Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: QZycOUskcnUxzLCvfXNQ20n51jVX1zGjyj5oZvGkigU=
Subject key identifier: F1:07:AE:42:65:89:6D:54:07:1A:BD:9B:32:37:4C:CF:81:5E:E5:D4
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 019684DA7DA49336E8F0B6BC7F22AB13CE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0A6F
Signing time: Wed 30 Apr 2025 04:00:33 +0000
Manifest this update: Wed 30 Apr 2025 04:00:33 +0000
Manifest next update: Thu 01 May 2025 04:00:33 +0000
Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: bkp+jk8GSJSQ6zYq4LO/G1KVmPR1HJzH2MIPEw2bTNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:7d:a4:93:36:e8:f0:b6:bc:7f:22:ab:13:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Apr 30 04:00:33 2025 GMT
Not After : May 1 04:00:33 2025 GMT
Subject: CN=f107ae4265896d54071abd9b32374ccf815ee5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:35:3b:26:f5:25:2c:39:aa:2a:ed:76:f5:
67:b6:7a:0c:be:f6:da:00:7b:2b:46:7c:7d:ad:5e:
62:1c:66:c9:d5:fb:68:21:7d:6d:85:3c:ff:72:4f:
74:85:87:bf:55:ed:28:7a:f6:f9:33:ee:3f:3d:68:
80:8b:36:d6:7f:37:2f:38:51:ed:59:24:7d:f5:15:
d3:6b:74:6a:a5:37:2c:d9:44:f7:47:21:52:06:e2:
10:3d:a1:4e:99:46:6b:be:7d:87:a5:83:34:36:f1:
2f:68:bc:fd:1c:40:d4:e0:b4:12:db:be:01:7d:8e:
a8:f3:dd:00:07:cd:15:8c:3c:ba:50:76:3e:f8:ba:
53:a0:32:36:9b:bb:aa:82:4a:4f:1d:b4:63:2c:3f:
86:84:12:a7:25:56:bb:42:9e:8e:19:b9:c9:2e:81:
e6:1f:66:7d:d2:ca:a7:e4:5b:15:5e:b8:88:3a:c2:
d7:0c:f1:ba:0f:f6:82:55:ef:64:b6:55:d1:e1:39:
d9:f2:c1:fb:b2:07:86:e6:40:1f:a8:d9:fd:55:bc:
33:b6:da:c9:89:fb:35:e3:aa:29:cf:28:77:49:37:
7e:a7:fe:52:2d:64:e1:90:d9:eb:7d:d6:60:0f:ea:
10:7b:51:79:20:2a:d1:5f:78:9e:54:59:02:61:61:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:AE:42:65:89:6D:54:07:1A:BD:9B:32:37:4C:CF:81:5E:E5:D4
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:83:2b:96:ff:36:61:06:4e:e9:61:68:39:91:e9:85:50:b9:
2a:a9:01:0e:b5:99:0a:3b:23:cb:ab:55:b2:ca:23:92:44:f8:
92:cf:37:18:8d:52:23:fa:91:41:4b:45:73:d0:22:05:fb:72:
bd:ed:2b:77:9c:8b:fb:e2:fc:38:81:e4:24:6d:b5:c4:a5:98:
1f:55:33:56:ea:ae:d0:68:4b:b6:42:21:bb:68:40:e5:9c:bd:
21:17:d2:4a:b6:bb:df:39:7b:44:df:e5:05:22:0d:0e:59:cc:
57:39:24:e3:85:6e:24:e9:e7:48:e0:6b:c0:f7:18:3e:f4:f5:
92:3c:f9:52:ac:46:34:70:8d:d8:bb:8c:49:d3:41:89:80:e7:
a9:65:34:86:f8:35:d5:5c:12:f2:2c:56:c9:d4:c4:3f:49:82:
3e:78:67:f0:2b:8e:d0:30:7a:fb:9f:2b:1b:95:ee:88:b0:c2:
0f:02:0f:7d:94:d3:3e:06:8f:ef:90:2b:d2:e9:3f:1b:da:50:
b9:9c:30:22:61:d4:d4:93:bb:c5:33:bc:6a:7a:c7:7c:c6:7a:
f4:84:97:bc:fc:24:c8:88:a2:3e:8c:10:f6:5c:29:60:8c:6a:
41:f7:09:63:1f:6d:b0:0f:97:eb:75:8e:d0:82:36:3c:43:81:
5e:24:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:24:31 2025 by rpki-client