1c:9f:9a:
8d:a6:3f:ce:86:2e:05:b3:1c:d8:09:c4:e0:63:9a:79:16:cf:
ce:c1:4c:60:01:8e:66:85:b1:57:ed:8b:7b:38:f7:58:88:8d:
5e:70:8d:5c:93:3c:0f:bb:a3:e2:ee:ca:e9:24:a6:eb:7f:e1:
a6:29:9d:13:4e:36:77:7e:f5:fa:94:7b:84:22:e4:4f:fb:f9:
77:9a:b5:52:4b:8d:e3:07:3d:59:f9:66:2e:11:80:fd:1b:3a:
32:9e:9b:a7:65:9a:4c:34:38:27:cb:a9:a5:fb:54:f8:c7:6a:
a2:8b:8b:2e:37:d6:b8:c6:cc:5c:fe:f9:de:53:3c:c5:9a:4d:
07:c8:d2:28:da:83:b3:ae:8d:21:24:35:f6:27:ca:2b:24:66:
49:b5:47:cb:0a:7a:d1:19:77:7c:77:18:3b:3c:45:6e:05:7e:
8b:7e:06:17:51:a0:8b:7e:40:a0:c7:c0:d9:ad:a1:11:26:67:
84:08:58:36:b4:20:97:5d:6f:b0:8c:44:0b:99:e0:27:6d:15:
af:b1:31:5f:ac:b8:08:e2:e8:ff:2b:ab:df:4d:4d:cf:70:a3:
da:d2:87:88:e8:e4:a4:a1:d6:c0:8c:6a:97:3c:ed:8c:76:7f:
84:84:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:59:52 2025 by rpki-client