Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: iZD8gYdMWpgP6IefxCUYEb1LAyK9W3HBihdhk2gBbaI=
Subject key identifier: CA:DA:6A:B0:7F:5A:08:2E:7A:BA:BD:4C:6D:30:53:3A:C2:E8:27:DD
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01967D5797646BC0AD87B09AF120BD4B85F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 17:00:14 +0000
Manifest this update: Mon 28 Apr 2025 17:00:14 +0000
Manifest next update: Tue 29 Apr 2025 17:00:14 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: gWRYfBBBiTEPBUEn0mDSL7vQGsdk7Gubw4pc7jH+/8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:97:64:6b:c0:ad:87:b0:9a:f1:20:bd:4b:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Apr 28 17:00:14 2025 GMT
Not After : Apr 29 17:00:14 2025 GMT
Subject: CN=cada6ab07f5a082e7ababd4c6d30533ac2e827dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:fb:e0:0c:5b:7e:dd:c1:f5:71:c2:18:14:
b6:ae:d2:72:c8:be:d8:ae:9d:58:83:88:75:13:ea:
ae:4b:27:39:ec:00:5a:29:5d:0e:b1:ac:9f:53:8e:
f8:61:8d:9b:90:ec:14:e7:f0:32:b4:7c:fd:33:a5:
0c:fc:d4:f2:61:5a:8b:ca:e1:4d:36:92:43:5b:e9:
f7:3a:71:ac:36:8d:38:9b:88:70:26:72:c8:d9:9c:
9f:35:8a:af:a1:0f:f6:ae:17:64:97:3c:e4:3f:56:
6c:05:d1:1b:23:00:8f:e0:0e:55:0e:76:a4:19:6a:
1c:f3:84:af:68:f3:a4:4c:e6:75:ed:14:de:ee:bc:
1a:64:3c:29:1a:5a:f2:37:54:a9:60:57:91:ae:b8:
14:2d:b9:5a:97:88:b4:46:68:16:83:16:e1:13:b5:
8b:58:a6:b6:64:07:13:2e:c5:4c:fb:aa:57:4b:af:
d7:6c:e6:3a:51:58:0d:90:e5:cb:51:05:46:01:f2:
3c:cc:88:b8:87:83:ea:d7:5b:58:8a:54:57:7c:5c:
4b:61:2b:f7:35:10:3b:31:9d:ab:a8:06:2a:72:3d:
7b:06:03:5a:ec:66:27:fb:98:70:05:15:72:be:a1:
10:03:2a:db:91:e4:cb:59:e5:66:f0:49:7b:76:1f:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:6A:B0:7F:5A:08:2E:7A:BA:BD:4C:6D:30:53:3A:C2:E8:27:DD
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1e:b5:48:da:f2:fa:9d:3e:ea:15:16:11:92:b5:20:5d:12:
41:82:10:a3:63:9c:6a:9d:f7:ab:c4:3d:0c:94:78:eb:80:2e:
8d:7a:d3:56:9d:12:6b:1f:0f:fe:47:c8:3c:e8:07:99:ed:33:
cc:4b:c8:0a:e0:93:dd:6d:1c:64:84:eb:fc:36:1e:b4:bf:05:
73:7f:fa:c3:dc:47:5d:5f:9b:2d:58:52:c6:85:7e:c8:05:bb:
51:d7:06:a9:4c:a3:f5:2d:08:9e:84:68:d9:0e:a6:e7:43:35:
c9:b3:66:68:b2:df:56:15:bc:15:92:a5:71:fc:a2:72:2c:5a:
d0:3d:72:9e:0a:8b:e3:0d:59:c3:59:1a:dc:07:2a:b6:1e:6f:
88:da:e6:e5:1a:c2:a9:d0:91:b8:fb:a3:a6:c1:4f:fd:3f:67:
99:55:1c:c2:f4:e0:50:03:47:e4:1f:dc:0b:da:8c:f0:d3:91:
b0:cf:92:3a:07:cb:ff:09:b2:85:a0:07:69:75:43:24:e2:1d:
d6:63:1c:08:4f:65:c1:2e:fa:59:02:ac:2e:fa:4a:5d:a2:0b:
7c:51:09:49:bb:19:22:77:84:9f:d8:a9:fd:4c:42:f2:81:8d:
8e:14:da:5b:83:86:c1:be:f1:95:84:23:b8:0a:b3:57:b4:6d:
67:65:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:47:47 2025 by rpki-client