Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: 8xknYnZxPrqbRNbPGuCOqE7NyxChgpSG8/AaTL2ry8M=
Subject key identifier: B3:30:BA:87:7C:A0:B1:84:0B:0C:AA:01:E3:FB:03:0C:9E:1A:1D:13
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 01965914AE875D6B4530B4EE47F2C89FAD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 16:00:49 +0000
Manifest this update: Mon 21 Apr 2025 16:00:49 +0000
Manifest next update: Tue 22 Apr 2025 16:00:49 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: CpR7F2o+SnhuGL/5E0apHNhGu3tFDBQnLAeA5zOsoXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:ae:87:5d:6b:45:30:b4:ee:47:f2:c8:9f:ad:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Apr 21 16:00:49 2025 GMT
Not After : Apr 22 16:00:49 2025 GMT
Subject: CN=b330ba877ca0b1840b0caa01e3fb030c9e1a1d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:46:7f:ce:a2:4e:39:93:c2:db:f7:2e:9e:
92:6f:77:85:c3:87:da:88:46:c5:e5:ba:74:f6:8f:
dd:bf:c2:ca:13:2a:a9:7a:53:e8:0a:06:59:81:83:
4e:35:06:65:50:d0:3f:8e:84:b1:bd:71:16:30:bc:
a5:da:8c:c8:c9:a0:01:a7:02:d3:b8:56:03:3b:b3:
ea:93:66:8b:da:5d:a2:fa:27:1b:72:58:3a:75:57:
0d:cc:1f:c7:3c:96:72:83:5c:5f:8a:c8:01:b6:c3:
f5:b0:9a:69:1e:91:74:90:9d:83:43:ec:84:24:ba:
48:6c:be:37:51:4f:7b:a6:18:01:d2:f2:a1:c6:89:
e5:5b:72:04:5d:25:ad:2e:b2:20:cf:88:d1:34:e5:
a1:72:45:02:7f:8b:97:a1:ff:13:d7:99:1c:be:bc:
e8:48:88:e4:0c:1d:5f:63:90:be:d6:da:69:33:a3:
fd:4c:58:af:99:e5:1c:26:78:03:04:af:e1:c8:9f:
57:dc:0b:af:e6:39:85:fe:d9:d3:86:e6:66:6d:30:
aa:28:e5:f8:ec:65:3c:19:5e:5f:4b:60:ab:2f:a8:
f5:5f:95:d8:77:35:71:91:67:52:06:ef:18:92:69:
83:51:fe:bd:cd:39:b7:44:a5:64:a9:15:f0:f2:6c:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:BA:87:7C:A0:B1:84:0B:0C:AA:01:E3:FB:03:0C:9E:1A:1D:13
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:77:63:06:91:f9:17:4a:2e:09:f7:18:63:79:4f:34:84:cb:
31:b5:b3:a7:6b:4d:19:64:6e:d2:27:df:cf:bd:e4:a9:f8:9f:
11:0a:96:86:83:30:7b:9c:5e:9b:cf:94:78:d2:5d:84:65:70:
7e:dd:0a:34:96:2f:23:80:b4:e3:24:38:6c:c5:bf:9c:4c:87:
8d:c8:f5:df:22:04:97:0c:30:bd:6a:f9:a0:08:55:09:5d:fa:
ec:a9:2e:c6:2e:54:14:23:a5:d7:ff:c4:c8:f2:ef:4b:1e:ea:
b4:6b:03:e2:92:2c:f0:bc:c0:ef:a3:cf:47:da:0d:58:68:c1:
a8:b0:84:db:10:6f:eb:23:a1:29:db:74:8c:ba:af:3e:30:bd:
57:f7:0c:20:a3:e0:6c:2f:2e:8d:34:62:30:4f:9d:9f:c2:d1:
71:f9:4e:11:10:0d:dc:b8:b3:ac:3d:83:0d:f6:be:2f:1b:57:
e0:bb:8c:81:a2:1c:14:65:fb:64:06:ae:9e:17:90:34:65:cc:
46:0e:23:89:7f:d7:2a:17:b5:a1:9a:80:a2:86:24:75:37:81:
7b:41:07:e7:04:6f:47:a9:f1:27:9a:7a:50:58:41:a8:91:e4:
34:97:c3:9f:13:f2:fc:be:a6:d4:1e:c3:f7:a8:ee:05:23:f3:
6f:0a:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:18:01 2025 by rpki-client