Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: dE/DtZ6GtIAOW9KNExHBd3/98nwLACSJvCZos4v/8sw=
Subject key identifier: EC:C6:2E:EC:13:39:19:D2:72:07:4F:8A:DD:EF:BE:96:F9:74:4F:D3
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01960A55B77AADE51E445046B6DD7E1DB378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 12C0
Signing time: Sun 06 Apr 2025 09:01:51 +0000
Manifest this update: Sun 06 Apr 2025 09:01:51 +0000
Manifest next update: Mon 07 Apr 2025 09:01:51 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: ev8RmQgFsSgK1D8VC19fG9iUVfTjmHs4tp6I5g66dQo=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:55:b7:7a:ad:e5:1e:44:50:46:b6:dd:7e:1d:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Apr 6 09:01:51 2025 GMT
Not After : Apr 7 09:01:51 2025 GMT
Subject: CN=ecc62eec133919d272074f8addefbe96f9744fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:1f:d2:5f:93:2d:08:79:72:02:34:40:f6:
f0:46:cb:82:4e:fe:59:7a:d8:2b:8e:72:26:d6:53:
a5:3d:a1:89:8f:31:71:96:3b:c8:bc:dd:ca:dd:01:
a7:11:ef:8d:2e:5d:aa:72:7c:13:e8:8a:16:eb:25:
54:47:5f:5c:6a:ad:5e:54:9d:df:6d:ca:3d:63:0e:
1e:8e:76:95:3a:89:01:7e:0a:32:7e:e4:cf:b4:35:
23:d5:ff:ff:fe:6a:46:8b:fa:91:15:a8:bc:24:fa:
35:d2:3e:84:b7:2b:bd:74:34:71:42:40:13:fa:c5:
bc:f0:9e:4c:cb:1b:e9:bb:f0:7b:3a:4e:c6:3a:88:
da:7b:6d:30:48:3b:bb:f5:cc:45:37:dc:3c:30:60:
c2:c7:24:a0:7e:11:16:01:57:47:48:bd:73:a8:c6:
dd:6f:34:a4:20:31:5e:f0:ac:58:a8:5d:d9:0e:9f:
c2:57:f6:c8:56:f3:a6:b0:94:f9:11:7b:68:97:44:
17:7e:ae:ef:ac:72:01:ab:70:93:ce:72:31:c1:70:
ea:ca:70:6a:d0:a8:e2:35:a3:58:2a:3b:4d:a9:d7:
7d:67:e6:23:f7:bc:51:3c:e7:fe:3e:e2:87:9a:a0:
3c:e6:4e:32:d3:48:a1:ce:0d:35:a9:e3:05:28:2c:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:2E:EC:13:39:19:D2:72:07:4F:8A:DD:EF:BE:96:F9:74:4F:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:f5:2f:f8:af:2e:78:a1:5f:12:8e:f3:b3:22:cc:0e:73:
74:32:17:92:96:2b:c5:6d:d8:c2:a6:36:4d:af:e1:d3:64:a0:
fb:cc:5f:2c:2f:50:eb:17:7c:eb:08:e3:b6:82:e8:30:8e:29:
39:c9:d4:41:38:b6:c7:cd:bd:20:08:78:ec:4c:9e:85:db:d9:
7f:16:1d:65:40:e0:43:e9:06:9b:14:75:d6:a4:56:b8:95:c0:
28:29:c2:77:06:83:1c:21:14:36:bc:79:8b:70:34:dc:3a:e2:
a8:42:1b:82:49:0c:c0:74:bb:c1:c4:87:c5:e4:7b:3c:f7:72:
e2:3e:01:78:1e:e2:a0:29:09:07:b2:8a:c8:e7:c1:64:42:de:
b5:22:13:68:b2:0a:09:33:0c:3d:d5:0c:7a:f7:f2:85:b3:70:
03:03:76:bd:05:f1:10:1f:e7:da:94:1c:bd:cf:32:61:28:b9:
1f:c0:0b:a4:8c:f2:a6:c0:ac:24:07:9f:74:c3:a8:b2:13:d7:
ed:73:03:b3:57:e6:b0:43:36:8b:95:24:ee:72:b8:d8:d5:7b:
a6:3c:a1:91:43:37:c8:9b:8e:ff:71:f4:67:2b:06:1e:85:5b:
8e:b9:74:14:56:9a:b7:b1:46:e5:9d:63:11:65:6c:37:2d:24:
6a:e0:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:08 2025 by rpki-client