Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: PIwwT9UfL1yybduswxNilQqSyNzRy4tuRyNBWMesms0=
Subject key identifier: 5B:71:93:F3:81:3E:B1:93:93:98:75:8E:94:B3:74:DB:F6:E2:8B:4E
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019659B9B5B7AAB15AA51AF9B7984B6A0115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 19:01:04 +0000
Manifest this update: Mon 21 Apr 2025 19:01:04 +0000
Manifest next update: Tue 22 Apr 2025 19:01:04 +0000
Files and hashes: 1: 0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa (hash: X1Jy4DzINB1nWI37uRDEG9JSOWaqgSKmrsD2P/grQ20=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: 7ZgfrEenDFNUI7H4Cnt33Ew7UJ8HitwPQctXWVqGB1c=)
3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
4: jjt9HI1NN3XupeLRtsqDq6eclfU.roa (hash: 6LBWyMoFnrlnaY8dAxvg8w98D1RRaAabb2BYYMk19Zw=)
5: yahFXL8WchvVvLEEaOs9ROPCOuY.roa (hash: QGTni4yC0/AQyam/WFFScLyUqzuHZrT6aTReWZmwEg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:b5:b7:aa:b1:5a:a5:1a:f9:b7:98:4b:6a:01:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Apr 21 19:01:04 2025 GMT
Not After : Apr 22 19:01:04 2025 GMT
Subject: CN=5b7193f3813eb1939398758e94b374dbf6e28b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:8d:c2:2e:45:83:ef:54:22:ea:a3:6d:7b:
51:2c:3e:52:35:c3:91:f5:c2:d7:59:c4:4e:0d:57:
79:d2:c6:5e:4f:a5:cb:23:74:64:7d:b3:10:f8:6a:
f0:f5:f4:bf:13:12:17:90:76:3c:a7:03:02:14:02:
52:3b:4b:9b:55:cb:db:92:88:1f:1f:7b:5b:fe:c6:
e9:61:62:b4:85:0b:76:38:bd:f1:05:00:01:e4:3d:
74:66:be:1c:a6:e2:6f:47:3f:24:64:19:a7:36:64:
ce:94:f3:b8:be:66:e0:1d:db:f7:99:8e:c2:9b:60:
3e:b3:4e:4b:8a:28:92:96:93:a2:fa:27:2f:35:56:
03:6f:d3:6b:7e:f1:aa:b0:0d:9f:2a:0d:9e:9b:fb:
12:8e:47:4b:a2:24:39:e5:ca:cf:48:89:39:f8:ff:
83:6c:68:23:b0:d4:13:46:da:85:28:cc:50:bb:9c:
bc:79:e0:e6:b3:da:83:e5:9f:48:a0:4b:22:6e:d1:
de:37:12:f0:42:d0:48:df:7a:64:e7:f8:76:a4:cb:
2c:f0:12:65:c3:16:a0:c2:0c:fa:bd:b4:59:15:79:
4e:6a:15:6e:43:85:02:5c:8d:4b:bc:39:b3:96:9b:
8c:e7:b2:79:fc:46:d4:ba:8c:5b:71:7c:6e:62:62:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:93:F3:81:3E:B1:93:93:98:75:8E:94:B3:74:DB:F6:E2:8B:4E
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a4:3d:38:de:b3:7e:b1:4e:c7:95:b1:49:11:72:23:4e:39:
c4:57:ef:9c:0d:3e:3d:b4:52:1c:a3:8e:d5:21:15:8e:97:90:
d8:83:d7:65:0d:9f:f4:3f:89:13:c4:3d:b4:9a:51:c5:ce:b8:
39:e6:2f:8c:8e:0b:66:d1:10:0b:72:c4:6c:78:50:a5:dc:14:
b1:22:ea:83:50:40:65:e1:27:9a:2e:b7:24:69:46:ef:e7:6d:
12:7a:da:7b:4d:6c:5f:e1:52:de:45:f8:05:29:14:cf:bc:0a:
da:c7:20:ec:6d:10:d3:5d:68:3b:5f:9c:c4:f9:8a:a7:8a:dd:
d1:89:9e:e7:ee:35:7c:32:0d:80:35:71:45:2e:34:8d:ff:29:
40:b4:02:56:b4:cb:6a:75:9a:96:a6:fb:b5:60:ed:79:d2:4d:
3e:94:51:f7:61:93:41:7d:61:fb:6b:9f:73:6c:dc:a5:d7:a6:
25:d9:04:0e:b2:81:d8:d2:53:ab:18:ea:be:86:20:be:28:7d:
de:83:3b:dd:a3:53:42:03:91:f7:1c:a1:5d:37:c2:6d:91:1e:
d8:dd:1b:26:57:a2:18:f2:0b:23:89:9c:10:e1:12:0f:3e:3b:
13:f9:c7:79:fd:60:b5:de:01:58:4c:0d:b1:e1:a8:cd:a3:70:
74:e1:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:16:14 2025 by rpki-client