Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier: 4UAftlq1wzZOHqijg9AbjAGcv7O2WjEquvgwmv492zw=
Subject key identifier: 78:79:D4:3D:9F:83:CE:FD:4E:08:AF:27:BA:3B:BC:7D:B7:55:D2:72
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 01965A26D0F8163C342F05FDA7F2F5C48B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 21:00:15 +0000
Manifest this update: Mon 21 Apr 2025 21:00:15 +0000
Manifest next update: Tue 22 Apr 2025 21:00:15 +0000
Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: 6pG7dnSe1+HyTAi+qcVeV7CvwMigm5cDIFX5WGU8FGY=)
2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:d0:f8:16:3c:34:2f:05:fd:a7:f2:f5:c4:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Apr 21 21:00:15 2025 GMT
Not After : Apr 22 21:00:15 2025 GMT
Subject: CN=7879d43d9f83cefd4e08af27ba3bbc7db755d272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:a6:e2:7f:ee:c8:ae:62:5b:2a:dc:f7:1b:
d0:9d:48:ea:12:5d:b6:e8:14:a7:d6:e2:74:35:75:
bf:f7:a8:fe:e9:30:6c:35:e0:02:ad:86:1c:59:b3:
20:4f:c8:d0:c0:2f:ae:ac:b7:5e:fc:4c:28:2e:73:
6b:00:42:0c:87:b8:2b:b6:db:af:06:fc:ef:ed:71:
57:fa:a5:30:40:fa:d2:21:d4:dd:73:86:b0:7f:49:
33:6b:08:5a:92:15:79:33:04:2d:e6:43:9a:b0:e4:
2a:6b:77:9b:88:4c:6a:4b:b8:e9:5c:dd:4d:9a:58:
b4:ed:05:b1:c3:62:57:79:7c:75:00:97:86:7c:60:
3a:97:99:9a:6a:fc:ac:13:7a:53:70:18:b3:95:26:
8f:48:d7:ea:72:30:ae:ba:a6:f9:50:b0:0b:1e:0c:
7b:d2:e2:c9:ac:28:88:12:be:86:2b:05:d2:99:dc:
29:9c:f7:e2:89:8c:f1:03:c8:82:13:8b:dd:1c:39:
2b:7b:e6:6d:0e:81:ec:44:1e:ce:2f:a5:b4:b2:f0:
70:79:f7:01:af:13:71:00:7d:33:a1:30:62:fb:8a:
5b:f4:23:bc:40:76:75:2e:1b:90:59:7e:db:94:d7:
5d:32:92:ba:cb:76:9d:8d:37:96:85:b8:f2:ef:b3:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:D4:3D:9F:83:CE:FD:4E:08:AF:27:BA:3B:BC:7D:B7:55:D2:72
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:ec:38:61:6f:0f:6c:2a:7c:21:83:60:c5:d7:f0:13:71:
d4:d8:a3:a7:4b:57:28:cb:00:e9:1e:c6:78:87:eb:de:b6:5e:
a3:f9:e7:f7:5f:10:51:c6:ca:f2:08:6a:20:4a:39:26:62:ec:
91:03:76:6e:d0:17:96:f5:a6:ee:3f:87:dc:1b:f4:00:d2:00:
d2:7e:7b:b8:94:0e:c8:79:be:62:7d:59:94:8e:96:9a:d8:4f:
3f:30:d4:5e:81:1b:44:00:f5:6e:1a:5a:bd:48:ad:23:72:4b:
5c:18:1f:55:82:38:ac:7f:49:75:65:61:73:ff:72:3f:64:29:
2e:54:f5:02:e8:c8:ec:03:ba:b9:34:9d:cd:44:8e:cd:8f:f8:
a2:3a:d2:12:60:0e:53:63:92:79:0c:c4:8b:ba:6b:f6:b9:3d:
82:fd:ce:90:29:5a:3f:a0:28:61:c4:66:58:f0:a1:22:a0:d6:
23:c8:86:32:b9:e9:50:d5:e2:a9:03:12:86:f7:6d:28:5e:33:
57:a7:37:9b:27:5b:b7:df:8f:c3:8c:d5:0d:bc:15:da:01:0f:
e6:9f:f1:5c:57:44:26:76:06:6b:f4:1c:cb:0f:0f:82:43:4c:
db:fe:2c:24:e3:4a:ed:dc:9f:14:47:49:66:76:63:46:b2:82:
82:27:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:43 2025 by rpki-client