Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: aGvSUM8+eVtBFylcvQ4PgPEKbssj2wNgiENloD2RJNA=
Subject key identifier: 57:57:27:22:5B:A6:E1:DC:4F:66:36:D5:F3:90:C8:CA:4B:37:94:A3
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 01967266414D6BA5030DC86D1E38DAF8A75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 09BC
Signing time: Sat 26 Apr 2025 14:00:25 +0000
Manifest this update: Sat 26 Apr 2025 14:00:25 +0000
Manifest next update: Sun 27 Apr 2025 14:00:25 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: XKkuRB9g36GPevfGlDE3OYng4RaFtDo1ejeGV3FA360=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:41:4d:6b:a5:03:0d:c8:6d:1e:38:da:f8:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Apr 26 14:00:25 2025 GMT
Not After : Apr 27 14:00:25 2025 GMT
Subject: CN=575727225ba6e1dc4f6636d5f390c8ca4b3794a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:e0:cc:31:83:c2:b1:af:80:d8:65:9c:c7:
0c:7d:44:d5:f1:45:83:e5:8e:77:ad:8b:b5:f0:0f:
06:43:3d:74:f7:90:6b:19:4f:f3:a8:c1:15:ed:2f:
f5:65:3c:77:3d:52:3a:2c:83:cc:c4:a5:b1:d9:f6:
e1:22:76:dd:4f:9d:e2:d7:2e:0f:1d:ea:39:68:42:
bb:05:be:5c:d5:16:b6:f0:c6:97:21:00:28:fb:ed:
6d:6a:a8:4b:f9:fc:e7:3a:6a:5e:39:fe:62:f9:79:
22:fb:df:61:10:fe:e4:56:91:27:0d:1b:71:f3:e1:
45:86:f4:74:eb:6d:58:72:c3:52:fd:bb:2d:e0:af:
4a:51:fc:89:0f:fe:a9:22:23:a8:d8:0f:b6:66:47:
6f:49:76:5f:d9:c9:c8:da:4c:6f:e9:14:c7:a7:e3:
b1:9a:cd:a3:e9:5f:40:67:68:17:f5:97:b3:c0:5c:
f6:93:d3:f9:fd:27:a1:d0:a4:0d:44:11:86:d9:96:
0f:53:2f:75:80:a6:92:82:cf:3b:f3:04:13:45:43:
54:74:7b:aa:49:1f:40:18:b1:c5:d1:3a:80:b8:bb:
b6:f9:73:bc:21:0e:5d:47:d1:3e:ce:0f:79:15:34:
e7:52:38:54:12:a2:7a:a3:1a:1f:fc:0a:27:b3:28:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:27:22:5B:A6:E1:DC:4F:66:36:D5:F3:90:C8:CA:4B:37:94:A3
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:ed:e8:8a:d6:41:48:24:20:51:9f:85:5d:a2:43:e5:35:
61:e2:1e:46:f3:aa:bf:29:a3:23:a9:29:af:55:54:4f:22:8e:
8e:71:d5:16:fc:fb:bd:48:2e:b8:31:ab:88:29:5b:b5:bc:55:
c9:3d:a5:df:e3:6d:09:ab:05:8e:74:34:25:8e:c1:de:df:f2:
e1:7c:75:03:e5:ae:79:1d:d0:b6:94:ee:cf:c7:51:2e:a2:fc:
2a:2c:d9:39:f9:61:6c:e2:2c:1e:38:f9:95:a3:c4:aa:df:91:
fc:99:e4:01:70:eb:56:61:93:1e:c7:46:04:07:aa:68:cb:d7:
dc:b6:41:50:f1:ef:1b:1c:33:bc:b7:b2:52:bd:f4:4c:37:8b:
5c:ad:fc:89:cd:5d:3b:9b:2d:f9:04:e5:2e:54:e8:cd:65:ad:
8f:0f:73:11:c2:5f:c2:38:2c:28:37:9c:5c:e8:75:5e:3a:04:
94:48:ff:a4:c5:b1:25:24:d6:fe:fc:88:7d:d5:c0:a1:cf:85:
fd:87:ea:6a:73:a3:0a:99:61:c4:e3:4c:84:0b:3f:97:27:9a:
ed:2a:4d:05:8e:9b:2b:74:af:c7:43:78:6d:e8:de:a0:ba:34:
8a:24:db:88:75:af:d4:8c:b7:a0:68:6c:00:0a:e0:1d:22:bc:
d3:58:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:21 2025 by rpki-client