Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier: MwbZdsI91tK8dl1hrSC2G6B1Nm/yW21t6Bqk2zLBJn8=
Subject key identifier: D6:F3:D5:84:8C:96:AE:2D:0C:85:32:3E:F0:30:4A:D2:C9:A8:B0:BC
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer: /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial: 01965B39FBACDCCDBDE39E7ED5837174A31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number: 03D7
Signing time: Tue 22 Apr 2025 02:00:48 +0000
Manifest this update: Tue 22 Apr 2025 02:00:48 +0000
Manifest next update: Wed 23 Apr 2025 02:00:48 +0000
Files and hashes: 1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: kY/FC2QP6otggUk/0R0KZ8uGfB7n/agG70plBPL5A68=)
2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:fb:ac:dc:cd:bd:e3:9e:7e:d5:83:71:74:a3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
Validity
Not Before: Apr 22 02:00:48 2025 GMT
Not After : Apr 23 02:00:48 2025 GMT
Subject: CN=d6f3d5848c96ae2d0c85323ef0304ad2c9a8b0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:09:4d:79:b1:14:4b:60:30:ae:1d:f4:9e:
54:6b:5a:9a:68:85:c1:3e:98:c0:92:42:2e:48:a4:
95:84:dd:77:37:bc:cd:7f:dc:95:8e:83:ee:09:05:
ea:76:1e:92:86:36:e4:1e:81:67:a3:2f:0f:74:dc:
f1:44:ea:ac:41:01:ef:b8:b2:de:dd:85:ca:fd:61:
c1:20:89:01:98:ed:b3:46:1d:2a:cd:11:93:a5:47:
d4:23:b7:e2:b8:b3:fe:89:27:1f:4b:ed:30:96:50:
8e:88:ff:83:bb:4d:3f:84:a4:71:37:b3:f2:42:29:
25:0e:a0:8f:0e:8a:06:dc:ae:4b:e1:dd:bc:0c:58:
b2:ed:3b:57:d6:e7:cb:cf:9e:37:9d:2b:10:02:a2:
22:b7:f5:6c:af:33:b8:38:66:9a:19:71:f0:46:32:
f9:cd:88:ad:90:16:ad:fa:30:af:f4:12:34:00:2c:
cc:55:8b:c0:47:97:49:41:f0:d4:77:77:cb:df:df:
f2:56:94:fe:42:a5:e5:3f:78:6b:e7:37:6e:94:f1:
51:a4:1e:2e:68:04:f5:41:21:6b:bd:58:c3:ef:65:
e6:bd:aa:c1:20:85:d3:88:83:78:60:d9:f0:45:ac:
1f:83:3b:5d:7a:6d:9d:d9:f8:13:ba:86:a5:0b:08:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:D5:84:8C:96:AE:2D:0C:85:32:3E:F0:30:4A:D2:C9:A8:B0:BC
X509v3 Authority Key Identifier:
keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:76:9e:6a:82:11:4f:71:b4:0d:24:d3:4f:d2:52:41:e7:
da:0a:e4:83:af:76:13:59:97:21:e1:ee:0e:99:be:f5:d9:cd:
b9:67:8c:cd:81:fa:0a:b7:9d:4d:9e:dc:1d:6d:fb:b9:6b:50:
6e:95:9e:2f:5a:8d:ab:3c:90:f4:b1:34:3a:a6:96:c2:95:27:
b3:35:2b:74:cb:61:29:48:6a:d3:24:ca:a5:e2:e7:1a:db:1a:
60:78:66:1a:da:81:62:96:e4:28:62:0a:84:4f:6f:11:1b:b5:
3b:a8:4d:70:98:b8:29:e1:71:46:3d:83:2e:ee:b3:a6:7d:80:
69:e4:45:83:a6:fa:20:63:0d:8d:07:1c:4c:0f:95:ec:69:47:
34:b2:82:f1:0c:2a:1b:18:3c:5c:72:ba:57:9d:a0:04:49:ac:
1c:b8:0c:2b:d1:0c:2e:63:c8:0f:06:b0:03:51:fa:fc:b4:93:
01:a0:f6:55:9b:25:0c:d6:51:bd:af:fc:5f:6b:c8:35:21:4a:
ef:8d:7c:29:a1:59:68:55:92:92:40:ac:da:0a:1a:a2:d3:63:
29:9e:62:fd:86:1e:31:e1:4a:57:06:20:83:67:c4:a0:f3:17:
18:07:59:e8:64:9f:4b:4a:f2:04:30:fc:a3:b5:f0:9b:2e:0d:
fc:d1:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:20:46 2025 by rpki-client