Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier: 48ZHZS13w/e8+/kIAXVdma0Y6fkZgxwJWRfuinBYqzA=
Subject key identifier: 1A:85:1A:50:65:33:AF:94:65:77:9A:32:5C:CB:51:4C:98:12:7D:0F
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 01968736EF1DF7962342FD72447420C919DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number: 0508
Signing time: Wed 30 Apr 2025 15:00:46 +0000
Manifest this update: Wed 30 Apr 2025 15:00:46 +0000
Manifest next update: Thu 01 May 2025 15:00:46 +0000
Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: D05K/lO59x4nkKZ3LF2iUAP2GcENS8YRd08jwhbsP1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:ef:1d:f7:96:23:42:fd:72:44:74:20:c9:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Apr 30 15:00:46 2025 GMT
Not After : May 1 15:00:46 2025 GMT
Subject: CN=1a851a506533af9465779a325ccb514c98127d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c7:f5:d2:27:98:18:0b:06:31:3d:12:fe:1d:
37:a9:37:7c:52:ba:02:37:dc:32:38:2f:04:3e:62:
80:8c:fb:56:11:0d:d3:17:f6:a3:63:49:63:cf:f7:
09:9a:bd:78:81:dd:af:0d:b2:ca:85:35:5f:4a:7a:
4d:1d:5a:29:0e:86:dd:77:58:bf:6e:1b:4f:4f:fa:
4c:91:6a:5f:b3:48:7b:3f:f0:30:1d:e6:be:da:0b:
07:fc:18:4f:43:0b:86:83:22:a0:4c:ee:5a:60:c0:
12:e2:80:d9:2a:2c:09:3b:f5:9e:ce:bd:55:b6:b8:
3f:2a:51:1b:a8:61:bb:86:79:36:5e:3a:7e:d9:1a:
0b:8f:4a:fc:c5:c1:ee:7d:34:00:fe:36:5b:39:98:
b9:5a:33:45:83:b4:10:31:f9:23:9c:33:97:0b:b0:
45:71:6f:06:f3:eb:f1:27:44:97:69:bc:09:ba:1a:
85:cd:a4:20:e1:51:03:07:1a:06:92:3f:6a:6a:8f:
9b:fb:fa:f6:1d:65:31:31:6d:30:cd:3d:89:05:d7:
25:70:9c:11:63:b2:6d:2e:6f:ca:ea:40:46:c9:df:
a6:2f:f0:16:55:a8:04:2d:05:58:9d:ab:17:4d:62:
9b:09:99:47:9d:d2:8c:f3:6e:24:86:e8:82:1a:54:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:85:1A:50:65:33:AF:94:65:77:9A:32:5C:CB:51:4C:98:12:7D:0F
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:59:4b:4b:01:30:c7:49:5e:f6:ff:8b:d2:4a:3e:cc:80:89:
7e:5c:f4:b3:24:27:3a:45:d0:0b:4f:43:b0:21:82:6d:bc:dc:
da:30:fc:d7:31:a2:25:12:23:67:4f:f9:5d:ab:85:d5:d9:0c:
ba:4c:8e:ef:1f:eb:66:6e:6f:79:04:a8:9d:fd:27:1f:30:c5:
dc:81:07:51:df:28:08:eb:32:cd:04:62:95:8d:d6:44:e8:a2:
57:93:93:70:99:f0:da:5d:b5:6b:67:99:32:5c:11:4a:fd:35:
a9:c2:04:fa:de:fc:bb:c3:f9:17:be:c4:46:78:7d:fa:54:ed:
34:11:41:f1:4b:2f:4b:e1:e9:56:b6:3b:61:df:58:06:fa:79:
2e:02:4d:19:49:2b:bc:c3:c5:d4:e7:6d:dd:72:0b:cf:e0:ac:
58:f5:c8:e3:07:4e:7d:07:c5:e9:a0:7a:f5:6a:04:b3:b2:43:
fa:3c:6d:17:9e:2e:92:90:b1:14:3c:38:f6:f1:0a:a8:4d:a2:
1a:c0:73:a7:1a:e7:50:31:f5:51:9b:46:94:bd:78:7c:bf:7b:
07:5e:3a:10:32:0b:bc:49:38:94:ea:ff:0b:92:5d:f8:cf:c6:
a4:c4:55:de:90:f8:bb:c0:fc:a1:cc:ed:92:64:b0:e9:bf:f7:
f5:d2:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:45:01 2025 by rpki-client