Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier: 88fq57xI7XdqrDcS4VuuBIXyPGz6eagalfPMHe04d/4=
Subject key identifier: 4D:02:35:6A:DC:05:63:A1:14:3C:EA:AB:2F:AC:2D:0F:E1:FF:74:90
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer: /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial: 019656EF1219CA6501FB5588AFEE64C9182E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number: 0E1D
Signing time: Mon 21 Apr 2025 06:00:30 +0000
Manifest this update: Mon 21 Apr 2025 06:00:30 +0000
Manifest next update: Tue 22 Apr 2025 06:00:30 +0000
Files and hashes: 1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: 9gF4cs2WrHalwabbRgmM+pjgGjTrcRmOSYRNQif9HQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:12:19:ca:65:01:fb:55:88:af:ee:64:c9:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Validity
Not Before: Apr 21 06:00:30 2025 GMT
Not After : Apr 22 06:00:30 2025 GMT
Subject: CN=4d02356adc0563a1143ceaab2fac2d0fe1ff7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:64:0b:34:93:63:a0:37:0a:62:f9:84:93:
d5:d7:b3:94:d1:57:ba:77:f2:58:dd:81:85:8e:97:
55:b7:92:38:dc:dc:05:33:25:5a:12:bc:4b:ef:dc:
72:4e:66:e4:65:43:15:e5:4a:55:a8:1d:05:14:48:
6c:4f:0e:d6:5a:b9:5b:07:c4:e1:c1:6c:4e:65:9b:
86:ee:40:9b:31:66:22:76:7f:67:82:5b:c3:ed:47:
16:59:f1:9c:e0:b5:2a:46:cd:1c:57:aa:64:8d:13:
71:21:29:66:fe:01:8f:02:49:a1:b1:7e:bb:18:f6:
89:54:14:f6:96:f3:2d:81:3c:15:aa:d1:7b:69:c3:
5e:f7:2f:72:f1:f1:d7:72:0b:b0:96:16:f3:03:00:
05:5f:a6:40:6e:98:2a:53:85:2c:b6:a4:c0:55:af:
f5:ed:a9:6b:af:19:e8:c6:51:91:24:12:46:84:9f:
95:fe:8b:fd:18:62:99:20:ae:d8:61:be:3d:11:f1:
ec:d4:05:eb:84:fc:3f:35:77:75:25:3f:d9:e3:75:
56:b3:a5:4d:06:4c:2c:d0:e0:e6:05:8d:c3:cc:ff:
38:34:5e:e3:6d:f2:d9:e7:aa:81:07:ba:0a:22:2c:
e1:e0:4d:cf:85:e7:fd:b7:b7:02:fa:a0:ce:44:91:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:35:6A:DC:05:63:A1:14:3C:EA:AB:2F:AC:2D:0F:E1:FF:74:90
X509v3 Authority Key Identifier:
keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e3:86:e6:16:8e:6b:98:13:1e:26:3f:ea:44:65:0d:08:e5:
81:46:16:7e:e7:a1:cd:df:43:71:d8:c7:dc:0a:ef:c2:a9:e2:
12:2d:a2:6a:8b:38:e7:e1:a2:34:27:50:a3:69:f2:af:ae:dd:
d0:50:5c:8d:71:8d:d0:31:23:84:f3:6c:f7:50:51:50:ba:1b:
85:11:b3:39:90:73:c2:30:f4:3a:21:5e:66:bf:c5:8a:ab:d0:
7f:69:1c:11:89:c9:16:e8:22:8f:9d:e8:37:e3:58:cb:2f:f8:
89:64:f4:2f:d4:1d:00:39:0d:1d:1b:f5:0c:ae:7c:94:2b:4f:
e0:b4:53:5a:af:5a:0b:eb:6f:7b:b1:50:6a:d4:c9:e9:59:a0:
04:e6:0c:29:b5:cb:c8:d1:1d:73:73:25:45:66:f1:bd:ef:dd:
2c:22:ca:72:be:93:fb:f3:e2:b8:0a:51:7e:25:00:fe:ba:98:
48:d0:85:65:3d:cc:2d:cb:8b:14:b9:a9:8f:49:4f:87:fd:3b:
0f:fd:25:44:f1:e4:e1:26:07:01:02:83:51:ea:e3:5a:cb:70:
4a:74:43:06:34:1c:68:44:8c:0a:77:84:35:55:c5:f0:69:a5:
bb:2a:17:25:74:a1:8e:d2:cd:8d:16:a3:05:c5:ea:75:87:76:
79:50:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:58 2025 by rpki-client