Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: k6jOCIbqv2FtWGlbi/1MnFk/Qs5CnQmxswO6/1bXX4w=
Subject key identifier: 60:04:C3:C9:22:09:FC:AB:F9:86:2C:ED:F5:5B:75:39:8A:D7:42:E3
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019657CB06F5F2383EFDCF85587B88E761BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 12A2
Signing time: Mon 21 Apr 2025 10:00:45 +0000
Manifest this update: Mon 21 Apr 2025 10:00:45 +0000
Manifest next update: Tue 22 Apr 2025 10:00:45 +0000
Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: Rwc/4zX07XZyKOriI20n4199GnKFuVot3JbT/bc5f/s=)
2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:06:f5:f2:38:3e:fd:cf:85:58:7b:88:e7:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Apr 21 10:00:45 2025 GMT
Not After : Apr 22 10:00:45 2025 GMT
Subject: CN=6004c3c92209fcabf9862cedf55b75398ad742e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:2c:b4:a4:0a:59:27:13:4e:af:9e:ab:7c:
88:77:fe:91:6f:43:5e:90:b9:6d:a1:19:22:11:47:
17:e9:bf:67:b9:3a:81:79:9b:5d:89:56:52:80:d3:
cd:17:1a:6a:13:8c:44:c5:bb:01:17:6a:86:7b:b4:
83:5f:f5:41:cc:26:2c:97:95:22:96:95:5a:6a:c8:
ac:b2:c7:f3:50:04:48:6b:c5:a0:dd:6b:9e:03:65:
68:a7:2f:2c:1b:64:66:d9:80:87:72:20:34:06:e3:
9a:e1:2a:bc:dc:dd:d9:f1:b1:63:4a:0f:5a:2f:cf:
08:6e:8b:27:4f:8d:4b:a0:8e:3b:3d:ba:0c:9a:6b:
c1:8d:fa:65:6e:1f:f0:a4:78:30:65:34:4f:2b:e9:
61:25:fc:60:f2:08:d4:7c:61:d2:90:ed:05:b4:a2:
2d:38:e8:42:12:a5:a3:c8:e7:19:2e:3b:52:6b:a9:
f0:f9:82:55:47:35:8f:a3:15:e6:4b:a8:26:8c:28:
b4:40:2f:ab:70:6e:f5:1d:22:88:e0:97:dc:10:4a:
9d:ea:92:88:02:32:bc:e4:13:12:73:8e:10:00:0d:
8e:3e:2f:bb:8f:b2:37:91:c6:05:4c:68:11:df:c5:
21:40:7f:bc:12:e1:f4:36:43:4c:62:60:32:f3:e9:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:04:C3:C9:22:09:FC:AB:F9:86:2C:ED:F5:5B:75:39:8A:D7:42:E3
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:48:29:88:82:e9:95:3e:3b:79:83:8c:fa:89:7c:81:ea:
96:29:df:d5:1b:7b:45:28:ec:20:52:fe:4b:cb:a3:19:fd:de:
ac:d2:ff:d5:32:9c:e4:a3:03:dc:f3:f9:ba:41:f5:1e:a2:94:
d4:6a:58:fb:97:b1:35:12:36:30:8a:82:90:ec:73:72:85:63:
e2:98:c1:18:74:57:95:8b:f3:46:6a:81:35:f5:84:c0:a7:ac:
a8:b5:af:9a:87:3e:eb:1b:03:1a:30:72:c6:07:27:84:24:1d:
e8:38:45:8a:7a:4c:d3:19:bd:77:83:c9:d1:6f:0e:10:d2:65:
51:ab:fb:f3:ed:d9:99:49:ea:db:2f:ad:cf:1d:8c:93:e9:d6:
82:d8:e0:7d:f1:ef:83:41:23:08:3e:a1:ff:b2:e0:90:47:ae:
14:30:df:91:b6:0d:f1:a8:ca:44:a3:d9:97:5c:76:ad:27:5d:
91:0f:4d:8f:4d:38:39:a1:ac:d8:80:63:01:2f:76:b0:c5:09:
8e:64:5a:25:c2:d6:87:d6:08:47:92:00:88:fd:77:71:06:01:
61:ea:66:73:5a:7a:9e:c3:ec:5e:64:ea:2c:11:ad:0e:07:3d:
2b:68:5e:46:88:ff:86:d2:ca:c4:4a:72:d7:b7:53:e9:43:4b:
65:ec:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:05 2025 by rpki-client