Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: SOzSaZade20DH/9CWfX04Pa/a4F59MNOw9D1TrCuNZg=
Subject key identifier: 00:F2:9A:1F:AB:30:9D:5C:D6:96:3B:82:6C:C6:79:D4:05:FA:7A:00
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 0196846CFB504D099D0C3C88FA810B171C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 036A
Signing time: Wed 30 Apr 2025 02:00:56 +0000
Manifest this update: Wed 30 Apr 2025 02:00:56 +0000
Manifest next update: Thu 01 May 2025 02:00:56 +0000
Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: bivh4A9xuOdeJLwzkYYnnFqT+/Jw+nNdLJQDcJx5B5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:fb:50:4d:09:9d:0c:3c:88:fa:81:0b:17:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Apr 30 02:00:56 2025 GMT
Not After : May 1 02:00:56 2025 GMT
Subject: CN=00f29a1fab309d5cd6963b826cc679d405fa7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:12:41:16:76:85:01:66:c7:30:89:d2:57:
b0:b5:93:12:f8:67:57:53:1c:d6:f4:35:77:86:80:
36:01:12:fb:57:63:c7:d1:17:d6:24:90:32:b8:7d:
7f:d8:d3:30:19:f6:89:3c:2d:7d:4b:e9:94:61:26:
51:ba:53:03:6b:c0:e8:2f:b3:3b:e0:30:96:f3:d1:
48:39:1a:cc:2c:16:7f:55:e9:d7:79:bf:9a:ef:1b:
da:77:cf:48:ee:41:7d:4d:72:66:d4:d8:01:b6:3c:
7d:63:15:fb:f0:3a:f4:74:26:db:92:76:37:3c:52:
8a:30:53:fe:50:75:1c:3e:ba:1f:40:17:bb:fa:e4:
1d:6c:32:4d:87:5b:17:fa:0a:a3:23:86:68:cb:d8:
bd:0f:e3:a5:f5:ae:da:c3:ae:bc:df:df:85:aa:88:
d3:4d:15:05:56:75:0f:c6:01:e4:ab:a3:f9:e0:39:
72:c4:09:1b:1e:e0:c7:fe:fd:6a:23:7c:63:c9:97:
03:e5:9f:bf:52:b5:a6:b5:d7:a4:25:c7:e2:78:34:
e0:ef:ca:09:da:52:66:e8:d0:88:53:8d:f7:f7:6f:
3c:ed:25:dc:4e:9b:da:4c:7f:40:c8:6f:dd:c1:b5:
2d:04:32:9c:81:0d:88:df:b4:60:2d:83:a1:be:fa:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:9A:1F:AB:30:9D:5C:D6:96:3B:82:6C:C6:79:D4:05:FA:7A:00
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:e6:6d:97:c4:23:ba:98:12:4b:c2:6c:53:39:05:e4:40:
72:ef:5c:23:bb:64:0d:4a:b7:d7:c2:b9:ac:fa:dd:8e:72:a2:
51:d8:b6:93:3f:09:03:df:6a:94:60:49:d8:c1:1d:a8:ce:95:
08:57:28:db:a7:72:5a:e0:54:28:fd:eb:1a:7a:35:93:f0:84:
7e:a7:85:a4:35:cd:9e:67:da:6b:83:6b:62:6d:b6:df:e9:9c:
be:92:88:d3:c3:94:36:93:39:20:ac:b6:67:9d:85:b2:6f:13:
8f:67:1e:f9:8c:20:fc:fd:c4:9e:4e:11:aa:4a:4a:57:43:0f:
6c:44:b7:e2:c9:3c:24:13:6c:1c:7f:9c:d5:f3:10:cf:ca:70:
d5:a4:39:75:e2:67:cf:fe:29:6a:3d:06:e4:8f:52:df:6d:38:
66:5c:3e:4a:aa:45:70:c3:3c:c4:d2:56:82:41:2f:27:1f:cf:
c6:42:5a:c6:e0:03:cb:34:fb:4c:b8:8b:7a:77:54:ca:ea:20:
2e:86:38:79:31:ca:b2:22:ac:04:15:78:41:a1:be:4a:b4:17:
01:c4:69:6c:21:d4:73:51:8c:39:68:29:ad:36:33:10:84:ea:
9f:ba:ab:a4:93:a2:03:87:91:f8:00:8e:29:f0:42:a8:b8:72:
d9:e5:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:17 2025 by rpki-client