Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: yJQymxPZhTbMDZ+LGPUCbIHRi/RnppDx7IN+eb/rvG0=
Subject key identifier: BA:5A:B5:5A:B4:B7:02:C0:EE:81:EF:E8:7F:27:07:D9:98:F8:53:26
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019636F63A7EDB6AAD05982C9522E5841732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 12B8
Signing time: Tue 15 Apr 2025 01:00:28 +0000
Manifest this update: Tue 15 Apr 2025 01:00:28 +0000
Manifest next update: Wed 16 Apr 2025 01:00:28 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: Ge8v8P8uIWY2lr48Qvi5Q2ZRWa2IMchXDJ8LCHG8oAA=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:3a:7e:db:6a:ad:05:98:2c:95:22:e5:84:17:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Apr 15 01:00:28 2025 GMT
Not After : Apr 16 01:00:28 2025 GMT
Subject: CN=ba5ab55ab4b702c0ee81efe87f2707d998f85326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:11:30:c3:03:81:00:3f:38:76:c0:76:bc:
32:7d:1c:1b:3a:5e:5b:14:39:d7:6c:f8:e6:c7:0c:
d1:9a:89:19:a9:95:1d:9d:0c:cb:e9:fb:fd:c2:f8:
a6:c3:31:8f:89:c8:f2:eb:25:f3:17:46:ab:03:28:
b9:43:e0:6b:e7:96:a9:a6:3f:2b:6f:73:4c:5d:41:
0b:87:dd:b3:f5:ad:af:20:91:9f:91:b1:8c:25:41:
81:d7:fa:71:7d:51:ae:69:bd:23:c6:99:9e:47:40:
07:5f:be:c0:ce:66:a0:24:a9:3b:fa:54:41:cd:8b:
6d:a9:d7:bf:01:ef:96:da:da:29:5a:db:82:46:13:
9d:26:ea:20:00:ff:c3:67:1a:56:9e:48:6c:72:9b:
b2:cc:08:1c:98:ad:73:3e:bd:6c:b2:a2:8c:8b:b3:
80:57:93:d8:69:2c:4b:9e:ef:36:02:09:0d:28:2d:
4b:27:39:b7:6a:73:40:6f:09:76:c8:aa:b7:4b:b2:
d3:4a:a9:86:ff:e5:45:16:42:14:7b:47:84:c6:85:
b3:63:58:37:fe:af:4d:f0:6d:6b:b4:4f:47:c4:5b:
b3:21:61:7d:95:4c:64:97:c8:e4:db:19:96:8e:38:
41:95:c1:ab:7d:73:18:19:73:3e:f0:d9:a2:f4:9b:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:B5:5A:B4:B7:02:C0:EE:81:EF:E8:7F:27:07:D9:98:F8:53:26
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:43:e8:8d:09:f8:8d:2e:55:0d:d6:e2:bf:46:c1:45:37:
15:2e:16:c9:27:d9:e7:8f:ea:b7:44:e0:52:c5:95:e6:65:8b:
4d:e3:ad:c7:1b:68:6d:88:3b:5d:d0:e3:b6:9e:c3:d7:40:14:
30:6f:c8:38:f2:30:55:a0:b3:b3:60:af:1d:6e:5d:25:8c:77:
27:c6:d9:09:77:c7:71:44:74:97:7a:c8:79:28:cd:36:f6:7c:
0c:7a:58:15:d5:74:79:a1:e3:68:81:d3:6a:70:a8:71:7e:27:
e8:ef:b7:50:eb:01:0e:9b:5c:dc:0e:40:e5:f1:3e:fd:9f:cf:
68:85:47:c4:d8:23:ad:e1:ad:fe:00:b1:71:00:7b:58:92:14:
bd:17:07:3d:48:b1:c1:34:2a:a3:c0:8a:d9:03:0b:6a:2c:1b:
71:06:ea:25:50:52:94:05:1c:52:44:3d:bd:3f:4a:ba:c5:ca:
22:78:a4:83:5e:f7:1c:d7:71:66:82:35:44:3e:0b:6b:b7:88:
08:42:f6:ad:62:6c:06:0d:a0:47:51:62:78:d2:7f:88:61:be:
4c:6c:34:a1:e2:06:ce:b1:7a:80:f1:66:e1:4a:a9:f9:91:77:
1d:40:de:b4:d2:f4:30:16:d6:c8:b5:d4:16:88:b9:4c:6b:4d:
49:b2:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:39:31 2025 by rpki-client